Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: 9r0ckRQgqcUouUrmMZmfcb5skNrUykUVOsok+B60dt8=
Subject key identifier: 8F:FC:58:43:BF:3F:10:34:82:E3:BA:EC:2A:8C:DC:C2:C3:28:AA:BA
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 01A001DCC2B0C803857F6BA7DA06F29F635A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 20:00:39 +0000
Manifest this update: Fri 14 Aug 2026 20:00:39 +0000
Manifest next update: Sat 15 Aug 2026 20:00:39 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: FPR1s2X3oGh1yY3pP4An9g7D6iQixIxIUjfqkyLA/W4=)
2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:c2:b0:c8:03:85:7f:6b:a7:da:06:f2:9f:63:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Aug 14 20:00:39 2026 GMT
Not After : Aug 15 20:00:39 2026 GMT
Subject: CN=8ffc5843bf3f103482e3baec2a8cdcc2c328aaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:9a:44:b5:17:6a:71:30:94:ca:e6:f5:d7:
e0:97:8e:c7:63:b8:04:98:8f:73:6c:9f:1b:b6:ec:
92:1d:38:cc:47:55:8a:98:3e:10:97:a0:99:12:ee:
a5:81:11:94:9e:b0:77:d6:d8:56:58:3b:ef:be:69:
26:71:e8:ab:66:59:29:81:f5:77:c6:f0:ea:96:c4:
47:31:09:78:a6:34:7f:e6:c0:22:82:f2:f9:b3:77:
cf:d4:a2:44:29:ff:57:04:2e:2a:20:35:64:78:d5:
92:18:f3:e4:11:29:41:dc:09:a5:4a:ed:fd:d2:06:
7b:91:25:19:3d:26:e8:94:91:1d:ec:44:36:eb:c8:
95:31:3b:f9:c2:4b:a3:75:21:1c:7e:26:60:e0:d0:
e2:7c:df:46:a2:58:8a:41:83:35:98:69:cd:ce:52:
3a:10:2c:9f:b6:c4:68:1a:0a:b8:47:e1:c8:86:3e:
a4:d2:4d:77:14:f6:b8:96:3c:ab:50:9c:0e:85:2f:
91:70:50:f6:72:ca:f5:37:9c:50:d7:0b:4c:54:2a:
16:f2:17:8a:25:72:43:c9:c9:68:91:0e:2c:87:e5:
b9:05:0e:c4:50:cf:b5:66:da:db:0f:ca:ee:c8:50:
59:9f:4f:fd:7d:2b:31:27:f3:b3:7f:6e:d3:f2:50:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FC:58:43:BF:3F:10:34:82:E3:BA:EC:2A:8C:DC:C2:C3:28:AA:BA
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c5:c7:f6:02:99:93:80:d0:c1:92:1e:4a:58:25:e2:c8:79:
0f:41:22:41:5f:ec:5a:88:77:78:81:a9:53:fb:94:f9:63:72:
1e:b1:16:a2:34:a7:94:a4:75:60:d8:fa:dd:16:4a:ab:0e:e0:
9f:34:38:12:90:f7:d5:86:fc:3d:d1:b3:e5:e3:1c:d2:f7:3c:
80:f3:f9:85:d3:0e:de:d5:4c:e9:09:06:55:d0:54:23:fe:16:
15:9d:ac:ef:04:bf:65:fb:99:8a:1d:9f:8c:7f:85:3a:c3:ab:
b0:fe:ab:06:de:d2:6c:bd:6b:b4:c8:b5:67:14:45:b4:44:e6:
91:e8:23:8f:9b:2d:12:ca:85:80:df:22:60:0d:15:6d:c0:61:
a6:9b:99:9b:3e:7a:35:d6:a8:56:dc:18:03:d2:e9:30:75:aa:
b9:0e:4e:6b:3e:6f:c0:e3:df:97:4b:f0:a8:06:98:f6:ca:d2:
86:97:e7:14:7f:d9:1d:bc:a2:71:ba:19:b9:a7:e3:d1:9f:8e:
4d:d1:ab:0c:69:6b:e9:51:a2:30:b0:5e:ab:1f:41:b9:ae:2f:
9e:b3:3c:86:07:c1:43:96:cf:19:37:07:8f:4b:a4:69:33:94:
c8:e2:53:2a:30:a5:a1:78:0b:37:8c:51:8d:22:67:20:b2:c6:
22:c8:3d:d1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaAB3MKwyAOFf2un2gbyn2NaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk
YjU5OGMwHhcNMjYwODE0MjAwMDM5WhcNMjYwODE1MjAwMDM5WjAzMTEwLwYDVQQD
Eyg4ZmZjNTg0M2JmM2YxMDM0ODJlM2JhZWMyYThjZGNjMmMzMjhhYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sWaRLUXanEwlMrm9dfgl47HY7gE
mI9zbJ8btuySHTjMR1WKmD4Ql6CZEu6lgRGUnrB31thWWDvvvmkmceirZlkpgfV3
xvDqlsRHMQl4pjR/5sAigvL5s3fP1KJEKf9XBC4qIDVkeNWSGPPkESlB3AmlSu39
0gZ7kSUZPSbolJEd7EQ268iVMTv5wkujdSEcfiZg4NDifN9GoliKQYM1mGnNzlI6
ECyftsRoGgq4R+HIhj6k0k13FPa4ljyrUJwOhS+RcFD2csr1N5xQ1wtMVCoW8heK
JXJDyclokQ4sh+W5BQ7EUM+1ZtrbD8ruyFBZn0/9fSsxJ/Ozf27T8lAllQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI/8WEO/PxA0guO67CqM3MLDKKq6MB8GA1UdIwQY
MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi
LWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAyLzkyZDIwOC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRl
ZjYvMS8xLWxYU2gzRXlxcTNOOVVCWXJMLWVCLTNiV1l3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMXH
9gKZk4DQwZIeSlgl4sh5D0EiQV/sWoh3eIGpU/uU+WNyHrEWojSnlKR1YNj63RZK
qw7gnzQ4EpD31Yb8PdGz5eMc0vc8gPP5hdMO3tVM6QkGVdBUI/4WFZ2s7wS/ZfuZ
ih2fjH+FOsOrsP6rBt7SbL1rtMi1ZxRFtETmkegjj5stEsqFgN8iYA0VbcBhppuZ
mz56NdaoVtwYA9LpMHWquQ5Oaz5vwOPfl0vwqAaY9srShpfnFH/ZHbyicboZuafj
0Z+OTdGrDGlr6VGiMLBeqx9Bua4vnrM8hgfBQ5bPGTcHj0ukaTOUyOJTKjCloXgL
N4xRjSJnILLGIsg90Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:16 2026 by rpki-client