Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: 82b8vv9tIikAWeAaNuvEtI5ohDMMOOlD1/ZroA550w8=
Subject key identifier: 8F:83:D5:C6:E1:49:03:F2:39:0F:16:90:37:84:2A:C9:C0:39:59:CC
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 01A0C8218BE27B388BAF4573DF36DAC7EF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 08:00:36 +0000
Manifest this update: Tue 22 Sep 2026 08:00:36 +0000
Manifest next update: Wed 23 Sep 2026 08:00:36 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: PZxLrfoAKJh1jkSj0kIlB5Yra1+BrHra29sKtCYLaEw=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:8b:e2:7b:38:8b:af:45:73:df:36:da:c7:ef:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Sep 22 08:00:36 2026 GMT
Not After : Sep 23 08:00:36 2026 GMT
Subject: CN=8f83d5c6e14903f2390f169037842ac9c03959cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:2b:f4:e4:ca:9a:80:55:1e:bd:0f:67:e4:
49:86:bb:ff:ab:09:c1:cd:0c:a1:86:fa:b6:a8:21:
35:97:e7:93:63:11:44:77:fb:a8:31:c0:b1:6e:0b:
49:c9:19:98:05:e7:54:d6:93:60:74:03:c8:79:71:
0d:37:8b:e5:0b:d2:51:e1:b0:2f:39:76:36:a8:68:
85:e2:df:75:5f:b0:fa:bf:1c:05:34:f6:92:97:3a:
a7:9b:9a:d8:95:95:ac:e6:30:6a:8a:5f:3f:8a:fa:
c2:5d:0b:a7:61:ee:68:72:ba:0a:5b:75:39:73:75:
bd:b4:73:ef:ee:2b:f9:63:cb:1a:d6:10:38:c2:02:
0d:96:95:bc:6c:74:d3:6f:b4:9e:90:52:1d:c1:3f:
a7:c6:8a:09:e6:65:d9:fe:32:5f:20:76:a4:a2:1f:
57:fa:bf:55:fb:a5:bf:29:f2:2c:35:23:89:49:8a:
28:27:c4:d1:fe:94:ba:57:cb:7c:da:4b:30:46:d4:
04:7b:53:99:40:e5:43:65:b1:e0:a1:1c:08:0d:cc:
5a:9e:09:e1:af:4e:6d:80:8c:69:3c:04:ad:bd:ce:
7d:ad:c5:18:41:ec:17:bc:dd:de:35:15:5a:20:51:
d6:d8:b4:f9:8b:ca:02:38:9a:24:a7:d3:2b:63:98:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:83:D5:C6:E1:49:03:F2:39:0F:16:90:37:84:2A:C9:C0:39:59:CC
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:56:ba:d8:c3:0e:1f:de:a5:01:44:3d:20:2c:df:05:9f:e0:
55:16:33:02:89:5b:36:67:c2:aa:b2:34:26:a3:81:39:37:c3:
b1:76:2f:cd:29:84:ff:57:19:eb:05:84:4c:5e:3e:5c:86:b4:
16:23:78:b6:cf:f6:3c:20:40:b4:6a:28:47:5d:39:e6:3c:ad:
e5:30:f8:c9:71:68:0d:e0:de:d4:62:93:38:c4:51:bc:9e:5d:
c1:59:f8:1e:66:c2:2c:a5:8b:c8:57:d8:a1:09:a9:28:11:f8:
d7:d9:f0:91:57:a0:2c:db:bd:36:cf:9d:23:30:c4:59:c9:e0:
dc:a0:04:bd:c5:83:bb:ab:e4:0f:c1:7a:11:4c:30:1c:78:b7:
67:d0:2a:1a:4d:79:1e:d9:cb:5f:56:b0:84:21:ab:0a:c3:2b:
5f:ea:84:5b:56:ab:f7:a9:4b:63:70:5a:60:fa:05:ff:5a:6c:
4e:96:fc:fa:cc:c2:76:b6:47:25:0b:a1:ec:84:56:1e:00:54:
41:a3:cc:18:b0:d3:83:2f:bf:c6:d4:51:78:0a:23:ee:f9:4a:
5b:e7:57:84:f9:ac:eb:d6:a1:d7:2e:f4:fa:62:06:2e:8d:15:
55:a5:0b:ea:eb:99:17:bf:52:24:a9:be:98:db:6a:9d:ad:c0:
3d:ab:0f:23
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDIIYvieziLr0Vz3zbax+9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOTVlY2RhYTM1OWE2ZjgzNTU1NzNkMzkwMDFiYWEzNTg3
NGJlZDIwHhcNMjYwOTIyMDgwMDM2WhcNMjYwOTIzMDgwMDM2WjAzMTEwLwYDVQQD
Eyg4ZjgzZDVjNmUxNDkwM2YyMzkwZjE2OTAzNzg0MmFjOWMwMzk1OWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4or9OTKmoBVHr0PZ+RJhrv/qwnB
zQyhhvq2qCE1l+eTYxFEd/uoMcCxbgtJyRmYBedU1pNgdAPIeXENN4vlC9JR4bAv
OXY2qGiF4t91X7D6vxwFNPaSlzqnm5rYlZWs5jBqil8/ivrCXQunYe5ocroKW3U5
c3W9tHPv7iv5Y8sa1hA4wgINlpW8bHTTb7SekFIdwT+nxooJ5mXZ/jJfIHakoh9X
+r9V+6W/KfIsNSOJSYooJ8TR/pS6V8t82kswRtQEe1OZQOVDZbHgoRwIDcxangnh
r05tgIxpPAStvc59rcUYQewXvN3eNRVaIFHW2LT5i8oCOJokp9MrY5hCCwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI+D1cbhSQPyOQ8WkDeEKsnAOVnMMB8GA1UdIwQY
MBaAFPqV7NqjWab4NVVz05ABuqNYdL7SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wWHMycU5acHZnMVZYUFRrQUc2bzFoMHZ0SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGJiNWM3LTk0NjAtNDAwOS04ZTdk
LTFjMTdkNTAyZDRkZi8xLzEtcFhzMnFOWnB2ZzFWWFBUa0FHNm8xaDB2dEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlL2RiYjVjNy05NDYwLTQwMDktOGU3ZC0xYzE3ZDUwMmQ0
ZGYvMS8xLXBYczJxTlpwdmcxVlhQVGtBRzZvMWgwdnRJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1a6
2MMOH96lAUQ9ICzfBZ/gVRYzAolbNmfCqrI0JqOBOTfDsXYvzSmE/1cZ6wWETF4+
XIa0FiN4ts/2PCBAtGooR1055jyt5TD4yXFoDeDe1GKTOMRRvJ5dwVn4HmbCLKWL
yFfYoQmpKBH419nwkVegLNu9Ns+dIzDEWcng3KAEvcWDu6vkD8F6EUwwHHi3Z9Aq
Gk15HtnLX1awhCGrCsMrX+qEW1ar96lLY3BaYPoF/1psTpb8+szCdrZHJQuh7IRW
HgBUQaPMGLDTgy+/xtRReAoj7vlKW+dXhPms69ah1y70+mIGLo0VVaUL6uuZF79S
JKm+mNtqna3APasPIw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:12:26 2026 by rpki-client