
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File: S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier: FUbAW99ZegBotBW+S/k5Cjq5w40n1FrVRTXqmAhQAcs=
Subject key identifier: 3C:13:07:75:7C:8F:06:2C:F3:12:99:76:97:B2:9A:60:8C:6C:5E:89
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 01A0BF558ACF1F7BA97BCD30E6C442F85AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number: 1A81
Signing time: Sun 20 Sep 2026 15:00:49 +0000
Manifest this update: Sun 20 Sep 2026 15:00:49 +0000
Manifest next update: Mon 21 Sep 2026 15:00:49 +0000
Files and hashes: 1: 8JTBQJyqUxIFa2P7t0W6NdfJ7CI.roa (hash: bvR7uwT6CerdByDmx1xzty2bHjJMPuqJsJHdeopKM9Y=)
2: IAcgHGi2lFpmozwldAdI6otCCf8.roa (hash: BMvZpTPd4wPptVWAuFWagP2MsiisY343W0Dlxwe5jk8=)
3: PGdzQPbVNWOAAR-X1BVXtgxofwg.roa (hash: dnLVHCkUAzZBzW5KJgWgdjrJ3f9Bmjq6lfV0HEQ9YaI=)
4: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: TeC4iEHrxB8sUg3OrDI5LMKIlz0ovMQkYTuft+rg/qQ=)
5: UeKejWBuRMBTzBVkphHiwU6F1G4.roa (hash: 4Va/WDHUaUbqMZBtGC/uemvvWN5D2KRgvotniu/r8z8=)
6: bspFglFUNNfB3BfctmrtidkBJJ0.roa (hash: b4qzed65X33LBM+fRSUuJ6eNd3msfTHJCKt5GOuVSMY=)
7: yf5DE453VSZNaMBDFecfcs8_ti8.roa (hash: /6VfJrCwSdAcWd7VeCBpZye97Dzq0Ew18Tz6xEOZHdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:8a:cf:1f:7b:a9:7b:cd:30:e6:c4:42:f8:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Sep 20 15:00:49 2026 GMT
Not After : Sep 21 15:00:49 2026 GMT
Subject: CN=3c1307757c8f062cf312997697b29a608c6c5e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:be:fc:99:2c:f6:c6:29:dd:c5:76:f0:11:
55:84:dc:de:a2:58:76:71:63:5e:ab:65:d1:71:25:
91:37:51:16:1a:33:cf:6f:85:63:6c:1d:16:22:8c:
9b:e2:d9:e4:cb:19:36:82:d6:3b:79:08:9a:e6:ea:
07:5a:d4:ee:19:26:81:2f:13:d7:d0:67:c0:33:b6:
09:1a:4b:b1:06:04:b6:7d:71:9d:06:3c:34:16:49:
2a:e6:6e:43:74:4c:6b:f7:a2:ab:39:d2:b5:f3:8d:
ab:98:ad:74:91:32:f9:29:18:e6:3e:0c:8f:a0:d4:
db:a8:dd:cc:79:c3:3d:eb:1c:06:cf:8b:53:d2:a2:
6e:12:93:48:30:c0:4f:34:df:84:4f:2c:32:f0:39:
3f:0d:e0:b5:a0:81:dd:fe:9b:9e:16:85:97:4d:7a:
ff:ed:1b:87:20:bf:dc:b8:9a:18:72:25:53:2e:be:
f5:66:20:28:3e:e7:bb:1b:f7:1b:22:ca:a9:63:90:
82:7b:78:d1:2e:69:be:76:91:9e:d3:00:d2:2f:88:
38:63:05:94:6f:39:f1:68:21:92:4a:41:39:d4:00:
f3:ab:72:a0:fc:02:04:74:6a:ac:5f:52:5d:50:d5:
c3:6e:c7:2a:b2:37:d2:eb:da:e2:33:78:92:2b:47:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:07:75:7C:8F:06:2C:F3:12:99:76:97:B2:9A:60:8C:6C:5E:89
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b3:e0:d9:6e:04:0c:e5:75:c2:d2:9f:b0:99:05:b8:4f:65:
62:bd:37:6d:57:d5:ed:60:18:38:26:ce:2f:33:85:ce:88:b4:
b4:61:1f:c7:82:1f:df:c8:4f:88:21:b2:bf:2f:2c:6c:62:49:
03:62:ed:45:c7:fc:73:6b:14:21:16:6e:13:6a:f7:ab:ad:46:
ac:99:32:ca:3f:5c:7a:de:40:2f:cf:be:9c:ed:32:e0:d3:41:
c5:fa:c1:66:7a:9c:f3:13:e4:3d:73:19:7a:23:60:ec:39:bd:
46:57:d6:58:4b:0f:cc:e4:36:4f:f3:8f:6a:d4:e7:63:9e:5f:
06:ab:42:b1:00:56:e2:87:5e:41:bd:21:eb:c3:6a:12:0a:f0:
90:ab:94:15:96:84:58:d4:69:bd:39:32:bf:a8:48:4c:c3:84:
dc:3c:f7:ad:65:5e:ad:30:fa:30:2c:88:86:58:3e:81:ef:40:
4c:6b:31:5f:03:e7:50:81:21:9b:46:82:27:7a:8a:72:9b:2f:
ae:0a:c1:08:d2:69:31:9c:dd:f5:ca:00:ca:5e:d6:a3:d6:95:
4c:a8:ad:14:fb:86:9f:b7:dc:28:c9:39:c0:65:20:3d:8d:b8:
1c:a8:11:aa:c6:3a:d8:1c:46:d0:4b:df:9f:b4:9a:78:cf:ca:
6e:f9:d3:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/VYrPH3upe80w5sRC+FroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj
NDkyNTUwHhcNMjYwOTIwMTUwMDQ5WhcNMjYwOTIxMTUwMDQ5WjAzMTEwLwYDVQQD
EygzYzEzMDc3NTdjOGYwNjJjZjMxMjk5NzY5N2IyOWE2MDhjNmM1ZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeu+/Jks9sYp3cV28BFVhNzeolh2
cWNeq2XRcSWRN1EWGjPPb4VjbB0WIoyb4tnkyxk2gtY7eQia5uoHWtTuGSaBLxPX
0GfAM7YJGkuxBgS2fXGdBjw0Fkkq5m5DdExr96KrOdK1842rmK10kTL5KRjmPgyP
oNTbqN3MecM96xwGz4tT0qJuEpNIMMBPNN+ETywy8Dk/DeC1oIHd/pueFoWXTXr/
7RuHIL/cuJoYciVTLr71ZiAoPue7G/cbIsqpY5CCe3jRLmm+dpGe0wDSL4g4YwWU
bznxaCGSSkE51ADzq3Kg/AIEdGqsX1JdUNXDbscqsjfS69riM3iSK0dB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwTB3V8jwYs8xKZdpeymmCMbF6JMB8GA1UdIwQY
MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct
MzZhZTc2ZWU5ODNlLzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl
LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLPg2W4E
DOV1wtKfsJkFuE9lYr03bVfV7WAYOCbOLzOFzoi0tGEfx4If38hPiCGyvy8sbGJJ
A2LtRcf8c2sUIRZuE2r3q61GrJkyyj9cet5AL8++nO0y4NNBxfrBZnqc8xPkPXMZ
eiNg7Dm9RlfWWEsPzOQ2T/OPatTnY55fBqtCsQBW4odeQb0h68NqEgrwkKuUFZaE
WNRpvTkyv6hITMOE3Dz3rWVerTD6MCyIhlg+ge9ATGsxXwPnUIEhm0aCJ3qKcpsv
rgrBCNJpMZzd9coAyl7Wo9aVTKitFPuGn7fcKMk5wGUgPY24HKgRqsY62BxG0Evf
n7SaeM/KbvnTvQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:54 2026 by rpki-client