Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: R7LNW2xqgCfWfNOoakcztQ4P8f/g4mlftGPW+K66SUw=
Subject key identifier: 4A:12:8D:84:5C:43:28:84:96:3B:D2:50:2E:D8:18:30:EC:52:87:7E
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 01A140BA238CC86C42734D36626216002621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 18:01:42 +0000
Manifest this update: Thu 15 Oct 2026 18:01:42 +0000
Manifest next update: Fri 16 Oct 2026 18:01:42 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: /Vf7IqAARMTq7AdUBoYREgWh5pt9fV4zL4RRpOOQNrg=)
2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:ba:23:8c:c8:6c:42:73:4d:36:62:62:16:00:26:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Oct 15 18:01:42 2026 GMT
Not After : Oct 16 18:01:42 2026 GMT
Subject: CN=4a128d845c432884963bd2502ed81830ec52877e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:d2:e2:b9:0f:96:2f:21:12:57:e0:17:8b:
86:1d:a9:2c:e9:23:58:c2:f5:cd:6d:d1:47:30:b9:
f9:b3:b7:2c:7e:93:31:63:d4:93:b9:98:38:49:7c:
c0:47:bc:95:c2:df:a6:01:d6:e6:31:66:68:4a:fe:
44:59:2a:01:79:d7:e4:aa:fd:7d:f7:24:ec:48:e7:
8e:40:32:10:66:94:a5:ad:d7:6b:75:bc:5e:4e:fd:
74:3b:dd:89:6d:e7:41:61:4b:38:f2:92:0e:0a:55:
9f:3d:ca:74:13:b5:57:63:46:4a:41:b5:5c:0e:45:
24:56:2f:c7:c6:55:3b:68:be:ac:ba:f9:9c:ae:7f:
3f:34:7a:b6:91:0f:27:6c:e1:bc:af:00:41:59:10:
c0:3c:0e:d7:c1:a0:ce:c1:f5:ae:d3:b4:00:e8:5a:
5b:2a:0e:54:f3:92:5d:e3:61:84:5b:b4:88:3b:84:
e8:b8:43:80:c9:d7:de:c4:0e:a5:be:59:57:33:31:
a6:ab:7a:28:4a:1f:7b:e1:db:06:3a:9f:e1:60:2a:
5f:61:74:6a:ce:c4:7a:53:99:8f:ec:f3:7f:9b:d5:
60:0a:77:f3:d7:6e:6a:21:9f:b9:9e:c8:59:74:bc:
37:65:46:35:90:f2:05:be:a2:83:66:06:e0:58:74:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:12:8D:84:5C:43:28:84:96:3B:D2:50:2E:D8:18:30:EC:52:87:7E
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cb:99:bf:68:22:33:1d:51:49:a5:53:50:82:6b:64:be:4e:
f6:b6:6d:d5:08:76:8e:6e:e1:ef:bc:d9:02:8c:8e:92:6b:b5:
ea:78:c1:9d:a0:4a:46:4d:d2:2c:71:52:43:eb:37:bd:89:4b:
ea:f7:a4:83:20:eb:ff:a0:06:d3:86:f3:46:b8:41:31:c0:c9:
0b:da:b5:f4:57:ed:4f:7e:62:79:82:a8:b5:af:9a:d0:2f:fa:
b4:ba:99:b3:05:80:57:93:b3:4f:3c:78:26:2f:3a:f8:fa:06:
33:22:33:61:c0:b7:12:ba:d5:98:34:f0:bf:30:1e:92:58:e8:
4b:ef:43:eb:26:b7:8f:59:03:bb:10:3a:ee:59:31:df:35:ea:
3b:c0:7f:59:01:17:32:2f:63:60:9f:6e:24:dd:5f:2b:db:f3:
d7:c1:a1:24:7a:f5:5a:26:35:4a:f5:d5:59:f4:52:16:cb:09:
93:25:e6:37:fb:c7:a4:a8:65:47:48:19:44:a6:34:bd:64:9e:
46:27:c9:e1:b5:47:98:7e:de:ec:f2:74:82:a0:0d:18:6c:ff:
9a:3f:88:d3:ce:45:1f:e5:af:1b:30:0b:4f:bb:45:60:84:79:
dc:25:f6:ee:ee:05:a4:f3:28:6a:a2:7c:05:95:45:f0:b3:e3:
b1:2e:4d:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAuiOMyGxCc002YmIWACYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0M2M5MjQ3NGZlZDM4M2M5NWZhMmNjZDgzZDYxNGY1N2U1
NjNkODIwHhcNMjYxMDE1MTgwMTQyWhcNMjYxMDE2MTgwMTQyWjAzMTEwLwYDVQQD
Eyg0YTEyOGQ4NDVjNDMyODg0OTYzYmQyNTAyZWQ4MTgzMGVjNTI4NzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBrS4rkPli8hElfgF4uGHaks6SNY
wvXNbdFHMLn5s7csfpMxY9STuZg4SXzAR7yVwt+mAdbmMWZoSv5EWSoBedfkqv19
9yTsSOeOQDIQZpSlrddrdbxeTv10O92JbedBYUs48pIOClWfPcp0E7VXY0ZKQbVc
DkUkVi/HxlU7aL6suvmcrn8/NHq2kQ8nbOG8rwBBWRDAPA7XwaDOwfWu07QA6Fpb
Kg5U85Jd42GEW7SIO4TouEOAydfexA6lvllXMzGmq3ooSh974dsGOp/hYCpfYXRq
zsR6U5mP7PN/m9VgCnfz125qIZ+5nshZdLw3ZUY1kPIFvqKDZgbgWHQqDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoSjYRcQyiEljvSUC7YGDDsUod+MB8GA1UdIwQY
MBaAFNQ8kkdP7Tg8lfoszYPWFPV+Vj2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMt
NmIwNmMxNzZiZDVhLzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMtNmIwNmMxNzZiZDVh
LzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsuZv2gi
Mx1RSaVTUIJrZL5O9rZt1Qh2jm7h77zZAoyOkmu16njBnaBKRk3SLHFSQ+s3vYlL
6vekgyDr/6AG04bzRrhBMcDJC9q19FftT35ieYKota+a0C/6tLqZswWAV5OzTzx4
Ji86+PoGMyIzYcC3ErrVmDTwvzAekljoS+9D6ya3j1kDuxA67lkx3zXqO8B/WQEX
Mi9jYJ9uJN1fK9vz18GhJHr1WiY1SvXVWfRSFssJkyXmN/vHpKhlR0gZRKY0vWSe
RifJ4bVHmH7e7PJ0gqANGGz/mj+I085FH+WvGzALT7tFYIR53CX27u4FpPMoaqJ8
BZVF8LPjsS5NSA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:08:16 2026 by rpki-client