Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier: yH6CFe88zxG8L3oSbu+UhYUrtyYKFAz5uVnBHXCpBPQ=
Subject key identifier: 3A:0A:F3:84:87:34:CC:AC:87:29:4E:0F:B2:0A:05:F8:A4:F5:8C:52
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 01A11A19907C274B93AB4D1D1C28CD5418F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number: 1AA1
Signing time: Thu 08 Oct 2026 06:00:45 +0000
Manifest this update: Thu 08 Oct 2026 06:00:45 +0000
Manifest next update: Fri 09 Oct 2026 06:00:45 +0000
Files and hashes: 1: 1-XAPtzpEBbR-dL3HDvpMhi_QEZc.roa (hash: Y3Cc5NFdOsrYFpq1aDkqCQTbdqgeCbiviULrvKO6HjA=)
2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: m85HZYfWxyk31QAz+j9y8wkz7hJNyB7vBhkRQOpfXJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:90:7c:27:4b:93:ab:4d:1d:1c:28:cd:54:18:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: Oct 8 06:00:45 2026 GMT
Not After : Oct 9 06:00:45 2026 GMT
Subject: CN=3a0af3848734ccac87294e0fb20a05f8a4f58c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:90:64:4d:50:c3:0b:73:69:7c:a4:4c:12:
dd:85:f9:63:4c:ef:3e:5e:d3:03:d9:a4:c1:0e:b5:
de:0b:e0:21:d2:56:bb:ca:2c:f0:ca:30:1d:ad:ce:
db:fb:39:0e:fd:80:cd:4c:00:b5:b0:e1:cc:35:04:
6a:65:5f:f7:6c:04:62:4a:8c:40:34:94:46:56:8a:
35:c7:b8:5c:e3:71:f0:78:d1:20:bb:dd:af:f9:73:
2a:8a:d5:1a:f0:37:dc:16:50:9a:30:ec:30:97:2a:
b8:de:d9:bb:0c:5f:44:c8:c1:3f:91:94:3d:e9:97:
8b:ef:61:b8:35:34:57:db:f5:f7:b8:64:4f:ed:5c:
5a:e4:8e:f6:6a:03:0e:a3:05:a2:61:83:df:8f:fc:
b2:28:00:57:b9:e5:ec:27:df:ac:f5:6f:83:bf:4c:
37:ff:9f:e1:55:61:2d:7b:f3:05:c5:11:5e:19:e2:
6b:e4:4c:5a:f6:05:6d:85:e0:41:85:93:3b:7d:c6:
2a:eb:f6:4c:ea:77:ca:1c:11:a4:09:9c:71:1b:68:
a9:c8:43:4c:32:c3:c6:d7:fd:f5:c8:8f:6d:b3:45:
3e:cb:0f:79:d8:b9:d0:30:86:96:f3:1f:01:ac:87:
71:ba:5a:af:a0:7f:26:ba:e4:3c:c3:3d:a7:8f:71:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:F3:84:87:34:CC:AC:87:29:4E:0F:B2:0A:05:F8:A4:F5:8C:52
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:47:c7:82:9f:6c:b2:6f:01:98:0a:8e:43:7c:80:d1:61:a8:
41:cd:b2:c3:2f:0d:72:a0:25:28:52:37:10:38:16:20:41:6f:
4a:14:24:dd:94:16:5f:13:94:b3:d8:a2:59:b5:00:86:e1:38:
9b:fe:12:0a:49:7e:75:fb:3d:72:ec:1b:45:db:65:b3:f7:e2:
ef:92:81:e9:ca:0a:ed:3e:a7:8f:2c:61:c8:ba:b4:4c:d8:57:
1a:57:e6:28:5a:63:db:8f:2b:aa:04:3a:4c:4d:0f:11:3d:f8:
c8:d9:d5:1f:d7:a4:33:fe:a9:4e:fa:b4:26:a9:aa:0b:ef:da:
00:e3:ba:98:d8:75:32:ce:3a:5a:2e:19:a7:83:75:82:52:15:
41:fb:15:fa:26:43:f8:f9:1b:ee:0e:1e:bb:63:ae:92:45:0e:
d8:49:93:15:50:c6:66:72:b6:a5:b5:2c:22:51:1c:ea:86:fc:
a4:e7:fc:9c:1c:81:e9:5c:32:9f:84:91:c6:bf:ed:37:89:3f:
77:ac:d8:de:b9:dd:b8:25:73:dd:44:e9:54:9b:6a:1a:07:52:
cc:7b:a6:d2:30:ce:81:99:7d:2a:05:e6:5e:53:42:df:8a:72:
1c:19:f6:90:77:50:e6:34:33:b3:94:bc:c1:2f:5c:e4:11:f6:
9e:f9:54:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEaGZB8J0uTq00dHCjNVBjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlY2Q1Y2FkNGQzMzA2YzRmNzJjNDJhZmMwNmU1Y2QxZmJh
ZmUzYTMwHhcNMjYxMDA4MDYwMDQ1WhcNMjYxMDA5MDYwMDQ1WjAzMTEwLwYDVQQD
EygzYTBhZjM4NDg3MzRjY2FjODcyOTRlMGZiMjBhMDVmOGE0ZjU4YzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBaQZE1QwwtzaXykTBLdhfljTO8+
XtMD2aTBDrXeC+Ah0la7yizwyjAdrc7b+zkO/YDNTAC1sOHMNQRqZV/3bARiSoxA
NJRGVoo1x7hc43HweNEgu92v+XMqitUa8DfcFlCaMOwwlyq43tm7DF9EyME/kZQ9
6ZeL72G4NTRX2/X3uGRP7Vxa5I72agMOowWiYYPfj/yyKABXueXsJ9+s9W+Dv0w3
/5/hVWEte/MFxRFeGeJr5Exa9gVtheBBhZM7fcYq6/ZM6nfKHBGkCZxxG2ipyENM
MsPG1/31yI9ts0U+yw952LnQMIaW8x8BrIdxulqvoH8muuQ8wz2nj3HCbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoK84SHNMyshylOD7IKBfik9YxSMB8GA1UdIwQY
MBaAFG7NXK1NMwbE9yxCr8BuXNH7r+OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgt
NWZiYzIzMGFiZGMyLzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgtNWZiYzIzMGFiZGMy
LzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEfHgp9s
sm8BmAqOQ3yA0WGoQc2ywy8NcqAlKFI3EDgWIEFvShQk3ZQWXxOUs9iiWbUAhuE4
m/4SCkl+dfs9cuwbRdtls/fi75KB6coK7T6njyxhyLq0TNhXGlfmKFpj248rqgQ6
TE0PET34yNnVH9ekM/6pTvq0JqmqC+/aAOO6mNh1Ms46Wi4Zp4N1glIVQfsV+iZD
+Pkb7g4eu2OukkUO2EmTFVDGZnK2pbUsIlEc6ob8pOf8nByB6Vwyn4SRxr/tN4k/
d6zY3rnduCVz3UTpVJtqGgdSzHum0jDOgZl9KgXmXlNC34pyHBn2kHdQ5jQzs5S8
wS9c5BH2nvlUVA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:51:04 2026 by rpki-client