Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: pj+BRpoURFB1YBX66QMbaGRevbQXundKOkQddN8teUE=
Subject key identifier: 1C:B3:A7:17:A4:3B:48:6A:FC:F4:4F:72:47:D3:0B:85:B2:30:EC:1A
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 01A14985C49C047B9C24A7667CA51E1910E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 11:01:05 +0000
Manifest this update: Sat 17 Oct 2026 11:01:05 +0000
Manifest next update: Sun 18 Oct 2026 11:01:05 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: EiK42qcEuAIK0dEBjGLVpwkTqQGjmhu0+5KApeZwpa4=)
2: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (hash: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=)
3: ljKqKcii0U02MebIFQNX8KauT_U.asa (hash: qIl3XQDoFiJHD98WqyufKHLxD9Gj0y/WzWfOkW+kjkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:85:c4:9c:04:7b:9c:24:a7:66:7c:a5:1e:19:10:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Oct 17 11:01:05 2026 GMT
Not After : Oct 18 11:01:05 2026 GMT
Subject: CN=1cb3a717a43b486afcf44f7247d30b85b230ec1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:b0:95:c5:e8:38:ec:9a:78:ae:cc:c9:4e:
ae:39:85:94:1e:9d:aa:6e:25:1b:cc:99:ef:b3:e5:
d4:d7:58:79:6c:92:71:36:41:3a:44:5d:4d:ce:a6:
17:55:c7:80:9c:80:7f:28:01:33:91:66:6c:f1:8b:
b6:76:63:47:68:b5:71:2a:93:9f:bb:b2:21:33:de:
5c:07:b8:9d:f5:5f:0c:80:3a:9e:62:3e:fa:80:de:
3b:cf:ec:9d:02:d9:0f:07:d8:72:b2:d1:0e:06:29:
f2:1b:d3:30:f1:b8:0d:0a:33:93:0b:a8:e9:e4:53:
e4:08:63:f3:e3:46:50:95:dc:b1:a1:10:c4:48:8d:
71:a7:d4:e9:3a:a8:14:d5:ea:de:44:d9:9c:34:ac:
cf:17:34:1f:c3:db:2c:01:81:77:1d:10:ee:b2:08:
c6:3b:27:01:6f:e0:0a:a5:16:d0:98:1c:ba:1b:36:
9d:38:e7:2b:13:db:44:eb:b8:5f:83:1e:ca:19:01:
03:44:53:90:47:26:f2:12:e3:ba:1f:bc:e4:21:82:
69:8f:06:df:9f:06:df:25:cc:ac:36:91:12:9d:2f:
5c:f0:bd:b3:d5:22:64:7b:11:ad:c1:09:2e:ca:81:
ad:13:ae:72:38:d1:5e:ec:a0:7f:db:71:41:d2:b8:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B3:A7:17:A4:3B:48:6A:FC:F4:4F:72:47:D3:0B:85:B2:30:EC:1A
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:de:81:f9:30:4a:f2:f3:2c:8c:b8:bb:e1:67:e0:2f:a0:dd:
d8:53:4b:04:7e:22:50:2d:85:c7:90:5f:a5:37:e0:ab:e3:1a:
6c:50:58:ac:10:5b:b8:c4:4c:ae:b4:1b:6a:dd:80:c9:12:a7:
4a:0f:c4:ad:86:2e:4a:d4:8b:3c:8f:bb:df:5a:60:b0:11:cb:
1e:06:f4:9c:e4:46:0a:d3:48:2d:02:20:94:99:4e:2a:b6:1b:
84:67:f8:4a:79:c1:47:1a:44:ca:3f:5d:45:19:e7:d1:c5:a2:
1a:8c:31:44:51:06:81:3a:61:33:e6:36:f6:46:f2:2b:a2:11:
cf:2a:a9:65:21:5b:3f:fe:75:89:ce:58:cb:3c:1e:29:25:8f:
b8:22:b3:17:bb:96:44:f9:1a:d7:96:56:b4:19:7b:34:17:9a:
c2:b0:8f:cf:ff:37:e8:29:14:8f:29:ff:c6:95:f2:77:d2:49:
95:2b:e6:ef:6a:67:88:66:96:53:18:19:98:40:2a:6f:7b:09:
d7:23:12:ad:09:29:ce:ce:55:8f:6c:9d:47:b0:ad:31:32:c6:
18:6a:61:2d:51:8c:b4:2a:34:8d:37:f1:c6:04:ef:bc:b6:1a:
f2:53:d8:9c:ec:3f:62:2a:bd:58:95:18:03:42:91:38:d4:0e:
1e:75:d9:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJhcScBHucJKdmfKUeGRDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNWEwNTZjODI0Mjk3MWQxYTkwYjBiZmE5OGIxYjdhOTMw
NTI4ODQwHhcNMjYxMDE3MTEwMTA1WhcNMjYxMDE4MTEwMTA1WjAzMTEwLwYDVQQD
EygxY2IzYTcxN2E0M2I0ODZhZmNmNDRmNzI0N2QzMGI4NWIyMzBlYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUWwlcXoOOyaeK7MyU6uOYWUHp2q
biUbzJnvs+XU11h5bJJxNkE6RF1NzqYXVceAnIB/KAEzkWZs8Yu2dmNHaLVxKpOf
u7IhM95cB7id9V8MgDqeYj76gN47z+ydAtkPB9hystEOBinyG9Mw8bgNCjOTC6jp
5FPkCGPz40ZQldyxoRDESI1xp9TpOqgU1ereRNmcNKzPFzQfw9ssAYF3HRDusgjG
OycBb+AKpRbQmBy6GzadOOcrE9tE67hfgx7KGQEDRFOQRybyEuO6H7zkIYJpjwbf
nwbfJcysNpESnS9c8L2z1SJkexGtwQkuyoGtE65yONFe7KB/23FB0rh5UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByzpxekO0hq/PRPckfTC4WyMOwaMB8GA1UdIwQY
MBaAFONaBWyCQpcdGpCwv6mLG3qTBSiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODIt
YWFiNGJkOGZjZTlkLzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODItYWFiNGJkOGZjZTlk
LzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVN6B+TBK
8vMsjLi74WfgL6Dd2FNLBH4iUC2Fx5BfpTfgq+MabFBYrBBbuMRMrrQbat2AyRKn
Sg/ErYYuStSLPI+731pgsBHLHgb0nORGCtNILQIglJlOKrYbhGf4SnnBRxpEyj9d
RRnn0cWiGowxRFEGgTphM+Y29kbyK6IRzyqpZSFbP/51ic5YyzweKSWPuCKzF7uW
RPka15ZWtBl7NBeawrCPz/836CkUjyn/xpXyd9JJlSvm72pniGaWUxgZmEAqb3sJ
1yMSrQkpzs5Vj2ydR7CtMTLGGGphLVGMtCo0jTfxxgTvvLYa8lPYnOw/Yiq9WJUY
A0KRONQOHnXZQA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:34 2026 by rpki-client