Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: HSsZDdoTKr6A3SpvSOWhQcRoA0wPfzkAWpKNtM4zYjg=
Subject key identifier: F2:08:5D:59:D9:87:CB:12:6B:D6:99:6E:14:AB:9A:62:A1:31:06:6A
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 01A0C8C673E89EED82377FDCB3B921CAA063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 19AC
Signing time: Tue 22 Sep 2026 11:00:43 +0000
Manifest this update: Tue 22 Sep 2026 11:00:43 +0000
Manifest next update: Wed 23 Sep 2026 11:00:43 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: bsfAEgVQ7n0EScKTmpZ8o0voUZzwb5s6wFbGpD/mSyg=)
2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:73:e8:9e:ed:82:37:7f:dc:b3:b9:21:ca:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Sep 22 11:00:43 2026 GMT
Not After : Sep 23 11:00:43 2026 GMT
Subject: CN=f2085d59d987cb126bd6996e14ab9a62a131066a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:88:52:c0:6e:a1:2e:44:c2:0e:12:93:21:
89:8f:ad:67:29:03:cb:15:26:7d:56:9f:ad:99:85:
a4:ab:59:a2:bf:3a:c5:5c:dd:b5:f8:5d:9b:42:9e:
47:2a:11:90:6c:28:a5:78:eb:37:f7:fd:72:64:4c:
1c:c3:3b:4c:c7:a2:b6:be:36:65:c8:e0:6a:59:87:
0b:47:66:cb:c9:82:69:91:ce:d7:69:28:dc:e9:ae:
b2:08:da:a0:5e:a9:b4:09:fa:36:2e:c6:6f:7b:c4:
c3:a2:6f:be:fd:01:50:a5:08:ab:b3:c1:41:a8:bc:
6f:6b:05:a2:a3:f3:35:92:01:cc:6f:bd:e0:89:1e:
8d:68:0c:9f:b6:2e:c6:02:f9:62:11:8c:9a:f7:3f:
d1:e6:4e:7c:02:30:56:42:ab:94:93:b0:37:68:26:
f1:e0:e7:76:a5:81:fd:3a:15:ac:de:9d:66:ef:43:
24:7d:5b:52:25:da:68:cb:5b:61:d2:9b:01:e0:bc:
6f:c5:76:f0:22:fe:68:25:4b:12:72:4b:0f:0a:db:
8a:c4:79:cf:68:3d:26:4d:81:16:2f:56:37:01:85:
27:9f:fb:57:70:b0:4c:ea:4f:f9:42:d4:dc:cb:e1:
28:e8:67:4f:31:0c:54:e7:34:62:10:0c:4b:fa:81:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:5D:59:D9:87:CB:12:6B:D6:99:6E:14:AB:9A:62:A1:31:06:6A
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a6:48:9a:1c:ff:06:00:42:77:a5:da:df:9e:af:b1:19:86:
7c:f5:cc:a9:14:01:b1:56:76:40:42:7b:3a:7a:20:a6:b0:77:
24:ea:9e:5f:bd:de:07:e5:71:c0:7b:b5:bd:86:ac:57:77:fc:
81:f0:3b:52:6e:8d:5b:ed:af:81:6f:26:72:bb:67:fd:30:7e:
26:a5:7b:16:f1:57:0b:e2:c0:30:a1:b8:63:e4:a0:c6:96:35:
bb:e8:aa:44:39:5b:96:27:a2:42:89:a0:7d:40:59:c3:45:fc:
2a:59:6b:8b:96:7f:09:6c:8f:96:5a:1c:5e:a4:48:2a:cd:c7:
23:bf:a0:9f:1a:61:97:5f:d0:3f:35:97:9c:dc:5a:8d:91:57:
42:6e:fc:1c:c8:07:b0:e6:0f:31:ca:47:01:d4:62:03:cb:41:
a9:26:fa:ea:1a:ce:6a:cf:61:b3:66:d6:01:88:2d:14:4e:03:
1f:23:fd:03:c2:52:4a:0b:f2:69:59:e1:21:f2:36:bd:04:d3:
16:0d:04:a0:33:ff:cf:7b:f9:f0:39:5f:8d:60:1b:c0:50:6e:
e0:87:6b:e5:9c:8e:16:95:88:63:20:db:fc:33:16:5f:45:ac:
d1:1d:e1:65:49:3c:9e:a0:7e:a0:07:bc:ba:9a:81:0b:92:44:
57:f3:aa:91
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDIxnPonu2CN3/cs7khyqBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4M2NjYWVmOWM5MTEyMGVjNmZiMTRmZjRjNGM1NzQ1YTAy
MzliNzcwHhcNMjYwOTIyMTEwMDQzWhcNMjYwOTIzMTEwMDQzWjAzMTEwLwYDVQQD
EyhmMjA4NWQ1OWQ5ODdjYjEyNmJkNjk5NmUxNGFiOWE2MmExMzEwNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUqIUsBuoS5Ewg4SkyGJj61nKQPL
FSZ9Vp+tmYWkq1mivzrFXN21+F2bQp5HKhGQbCileOs39/1yZEwcwztMx6K2vjZl
yOBqWYcLR2bLyYJpkc7XaSjc6a6yCNqgXqm0Cfo2LsZve8TDom++/QFQpQirs8FB
qLxvawWio/M1kgHMb73giR6NaAyfti7GAvliEYya9z/R5k58AjBWQquUk7A3aCbx
4Od2pYH9OhWs3p1m70MkfVtSJdpoy1th0psB4LxvxXbwIv5oJUsScksPCtuKxHnP
aD0mTYEWL1Y3AYUnn/tXcLBM6k/5QtTcy+Eo6GdPMQxU5zRiEAxL+oEGzQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPIIXVnZh8sSa9aZbhSrmmKhMQZqMB8GA1UdIwQY
MBaAFPg8yu+ckRIOxvsU/0xMV0WgI5t3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Eeks3NXlSRWc3Ry14VF9URXhYUmFBam0zYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNDVmY2Q1LTg4MTItNDMyZC1iNTM3
LTc2OTgyZjAzZWEwYy8xLzEtRHpLNzV5UkVnN0cteFRfVEV4WFJhQWptM2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JmLzQ1ZmNkNS04ODEyLTQzMmQtYjUzNy03Njk4MmYwM2Vh
MGMvMS8xLUR6Szc1eVJFZzdHLXhUX1RFeFhSYUFqbTNjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6ZI
mhz/BgBCd6Xa356vsRmGfPXMqRQBsVZ2QEJ7OnogprB3JOqeX73eB+VxwHu1vYas
V3f8gfA7Um6NW+2vgW8mcrtn/TB+JqV7FvFXC+LAMKG4Y+SgxpY1u+iqRDlbliei
QomgfUBZw0X8Kllri5Z/CWyPllocXqRIKs3HI7+gnxphl1/QPzWXnNxajZFXQm78
HMgHsOYPMcpHAdRiA8tBqSb66hrOas9hs2bWAYgtFE4DHyP9A8JSSgvyaVnhIfI2
vQTTFg0EoDP/z3v58DlfjWAbwFBu4Idr5ZyOFpWIYyDb/DMWX0Ws0R3hZUk8nqB+
oAe8upqBC5JEV/OqkQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:24:47 2026 by rpki-client