Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: Wy7HhHq3J3YRQqAdN8a4Dfv/dAKo7nAFvr4NLru1BA8=
Subject key identifier: 8B:9E:A8:95:1D:21:21:85:A0:B4:65:48:AB:3D:8B:BB:63:FC:9B:B7
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 01A13FA7AF60334AEA1BCB52E77CDA7F407A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0C93
Signing time: Thu 15 Oct 2026 13:01:56 +0000
Manifest this update: Thu 15 Oct 2026 13:01:56 +0000
Manifest next update: Fri 16 Oct 2026 13:01:56 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: OMfW9Bf/GvMs3wNZIiyJkLOiAOhhT0V+vfqD+4O6CGM=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:af:60:33:4a:ea:1b:cb:52:e7:7c:da:7f:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Oct 15 13:01:56 2026 GMT
Not After : Oct 16 13:01:56 2026 GMT
Subject: CN=8b9ea8951d212185a0b46548ab3d8bbb63fc9bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:fe:a8:db:bd:6d:e7:a4:26:e5:b6:80:3e:
ab:1e:8e:95:18:c0:b9:b8:f9:02:ca:63:67:71:14:
89:38:a4:56:23:df:38:be:b5:a3:5e:f5:72:aa:88:
61:40:18:c2:c7:9c:d3:e7:a8:b4:ae:0a:22:f7:e6:
8b:69:eb:a4:a9:0a:27:cd:42:0a:5a:8b:68:1d:7b:
4a:b1:d4:65:0d:45:36:f4:64:23:a7:68:0e:3c:36:
de:43:04:ed:66:61:84:ba:1d:41:6b:13:73:16:13:
5a:26:06:2d:83:1d:39:d9:64:0c:fe:8d:72:9b:f9:
e1:09:3c:ac:58:d0:a6:d8:9e:14:7b:f7:a4:e8:d0:
4c:29:33:8e:47:97:cd:ab:01:23:2a:7e:8c:26:e7:
8e:7c:1a:f1:0b:4f:dd:3f:77:9c:ed:22:f9:2f:2d:
fc:5e:ce:c5:a9:f9:db:e2:e4:f8:18:ba:0b:5a:1d:
33:be:50:52:08:a9:5b:b5:2e:bf:2a:85:19:d5:be:
f0:fa:56:bb:eb:f4:62:e0:18:43:be:0b:31:b1:21:
68:cb:ea:5d:49:70:77:26:54:92:fa:60:8f:eb:ef:
2c:77:ef:23:2d:7f:02:de:19:c1:1c:f0:21:20:bb:
09:39:bb:c4:81:35:72:3f:57:37:8b:e4:05:91:00:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:A8:95:1D:21:21:85:A0:B4:65:48:AB:3D:8B:BB:63:FC:9B:B7
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:51:bc:54:d8:11:76:a4:2b:e0:4f:c7:a8:a7:47:88:18:b8:
33:1c:e1:d7:ad:80:67:56:82:9f:7a:6a:21:af:b5:fa:f9:3e:
f7:80:4e:d5:71:98:a0:51:36:74:8f:d3:bc:ec:c8:fd:1d:b2:
09:56:fc:1b:dd:8f:dc:6d:d9:5b:c8:8f:45:3b:3e:1f:2e:86:
d8:2e:cd:77:08:dc:25:19:28:08:2a:e3:09:95:e4:09:e5:e3:
8e:59:33:3c:75:51:b7:f8:21:57:6e:08:42:40:ad:e7:19:1d:
6f:50:f3:cb:9a:f8:44:dd:69:f2:df:5d:ee:b3:39:a0:25:cf:
d9:07:eb:75:68:44:78:b4:42:bb:03:04:b1:d4:2d:5d:df:5a:
31:72:7b:3b:4f:63:39:25:2f:a6:94:d9:a3:df:c1:66:53:29:
2e:72:e1:f8:53:df:67:1e:9e:be:1e:de:85:5d:3e:3e:a0:8a:
1b:c8:44:e2:fb:8c:f4:c0:12:f8:c8:ff:89:57:23:55:4b:5f:
06:95:34:c7:22:3d:25:8a:25:95:cb:5e:c2:7e:f7:44:de:04:
ea:f7:d0:ba:e3:bd:d5:f4:8f:bc:0e:aa:f0:ff:3c:09:8c:74:
66:18:96:14:c0:e5:3a:fa:22:9f:69:e2:fd:52:bd:a2:44:87:
3f:bc:a6:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p69gM0rqG8tS53zaf0B6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTA4NWViOTVhZDU1ZmIzYTZiMjQ3ZTk2NzgxMTJhMTRk
ODE5MjYwHhcNMjYxMDE1MTMwMTU2WhcNMjYxMDE2MTMwMTU2WjAzMTEwLwYDVQQD
Eyg4YjllYTg5NTFkMjEyMTg1YTBiNDY1NDhhYjNkOGJiYjYzZmM5YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT/+qNu9beekJuW2gD6rHo6VGMC5
uPkCymNncRSJOKRWI984vrWjXvVyqohhQBjCx5zT56i0rgoi9+aLaeukqQonzUIK
WotoHXtKsdRlDUU29GQjp2gOPDbeQwTtZmGEuh1BaxNzFhNaJgYtgx052WQM/o1y
m/nhCTysWNCm2J4Ue/ek6NBMKTOOR5fNqwEjKn6MJueOfBrxC0/dP3ec7SL5Ly38
Xs7Fqfnb4uT4GLoLWh0zvlBSCKlbtS6/KoUZ1b7w+la76/Ri4BhDvgsxsSFoy+pd
SXB3JlSS+mCP6+8sd+8jLX8C3hnBHPAhILsJObvEgTVyP1c3i+QFkQCoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIueqJUdISGFoLRlSKs9i7tj/Ju3MB8GA1UdIwQY
MBaAFNWgheuVrVX7OmskfpZ4ESoU2BkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzIt
Zjk0YWRjMWJiZDkwLzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzItZjk0YWRjMWJiZDkw
LzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVG8VNgR
dqQr4E/HqKdHiBi4Mxzh162AZ1aCn3pqIa+1+vk+94BO1XGYoFE2dI/TvOzI/R2y
CVb8G92P3G3ZW8iPRTs+Hy6G2C7NdwjcJRkoCCrjCZXkCeXjjlkzPHVRt/ghV24I
QkCt5xkdb1Dzy5r4RN1p8t9d7rM5oCXP2QfrdWhEeLRCuwMEsdQtXd9aMXJ7O09j
OSUvppTZo9/BZlMpLnLh+FPfZx6evh7ehV0+PqCKG8hE4vuM9MAS+Mj/iVcjVUtf
BpU0xyI9JYollctewn73RN4E6vfQuuO91fSPvA6q8P88CYx0ZhiWFMDlOvoin2ni
/VK9okSHP7ym7w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:31 2026 by rpki-client