Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: SzkzIik5gzwyyCzmZdykuvGqYYicDkPthPtOfHS+1kk=
Subject key identifier: 04:38:0E:EE:00:F7:9E:1C:32:BB:AD:97:C2:44:CB:C9:E2:FE:C9:87
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 01A120C0B1BC163613489518A3BFEFE10928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0FC5
Signing time: Fri 09 Oct 2026 13:01:01 +0000
Manifest this update: Fri 09 Oct 2026 13:01:01 +0000
Manifest next update: Sat 10 Oct 2026 13:01:01 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: LuXzAcQ/WaxHrvxj1IS2vCOuLlJz3cZjmmvomuax5Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:b1:bc:16:36:13:48:95:18:a3:bf:ef:e1:09:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Oct 9 13:01:01 2026 GMT
Not After : Oct 10 13:01:01 2026 GMT
Subject: CN=04380eee00f79e1c32bbad97c244cbc9e2fec987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:6f:9c:02:65:33:80:65:b4:0d:ba:19:04:
00:47:3a:65:fa:5a:23:99:1e:b0:f9:a0:e6:73:46:
3f:ff:70:e4:78:13:4e:ff:f4:a5:71:9c:df:cc:6f:
0c:ce:30:93:35:5f:75:0b:71:0f:14:d6:88:d1:78:
33:4b:59:30:02:fb:c0:f9:9b:06:3c:1b:99:a5:23:
2a:3c:47:4f:80:e6:c0:e2:e9:cd:6e:bd:49:ec:5f:
5d:d8:34:6e:2a:72:22:c7:b2:c8:45:11:04:a0:0a:
a5:82:e9:46:d0:ce:77:d2:36:c5:3f:d6:17:3c:0a:
db:88:36:42:e8:3e:12:b6:e6:a0:ed:38:c4:c6:73:
08:36:1d:8e:7c:8f:00:f4:d4:e9:44:29:a0:55:42:
27:40:23:f6:fa:29:56:f2:fa:ab:76:c4:0c:04:d0:
87:1a:2f:b3:0e:1d:ab:c5:5c:8b:78:5f:12:4f:12:
1c:8d:1d:3e:e3:ae:6a:36:33:0e:48:c2:c4:6d:ed:
91:74:eb:72:3f:8f:ad:3f:ca:04:8e:98:c4:59:df:
0a:c3:f0:b0:63:56:03:97:00:19:b1:66:99:1b:4e:
78:22:9a:ca:0b:5a:5e:9e:20:9a:eb:d8:23:df:f4:
45:cf:c6:f7:29:f3:eb:6f:6e:6f:c4:0b:66:18:48:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:0E:EE:00:F7:9E:1C:32:BB:AD:97:C2:44:CB:C9:E2:FE:C9:87
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fd:13:56:a0:c3:59:4f:82:bf:8a:cc:34:ac:ff:20:90:1d:
2d:23:fa:65:07:be:55:56:6e:62:4f:fb:1c:09:bd:14:49:27:
00:28:d1:9b:7c:6c:11:38:a4:36:8e:6d:14:2f:b2:2f:7f:82:
da:f8:7b:a0:e6:6b:5a:24:19:5d:ec:81:4a:38:2c:7c:32:15:
11:8a:cf:2f:4e:74:83:f7:a7:30:4d:3f:07:3a:48:41:f2:23:
ec:64:8e:e9:0a:c7:28:2c:d4:83:8b:b6:8a:4b:56:20:75:9b:
e7:2e:bf:56:fb:f1:6a:2e:1e:e4:c7:65:37:8f:06:72:02:5f:
a5:b0:a5:9b:94:5c:0a:e8:68:ae:db:c2:c0:fd:ca:23:e1:d1:
f8:bc:93:ab:58:41:fd:38:0b:4f:3c:b8:78:e7:e8:48:8f:eb:
d0:af:cf:65:c5:92:67:ff:82:5b:34:bd:49:b0:68:ae:50:ac:
0b:71:cf:a7:a8:0c:f0:76:2c:cc:37:f0:64:ba:a6:c6:b1:85:
b5:2c:88:12:32:d7:de:0e:37:60:27:aa:bb:3a:be:e1:4b:c3:
18:1b:1a:42:8b:e8:fa:e6:e2:0e:c0:f2:6c:94:c6:96:96:fd:
b1:dc:d3:38:b9:14:cd:a2:5a:5e:b9:8d:9b:bd:6b:0e:08:91:
95:ba:d5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgwLG8FjYTSJUYo7/v4QkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTg3YTBhYmIzZWVlNDExMDMzOGI3ZDhmM2Y3ZTdlMTI1
YmU2YzQwHhcNMjYxMDA5MTMwMTAxWhcNMjYxMDEwMTMwMTAxWjAzMTEwLwYDVQQD
EygwNDM4MGVlZTAwZjc5ZTFjMzJiYmFkOTdjMjQ0Y2JjOWUyZmVjOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n9vnAJlM4BltA26GQQARzpl+loj
mR6w+aDmc0Y//3DkeBNO//SlcZzfzG8MzjCTNV91C3EPFNaI0XgzS1kwAvvA+ZsG
PBuZpSMqPEdPgObA4unNbr1J7F9d2DRuKnIix7LIRREEoAqlgulG0M530jbFP9YX
PArbiDZC6D4Stuag7TjExnMINh2OfI8A9NTpRCmgVUInQCP2+ilW8vqrdsQMBNCH
Gi+zDh2rxVyLeF8STxIcjR0+465qNjMOSMLEbe2RdOtyP4+tP8oEjpjEWd8Kw/Cw
Y1YDlwAZsWaZG054IprKC1peniCa69gj3/RFz8b3KfPrb25vxAtmGEhzCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ4Du4A954cMrutl8JEy8ni/smHMB8GA1UdIwQY
MBaAFNcYegq7Pu5BEDOLfY8/fn4SW+bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEt
YzgwMzkxZWFjOWU2LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEtYzgwMzkxZWFjOWU2
LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApf0TVqDD
WU+Cv4rMNKz/IJAdLSP6ZQe+VVZuYk/7HAm9FEknACjRm3xsETikNo5tFC+yL3+C
2vh7oOZrWiQZXeyBSjgsfDIVEYrPL050g/enME0/BzpIQfIj7GSO6QrHKCzUg4u2
iktWIHWb5y6/Vvvxai4e5MdlN48GcgJfpbClm5RcCuhortvCwP3KI+HR+LyTq1hB
/TgLTzy4eOfoSI/r0K/PZcWSZ/+CWzS9SbBorlCsC3HPp6gM8HYszDfwZLqmxrGF
tSyIEjLX3g43YCequzq+4UvDGBsaQovo+ubiDsDybJTGlpb9sdzTOLkUzaJaXrmN
m71rDgiRlbrVmg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:22:54 2026 by rpki-client