Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: nrbkrNGQa6ocXrXeKcCX7uZb00IohEPylr7MLYt96Jc=
Subject key identifier: 67:D1:30:4B:57:E8:10:12:28:C9:D2:51:1D:9F:6A:AC:5B:7C:30:39
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 01A08B9ED18870B952AC02FFE107DF146E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 0535
Signing time: Thu 10 Sep 2026 14:00:36 +0000
Manifest this update: Thu 10 Sep 2026 14:00:36 +0000
Manifest next update: Fri 11 Sep 2026 14:00:36 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: IYahriHQg/y+pcBgw/sqylTQfk4m66kESgQ9F/hJGGg=)
2: sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa (hash: HzzAiUKcMD0Qonl8rlrOhysvt3o7NAn/dAklxp9xi3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:d1:88:70:b9:52:ac:02:ff:e1:07:df:14:6e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Sep 10 14:00:36 2026 GMT
Not After : Sep 11 14:00:36 2026 GMT
Subject: CN=67d1304b57e8101228c9d2511d9f6aac5b7c3039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:84:c3:70:24:bf:db:d4:b2:99:ff:d4:04:
3f:b7:51:8d:63:4d:3d:44:40:4c:69:13:66:8a:c6:
77:1b:03:71:4f:97:6c:bc:3f:0d:59:c3:2d:cc:7d:
6e:1f:c3:ab:c3:5a:87:1f:0e:95:56:a5:4b:37:c2:
43:d4:3f:49:cb:a6:16:83:3c:5d:c4:36:86:16:65:
0e:78:b7:fc:d1:05:59:eb:7a:1f:2e:dc:5d:94:86:
4d:09:e4:6e:7f:87:af:d0:ea:98:c6:82:4f:09:26:
9a:30:3a:14:76:db:49:f7:f6:7b:d7:5a:2d:fc:ed:
9e:d2:37:a3:c4:60:2a:71:e0:58:53:7d:71:96:f6:
25:9d:e4:99:12:0f:09:5f:3c:4b:07:e9:19:79:75:
e7:dd:15:b2:ce:00:c0:e4:a9:7d:2e:57:f4:66:8b:
2f:a9:64:1c:70:27:eb:f9:f5:15:22:6c:98:7b:d2:
ac:d4:05:ab:18:0d:46:8e:bc:8e:9e:21:f0:3f:ff:
b0:86:11:09:75:cc:38:3e:54:69:77:8e:a7:72:aa:
8f:97:62:43:d8:fc:eb:06:95:44:ad:cf:87:67:8d:
d8:27:b0:86:4e:de:34:eb:a6:ba:0f:2f:ed:4c:0f:
24:07:b4:4c:bb:0b:c6:f9:ad:dc:2b:55:3f:f0:d2:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:30:4B:57:E8:10:12:28:C9:D2:51:1D:9F:6A:AC:5B:7C:30:39
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:35:16:58:95:3b:2f:c7:b5:cb:8a:0e:70:00:ff:39:67:8f:
a7:c7:82:20:d5:c0:fc:f2:9a:60:3a:9e:fe:6c:d4:68:b3:d7:
7f:7d:a2:ad:b2:1f:f2:16:38:23:12:5c:38:92:1e:6d:82:7a:
89:a8:d3:a1:03:f6:76:bc:a1:b5:9d:5d:d9:5b:64:a0:dd:b3:
f8:15:24:56:36:bb:a5:61:1b:04:ca:f9:08:a9:40:a9:8d:85:
08:6d:a5:4c:ad:a1:0d:53:31:37:b3:13:93:ed:c0:8e:6b:ec:
e2:29:22:f5:df:8f:8a:70:aa:71:e2:c6:54:67:e0:e5:bd:c4:
5c:18:20:80:4d:7b:f6:15:72:ea:c8:9a:b3:8b:75:d6:b7:e3:
6c:4a:1a:73:5e:c7:0f:0b:b6:1a:a3:54:d2:1b:0f:26:4f:ed:
6a:e1:d3:bd:92:f7:ed:a1:43:f2:e5:77:cb:ad:65:9f:29:02:
7f:7d:84:e9:92:77:a0:cd:18:b7:b9:2d:21:40:c5:c6:02:0b:
84:f5:27:2c:89:4a:34:57:c0:77:fe:81:77:c0:5c:10:a2:2a:
09:9a:ab:1d:37:dc:40:87:37:35:0b:10:e1:18:83:aa:81:4d:
85:5e:d1:95:8b:33:cb:53:5c:96:0f:f2:4e:dc:be:b8:97:78:
20:78:9c:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLntGIcLlSrAL/4QffFG5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjhhOTI2MzQ5N2M4ZDU0ZTA1NDk2NDYwZDQzOWNkNmUw
NjkyNjAwHhcNMjYwOTEwMTQwMDM2WhcNMjYwOTExMTQwMDM2WjAzMTEwLwYDVQQD
Eyg2N2QxMzA0YjU3ZTgxMDEyMjhjOWQyNTExZDlmNmFhYzViN2MzMDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlmEw3Akv9vUspn/1AQ/t1GNY009
REBMaRNmisZ3GwNxT5dsvD8NWcMtzH1uH8Orw1qHHw6VVqVLN8JD1D9Jy6YWgzxd
xDaGFmUOeLf80QVZ63ofLtxdlIZNCeRuf4ev0OqYxoJPCSaaMDoUdttJ9/Z711ot
/O2e0jejxGAqceBYU31xlvYlneSZEg8JXzxLB+kZeXXn3RWyzgDA5Kl9Llf0Zosv
qWQccCfr+fUVImyYe9Ks1AWrGA1GjryOniHwP/+whhEJdcw4PlRpd46ncqqPl2JD
2PzrBpVErc+HZ43YJ7CGTt4066a6Dy/tTA8kB7RMuwvG+a3cK1U/8NK0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfRMEtX6BASKMnSUR2faqxbfDA5MB8GA1UdIwQY
MBaAFNb4qSY0l8jVTgVJZGDUOc1uBpJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYt
NmY4M2I3MDhiMzIwLzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYtNmY4M2I3MDhiMzIw
LzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDUWWJU7
L8e1y4oOcAD/OWePp8eCINXA/PKaYDqe/mzUaLPXf32irbIf8hY4IxJcOJIebYJ6
iajToQP2dryhtZ1d2VtkoN2z+BUkVja7pWEbBMr5CKlAqY2FCG2lTK2hDVMxN7MT
k+3Ajmvs4iki9d+PinCqceLGVGfg5b3EXBgggE179hVy6sias4t11rfjbEoac17H
Dwu2GqNU0hsPJk/tauHTvZL37aFD8uV3y61lnykCf32E6ZJ3oM0Yt7ktIUDFxgIL
hPUnLIlKNFfAd/6Bd8BcEKIqCZqrHTfcQIc3NQsQ4RiDqoFNhV7RlYszy1Nclg/y
Tty+uJd4IHicsg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:03:58 2026 by rpki-client