Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: drEHJ4eOzpUREBHzwNQjJJ0Q4YPhdDe2O9Z+I41XV+4=
Subject key identifier: 76:B6:32:6D:E1:7B:C5:7F:7B:4B:A2:FC:08:05:61:39:9F:F6:37:FC
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 01A0C2568E7B586751BD9C64B9B39E00E64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0D7A
Signing time: Mon 21 Sep 2026 05:00:47 +0000
Manifest this update: Mon 21 Sep 2026 05:00:47 +0000
Manifest next update: Tue 22 Sep 2026 05:00:47 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: 195FyMydkE8BVnH6vaBNACz34JwF7zaxKat0afc36c0=)
2: Bnu29pluL1AD4wD2GgQvr07xtcs.roa (hash: I+PJfEbbOSJZNIrwOCyiS4eKNFmjFbXF4CqvEyNzfEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:8e:7b:58:67:51:bd:9c:64:b9:b3:9e:00:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Sep 21 05:00:47 2026 GMT
Not After : Sep 22 05:00:47 2026 GMT
Subject: CN=76b6326de17bc57f7b4ba2fc080561399ff637fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:4b:f3:cf:6c:83:b9:1c:0c:27:b8:39:65:
5c:d2:64:96:0b:b0:24:2e:9d:27:d4:83:d0:96:2f:
d7:61:07:73:58:73:7f:bc:26:28:5a:7c:f4:9a:f4:
2c:26:6d:7b:de:74:17:1b:4b:81:15:31:c6:d1:39:
dd:e9:01:bf:42:6a:fa:0b:c2:64:91:a0:89:42:42:
41:6e:eb:63:2d:dc:39:85:de:5c:93:d1:39:96:a9:
2e:4e:3f:81:28:5d:d4:59:ea:47:a6:95:59:5e:7b:
42:1b:49:aa:0a:59:ec:4d:f3:2f:73:92:dc:b2:18:
89:fc:d1:37:0c:c3:b1:e5:65:78:52:0b:00:03:43:
23:a6:32:04:c3:e3:5a:b0:a7:f3:94:75:19:3f:82:
32:55:20:e2:e1:b4:0b:a5:a7:63:6c:1b:24:75:d6:
31:8a:79:0e:c1:97:c1:e0:d2:17:42:b6:9c:4c:69:
c3:31:d2:1e:69:c3:02:8b:48:ae:7b:b4:b6:6c:cb:
26:f8:d2:39:0a:9e:53:29:b3:08:74:d5:7c:09:01:
5a:50:72:2b:00:98:6b:bb:5e:13:9c:c2:df:22:70:
45:98:04:d6:ce:84:37:ab:1f:12:2f:24:f6:00:86:
d7:63:cc:5b:28:08:b3:1f:0d:7e:01:86:15:72:89:
77:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:32:6D:E1:7B:C5:7F:7B:4B:A2:FC:08:05:61:39:9F:F6:37:FC
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8e:e5:21:13:d6:67:bf:a2:a3:09:ed:ae:51:a4:fc:7e:22:
55:40:a3:8a:5c:55:c2:eb:28:5a:54:26:56:cd:b3:97:f5:55:
ac:b6:71:cc:9f:5c:8f:17:27:d5:f3:c5:9f:17:2f:51:61:82:
4d:6d:54:0d:e9:09:80:84:37:85:65:82:d6:dd:44:6e:a5:67:
88:96:d3:80:8f:f9:94:91:76:89:7d:bd:cc:23:fe:4a:3f:ce:
5b:5f:66:80:05:62:d9:43:aa:56:1b:c7:23:24:38:80:7b:65:
6c:45:af:68:10:d1:fc:ef:fd:fa:68:e3:5e:25:93:2d:dc:8d:
e1:91:be:b1:ea:0e:34:e2:0f:ae:ed:df:ff:76:09:8f:9a:4a:
07:8b:d6:c4:5f:9a:85:a6:d7:75:64:65:36:9a:bf:32:e7:9d:
f8:78:f0:ee:cb:07:b2:0f:45:c0:6a:1c:44:14:6c:70:d1:14:
1b:87:41:ad:cb:51:75:f0:eb:f6:37:a1:d0:5c:04:30:e4:ee:
c4:36:c5:cd:5a:65:5e:93:6d:e2:3f:8d:38:de:45:57:94:f7:
b1:8b:d0:7c:c3:1f:a4:11:c6:e9:2b:3f:b8:0e:a2:b5:53:f4:
6f:09:27:d9:15:1b:3e:13:1d:03:81:af:49:c9:86:97:9d:ba:
88:b0:15:c3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDCVo57WGdRvZxkubOeAOZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTc4ZTM4YmI4ZWY5OGJiZjJiMzFiODk2Mzk3ZjQ4Nzlm
NmIwZjcwHhcNMjYwOTIxMDUwMDQ3WhcNMjYwOTIyMDUwMDQ3WjAzMTEwLwYDVQQD
Eyg3NmI2MzI2ZGUxN2JjNTdmN2I0YmEyZmMwODA1NjEzOTlmZjYzN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L5L889sg7kcDCe4OWVc0mSWC7Ak
Lp0n1IPQli/XYQdzWHN/vCYoWnz0mvQsJm173nQXG0uBFTHG0Tnd6QG/Qmr6C8Jk
kaCJQkJBbutjLdw5hd5ck9E5lqkuTj+BKF3UWepHppVZXntCG0mqClnsTfMvc5Lc
shiJ/NE3DMOx5WV4UgsAA0MjpjIEw+NasKfzlHUZP4IyVSDi4bQLpadjbBskddYx
inkOwZfB4NIXQracTGnDMdIeacMCi0iue7S2bMsm+NI5Cp5TKbMIdNV8CQFaUHIr
AJhru14TnMLfInBFmATWzoQ3qx8SLyT2AIbXY8xbKAizHw1+AYYVcol3MQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHa2Mm3he8V/e0ui/AgFYTmf9jf8MB8GA1UdIwQY
MBaAFPoXjji7jvmLvysxuJY5f0h59rD3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oZU9PTHVPLVl1X0t6RzRsamxfU0huMnNQYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNjZlMDZhLTVlNDctNGZhOS1iZDNi
LTBiYzQ3ZjRmZjcxNC8xLzEtaGVPT0x1Ty1ZdV9Lekc0bGpsX1NIbjJzUGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U0LzY2ZTA2YS01ZTQ3LTRmYTktYmQzYi0wYmM0N2Y0ZmY3
MTQvMS8xLWhlT09MdU8tWXVfS3pHNGxqbF9TSG4yc1BjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYo7l
IRPWZ7+iowntrlGk/H4iVUCjilxVwusoWlQmVs2zl/VVrLZxzJ9cjxcn1fPFnxcv
UWGCTW1UDekJgIQ3hWWC1t1EbqVniJbTgI/5lJF2iX29zCP+Sj/OW19mgAVi2UOq
VhvHIyQ4gHtlbEWvaBDR/O/9+mjjXiWTLdyN4ZG+seoONOIPru3f/3YJj5pKB4vW
xF+ahabXdWRlNpq/Mued+Hjw7ssHsg9FwGocRBRscNEUG4dBrctRdfDr9jeh0FwE
MOTuxDbFzVplXpNt4j+NON5FV5T3sYvQfMMfpBHG6Ss/uA6itVP0bwkn2RUbPhMd
A4GvScmGl526iLAVww==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:58 2026 by rpki-client