Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: k4bXgkRQbUe9dI8R2Gqpnla3KluqAoz/24uxXoEDyQw=
Subject key identifier: 0F:CB:92:82:FD:C0:02:D1:59:13:B6:88:36:16:0F:B3:5A:77:1B:8E
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 01A08A552FA4A39B314BA6238DC100B72B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0C90
Signing time: Thu 10 Sep 2026 08:00:33 +0000
Manifest this update: Thu 10 Sep 2026 08:00:33 +0000
Manifest next update: Fri 11 Sep 2026 08:00:33 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: Bo71pHrFUcQM/Yh2tcIIVM+W3HeFBh3LJS9wNfhkRNs=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:2f:a4:a3:9b:31:4b:a6:23:8d:c1:00:b7:2b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Sep 10 08:00:33 2026 GMT
Not After : Sep 11 08:00:33 2026 GMT
Subject: CN=0fcb9282fdc002d15913b68836160fb35a771b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:ea:0d:f4:3e:a3:f7:c8:7e:8d:3f:47:c8:
4a:d3:03:52:cd:69:ea:d4:e9:41:38:b6:41:db:8e:
17:cb:5b:a7:d1:7c:1d:31:78:c2:1d:c4:fc:56:28:
e4:e2:11:dd:27:c0:09:a4:c3:32:b2:f9:78:f5:4c:
94:c2:9d:ad:c9:04:a3:a5:8d:19:85:09:ca:ed:e1:
16:65:66:41:ff:37:ad:90:8a:82:56:fe:cb:b3:eb:
44:5e:fe:4b:5e:6e:f6:68:56:af:8b:ae:03:68:70:
39:e8:67:66:f9:e4:8f:e2:9e:59:b0:40:b6:6b:b5:
4b:3a:e9:eb:9f:79:98:cd:47:71:95:75:e9:fc:37:
1a:57:bd:2b:59:08:2a:60:0d:59:37:c3:59:81:03:
24:34:72:97:3a:66:a5:5a:a4:1c:a2:45:b2:73:0a:
b5:fa:b9:dd:85:5d:f0:4e:69:e3:54:2f:73:8a:a1:
cd:4b:0a:c0:f9:76:27:14:4e:2a:a5:3a:7f:26:fe:
e9:fc:99:ed:a3:d5:fd:cb:bc:c8:62:79:57:34:9d:
85:5d:2d:a3:1a:2a:86:b3:f1:3c:47:de:76:3b:f4:
db:ef:27:00:1e:4b:90:53:68:d2:1e:09:7e:f2:bc:
12:4c:84:1f:57:99:ff:40:b7:94:f0:37:11:dd:1a:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:92:82:FD:C0:02:D1:59:13:B6:88:36:16:0F:B3:5A:77:1B:8E
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:68:19:7d:fd:be:b3:8e:1d:a4:2f:39:4e:2e:b6:5e:e5:
fd:2e:85:d8:78:78:1f:35:20:2e:0c:03:c7:1c:6b:df:3e:31:
b0:f7:bb:ef:09:3b:e2:fc:f6:ab:ce:22:01:a4:33:7c:01:21:
e1:2d:81:ac:15:ad:4b:be:7f:32:ea:da:3c:c2:b4:1c:7b:e1:
50:30:27:6e:a5:d5:90:59:73:73:30:d4:29:c5:4b:6b:58:4b:
eb:6a:ba:09:81:9b:e3:c1:07:5a:a1:9c:0f:f4:8f:32:d6:19:
b0:ca:3a:e5:6d:4c:76:a2:6d:f8:d8:8c:09:cb:99:31:e2:63:
2a:4c:96:a5:60:dc:4f:56:35:fb:de:16:6c:7a:3f:a9:78:26:
f0:60:d9:77:8d:80:48:a4:76:2e:e6:1c:a4:fb:db:cd:33:03:
ab:41:fb:c4:3c:73:24:f7:2f:a7:56:4c:ac:d8:d3:e4:7d:4d:
eb:7b:c4:63:c4:13:9e:84:12:05:03:c1:7e:ac:c0:47:80:30:
02:aa:a9:7d:e0:3e:65:7b:9e:d4:c1:34:48:8a:69:a7:e0:6d:
cf:d5:31:b1:f4:f9:d9:aa:86:38:3d:f8:73:a7:25:b6:11:1c:
68:ca:a8:81:e2:ea:f0:ca:67:13:d6:e9:34:11:08:76:1a:0e:
84:43:52:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVS+ko5sxS6YjjcEAtysvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDY5Nzk0MzY3NjM5OWFjNWNhYzZhM2U0NzY1NDVhZjBk
ZjQ5ZGQwHhcNMjYwOTEwMDgwMDMzWhcNMjYwOTExMDgwMDMzWjAzMTEwLwYDVQQD
EygwZmNiOTI4MmZkYzAwMmQxNTkxM2I2ODgzNjE2MGZiMzVhNzcxYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRfqDfQ+o/fIfo0/R8hK0wNSzWnq
1OlBOLZB244Xy1un0XwdMXjCHcT8Vijk4hHdJ8AJpMMysvl49UyUwp2tyQSjpY0Z
hQnK7eEWZWZB/zetkIqCVv7Ls+tEXv5LXm72aFavi64DaHA56Gdm+eSP4p5ZsEC2
a7VLOunrn3mYzUdxlXXp/DcaV70rWQgqYA1ZN8NZgQMkNHKXOmalWqQcokWycwq1
+rndhV3wTmnjVC9ziqHNSwrA+XYnFE4qpTp/Jv7p/Jnto9X9y7zIYnlXNJ2FXS2j
GiqGs/E8R952O/Tb7ycAHkuQU2jSHgl+8rwSTIQfV5n/QLeU8DcR3RpCiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/LkoL9wALRWRO2iDYWD7NadxuOMB8GA1UdIwQY
MBaAFNUGl5Q2djmaxcrGo+R2VFrw30ndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2Yt
OGQyM2FjNWNiNTAyLzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2YtOGQyM2FjNWNiNTAy
LzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbJoGX39
vrOOHaQvOU4utl7l/S6F2Hh4HzUgLgwDxxxr3z4xsPe77wk74vz2q84iAaQzfAEh
4S2BrBWtS75/MuraPMK0HHvhUDAnbqXVkFlzczDUKcVLa1hL62q6CYGb48EHWqGc
D/SPMtYZsMo65W1MdqJt+NiMCcuZMeJjKkyWpWDcT1Y1+94WbHo/qXgm8GDZd42A
SKR2LuYcpPvbzTMDq0H7xDxzJPcvp1ZMrNjT5H1N63vEY8QTnoQSBQPBfqzAR4Aw
AqqpfeA+ZXue1ME0SIppp+Btz9UxsfT52aqGOD34c6clthEcaMqogeLq8MpnE9bp
NBEIdhoOhENSmA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:25 2026 by rpki-client