Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: ystxtqUOf4FyccTzLD01OI4r8VpT0iO3TYd4D3wmbig=
Subject key identifier: DF:DD:47:F8:62:8C:4C:A3:10:B1:84:EB:B3:FE:A6:7D:B0:C1:85:35
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 01A13F3956537AEE96C1EA0B3EDF815827C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 11:01:24 +0000
Manifest this update: Thu 15 Oct 2026 11:01:24 +0000
Manifest next update: Fri 16 Oct 2026 11:01:24 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: pfANf6AL4tKxjrv8At/M6XawXGFHyELag6zkb7Z3VHc=)
2: Vci5kME3AljCGz_yFCPscOsBEvk.roa (hash: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:56:53:7a:ee:96:c1:ea:0b:3e:df:81:58:27:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Oct 15 11:01:24 2026 GMT
Not After : Oct 16 11:01:24 2026 GMT
Subject: CN=dfdd47f8628c4ca310b184ebb3fea67db0c18535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:77:b7:b9:3d:80:a7:92:c9:d2:18:9c:54:
42:9b:73:bb:05:e0:c9:f8:91:cc:46:e5:ef:84:2d:
19:f1:bb:c0:e8:e6:18:69:eb:16:3b:e5:1a:87:41:
bf:ae:8f:d2:58:6f:60:df:de:ed:e4:4d:75:06:b0:
80:22:42:53:af:0b:5e:3c:9a:83:19:48:4a:36:87:
de:00:84:b0:3e:a0:2e:e0:d9:36:42:67:0e:6d:d1:
26:58:24:83:94:29:3f:05:fb:14:e9:f3:3b:32:9f:
6d:87:ba:45:27:6b:b1:0e:bf:da:eb:c0:5f:b7:a1:
27:e1:55:1f:3e:32:74:24:8e:23:63:12:35:c6:e7:
7b:0e:cc:da:8b:e0:3a:81:e9:68:3b:bd:68:b1:30:
cb:a0:7a:68:81:7d:9e:e6:a3:73:47:bf:1d:14:2e:
2a:66:b8:98:57:ca:89:97:50:6e:c3:25:2b:66:3c:
89:ce:b9:ed:7a:d0:79:90:af:60:4c:4b:92:68:62:
f2:b3:85:88:a6:6f:cf:81:f3:e7:6c:8f:65:70:c9:
7e:4e:e5:3e:d8:d1:88:4f:c8:1f:48:f6:33:f8:a4:
b8:38:cd:e4:fc:9f:cc:a0:9b:02:ee:a4:2a:c7:0d:
d9:8e:6c:a3:9d:1e:fc:2e:22:37:2c:e6:ae:55:e0:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:47:F8:62:8C:4C:A3:10:B1:84:EB:B3:FE:A6:7D:B0:C1:85:35
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c5:3e:fa:0e:75:2e:fb:3a:7a:3a:f3:76:07:a9:61:7e:8f:
ed:e7:09:15:df:03:57:68:dd:07:69:d8:76:ad:e8:65:ee:ff:
b3:ea:e0:ec:10:1b:5e:e1:92:60:eb:a9:d4:fc:3e:22:d9:ca:
e9:ed:10:f3:b0:71:49:8a:3a:18:34:c1:2c:bd:36:05:ce:a9:
7d:33:b7:ce:33:b7:4f:72:0b:66:d6:03:81:8a:6b:0b:c3:72:
d0:41:e0:6a:4a:1e:35:75:98:48:b0:d2:0f:13:80:b7:71:bd:
71:c1:f8:3b:79:55:0f:e9:4f:74:86:85:2a:fc:87:d3:2b:d8:
93:b0:63:bb:74:4c:91:8e:41:7a:04:d7:d8:39:56:14:2f:ae:
32:47:fe:15:8b:3d:10:37:aa:81:ba:3f:a1:2b:fa:06:95:e0:
2d:74:ea:27:86:e1:21:28:65:32:9d:6b:e5:ea:0d:61:b4:4a:
19:63:8d:81:95:5c:a9:25:ca:28:6c:7b:ad:ce:b2:cd:f9:1e:
7a:23:85:ea:2a:78:0a:16:5a:64:8f:7d:75:a7:91:df:2c:eb:
6e:de:26:cf:55:45:9d:1a:8a:5f:12:bb:95:dd:45:3f:53:0a:
d0:55:e3:ef:70:4a:26:70:cf:bc:df:bb:0d:47:ab:b4:26:f5:
73:aa:80:3e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE/OVZTeu6WweoLPt+BWCfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMjNhZWI2YTVkOWEzNGI4MzYwNzc3Nzc3NmZiODc2NGZi
NzZmMDAwHhcNMjYxMDE1MTEwMTI0WhcNMjYxMDE2MTEwMTI0WjAzMTEwLwYDVQQD
EyhkZmRkNDdmODYyOGM0Y2EzMTBiMTg0ZWJiM2ZlYTY3ZGIwYzE4NTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzJ3t7k9gKeSydIYnFRCm3O7BeDJ
+JHMRuXvhC0Z8bvA6OYYaesWO+Uah0G/ro/SWG9g397t5E11BrCAIkJTrwtePJqD
GUhKNofeAISwPqAu4Nk2QmcObdEmWCSDlCk/BfsU6fM7Mp9th7pFJ2uxDr/a68Bf
t6En4VUfPjJ0JI4jYxI1xud7Dszai+A6geloO71osTDLoHpogX2e5qNzR78dFC4q
ZriYV8qJl1BuwyUrZjyJzrntetB5kK9gTEuSaGLys4WIpm/PgfPnbI9lcMl+TuU+
2NGIT8gfSPYz+KS4OM3k/J/MoJsC7qQqxw3ZjmyjnR78LiI3LOauVeBAZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN/dR/hijEyjELGE67P+pn2wwYU1MB8GA1UdIwQY
MBaAFPojrral2aNLg2B3d3dvuHZPt28AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pT3V0cVhabzB1RFlIZDNkMi00ZGstM2J3QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzZlNmYwLWViMmMtNGNmOC04NTY1
LWIzNjNiYjZjYWEwMi8xLzEtaU91dHFYWm8wdURZSGQzZDItNGRrLTNid0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJjLzM2ZTZmMC1lYjJjLTRjZjgtODU2NS1iMzYzYmI2Y2Fh
MDIvMS8xLWlPdXRxWFpvMHVEWUhkM2QyLTRkay0zYndBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsU+
+g51Lvs6ejrzdgepYX6P7ecJFd8DV2jdB2nYdq3oZe7/s+rg7BAbXuGSYOup1Pw+
ItnK6e0Q87BxSYo6GDTBLL02Bc6pfTO3zjO3T3ILZtYDgYprC8Ny0EHgakoeNXWY
SLDSDxOAt3G9ccH4O3lVD+lPdIaFKvyH0yvYk7Bju3RMkY5BegTX2DlWFC+uMkf+
FYs9EDeqgbo/oSv6BpXgLXTqJ4bhIShlMp1r5eoNYbRKGWONgZVcqSXKKGx7rc6y
zfkeeiOF6ip4ChZaZI99daeR3yzrbt4mz1VFnRqKXxK7ld1FP1MK0FXj73BKJnDP
vN+7DUertCb1c6qAPg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:41 2026 by rpki-client