Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: fzvok3fcyxG0lpkmWSqytzfOaosVv7RXCzecr/JFNHk=
Subject key identifier: 90:5D:AC:36:EC:C4:46:4D:A7:13:CF:89:94:4C:7F:3F:DB:10:36:09
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 01A00213EF490A86E8BC6E398CAF65189E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 09C2
Signing time: Fri 14 Aug 2026 21:00:55 +0000
Manifest this update: Fri 14 Aug 2026 21:00:55 +0000
Manifest next update: Sat 15 Aug 2026 21:00:55 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: TaLzAwQHAZYgyLElgPRyAQzWqixE+62jEn1He+FJOUs=)
2: KY98OK9jKpqbO2GmZe7Es_X3AuY.roa (hash: cBxNonBZQsdFtI0G+UJX4+MOa5fw7YrWs9H/ZAWUf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:ef:49:0a:86:e8:bc:6e:39:8c:af:65:18:9e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Aug 14 21:00:55 2026 GMT
Not After : Aug 15 21:00:55 2026 GMT
Subject: CN=905dac36ecc4464da713cf89944c7f3fdb103609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:73:fd:49:88:f0:70:a7:5c:d0:5f:c7:d0:
46:59:a6:c3:62:8b:d7:5d:b9:94:1e:1c:64:d0:0e:
9a:86:dc:bd:2b:62:84:cd:74:39:9d:d8:88:15:43:
e8:8d:97:f1:0f:03:03:5f:22:7a:e8:5c:e8:41:5b:
3e:e5:d3:a4:f8:5a:50:40:95:5c:a8:e2:83:c5:69:
84:f4:52:c8:db:0c:27:97:fb:11:c1:31:13:c5:6c:
52:b6:68:2b:79:de:c3:a1:24:19:3d:8c:84:3e:fa:
04:2d:84:7d:cd:67:de:3f:db:54:22:59:30:9c:e2:
44:2e:e5:64:12:5f:4e:ed:09:64:c6:e8:33:7e:66:
34:02:46:cf:ff:c3:c0:b9:fa:3f:11:55:d0:7d:f7:
f1:47:6f:a1:15:35:d3:3a:7e:3a:34:b0:28:21:40:
43:05:db:89:28:b8:a3:f7:41:e9:60:ea:ae:ac:c4:
1a:91:b1:be:f3:ae:82:10:95:29:f1:c6:40:93:3c:
0b:5d:9d:12:b5:a1:6d:a1:c9:e0:a7:80:4a:3f:e1:
8d:31:36:89:c7:dc:7c:61:68:cc:53:9f:22:34:88:
0b:67:91:6a:ed:c3:e1:f7:e3:36:f4:68:22:d8:35:
63:a1:fc:e2:d5:8d:1a:09:d2:2d:f0:1b:ac:73:f3:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:AC:36:EC:C4:46:4D:A7:13:CF:89:94:4C:7F:3F:DB:10:36:09
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:69:32:dc:90:ff:b7:ef:9c:1b:66:eb:36:e0:ec:95:54:2b:
0f:47:0c:e3:5c:50:b3:fe:cc:4c:cd:57:ac:9b:95:96:5c:7b:
ea:35:91:4b:76:3a:45:ae:9f:b9:ee:eb:54:c2:ea:55:3e:9f:
6f:f7:2f:c6:26:65:0a:c1:f7:de:1f:19:1f:40:af:af:ac:d5:
e3:0e:d9:f6:8d:d6:e8:d5:fc:47:80:56:37:0b:1b:5e:e8:b7:
c5:2b:fe:32:b4:1f:f5:3d:55:5b:ff:d8:a2:1d:fc:21:16:11:
15:04:e0:48:01:0a:6d:ba:b8:dc:54:1e:ad:36:14:90:5d:eb:
c5:98:2a:59:3c:96:60:06:f1:54:f1:a5:f3:e3:63:36:c7:db:
77:c7:a2:f1:98:4a:f1:61:ea:45:3a:41:db:3a:ab:e5:83:e6:
16:d9:52:e2:e8:df:0e:af:df:14:f9:db:db:8e:97:8a:03:f0:
76:44:a8:c5:71:1e:f8:8a:ec:bb:ef:1b:3c:6a:97:6d:58:fe:
b2:c1:3f:64:c4:af:e3:ad:e6:84:9f:31:66:e1:0b:23:b1:8a:
8b:da:f9:2b:e2:f6:4d:3d:31:77:64:64:bc:bb:44:16:33:75:
6f:68:e0:a2:06:46:5d:25:08:89:c5:d1:20:87:0f:80:68:0c:
7e:bc:14:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE+9JCobovG45jK9lGJ43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy
ZjMyMWIwHhcNMjYwODE0MjEwMDU1WhcNMjYwODE1MjEwMDU1WjAzMTEwLwYDVQQD
Eyg5MDVkYWMzNmVjYzQ0NjRkYTcxM2NmODk5NDRjN2YzZmRiMTAzNjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxClz/UmI8HCnXNBfx9BGWabDYovX
XbmUHhxk0A6ahty9K2KEzXQ5ndiIFUPojZfxDwMDXyJ66FzoQVs+5dOk+FpQQJVc
qOKDxWmE9FLI2wwnl/sRwTETxWxStmgred7DoSQZPYyEPvoELYR9zWfeP9tUIlkw
nOJELuVkEl9O7QlkxugzfmY0AkbP/8PAufo/EVXQfffxR2+hFTXTOn46NLAoIUBD
BduJKLij90HpYOqurMQakbG+866CEJUp8cZAkzwLXZ0StaFtocngp4BKP+GNMTaJ
x9x8YWjMU58iNIgLZ5Fq7cPh9+M29Ggi2DVjofzi1Y0aCdIt8Busc/PglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBdrDbsxEZNpxPPiZRMfz/bEDYJMB8GA1UdIwQY
MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt
ZWZkMjg5MmI2ZWJmLzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm
LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomky3JD/
t++cG2brNuDslVQrD0cM41xQs/7MTM1XrJuVllx76jWRS3Y6Ra6fue7rVMLqVT6f
b/cvxiZlCsH33h8ZH0Cvr6zV4w7Z9o3W6NX8R4BWNwsbXui3xSv+MrQf9T1VW//Y
oh38IRYRFQTgSAEKbbq43FQerTYUkF3rxZgqWTyWYAbxVPGl8+NjNsfbd8ei8ZhK
8WHqRTpB2zqr5YPmFtlS4ujfDq/fFPnb246XigPwdkSoxXEe+Irsu+8bPGqXbVj+
ssE/ZMSv463mhJ8xZuELI7GKi9r5K+L2TT0xd2RkvLtEFjN1b2jgogZGXSUIicXR
IIcPgGgMfrwUuw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:11:59 2026 by rpki-client