Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: /Xy98WjcZoB8LahdIcJdnLhp5RnuCIji/X1qmnaWrjE=
Subject key identifier: 80:EC:E3:A9:2F:29:82:52:00:BF:5F:52:31:20:B0:5D:A3:A0:8D:DD
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 01A14E3E37C62CC396C71FBBB53FD9D075F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 1AB3
Signing time: Sun 18 Oct 2026 09:01:02 +0000
Manifest this update: Sun 18 Oct 2026 09:01:02 +0000
Manifest next update: Mon 19 Oct 2026 09:01:02 +0000
Files and hashes: 1: ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa (hash: iQJDM30z8fYynMrfjXIbza+TCD7vD5Lcd4NjgJS6pYQ=)
2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: F1PXgXEB9EUy3zxr0MdGf02mpopjd2HDdqxqGnYAdAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:3e:37:c6:2c:c3:96:c7:1f:bb:b5:3f:d9:d0:75:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Oct 18 09:01:02 2026 GMT
Not After : Oct 19 09:01:02 2026 GMT
Subject: CN=80ece3a92f29825200bf5f523120b05da3a08ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:85:46:1e:60:21:fb:26:94:37:ed:09:a4:
8d:16:50:70:9e:df:4a:2e:ea:6f:b1:04:f5:58:4f:
3d:51:b5:35:36:e8:72:6b:77:f8:21:78:3d:44:4f:
03:2c:a4:dc:ee:db:c8:30:48:c1:09:64:d7:b1:b6:
38:b0:08:f4:22:a1:34:56:ab:17:13:2d:7d:35:a3:
fe:2c:d8:fd:5c:7c:10:0b:2f:3f:46:ce:80:a8:80:
9f:97:af:cc:59:a1:74:21:e2:51:ed:e4:91:f5:8a:
fc:85:d3:aa:c0:81:18:90:d5:99:0c:19:e8:c8:6b:
f5:98:d7:1c:f1:c7:d9:84:76:22:d6:54:b2:25:7b:
97:7d:72:d3:49:c4:34:8b:3e:1a:e2:5b:fe:7c:00:
f8:a7:7f:17:2c:eb:81:3b:4b:3a:06:70:20:38:d4:
30:63:7c:16:4c:03:8b:22:08:f9:b3:0f:de:4b:9e:
d4:ed:01:34:d2:61:55:7e:05:aa:1c:d6:c3:7d:3c:
b3:6a:69:cb:0e:1c:5b:c6:1e:de:7d:79:8d:18:b2:
5b:e2:84:7a:b2:eb:45:57:b4:e1:4f:be:99:f9:ea:
2f:56:5c:d8:1d:4b:9e:3c:b6:e4:3c:5c:d3:83:2e:
dc:f2:28:a9:04:f9:1e:7b:f3:b2:bf:e0:93:7c:23:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:E3:A9:2F:29:82:52:00:BF:5F:52:31:20:B0:5D:A3:A0:8D:DD
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b2:e3:ce:50:d9:6b:53:2f:6d:bf:0e:ae:73:da:bc:55:fc:
87:8c:ee:a1:9d:da:75:52:ca:08:40:c7:b9:04:d6:8b:bf:41:
d3:79:9c:ce:01:f0:f8:71:ea:75:bf:e4:00:7c:13:96:7a:62:
43:61:00:a3:bc:92:31:4b:6e:10:9b:63:cd:70:77:62:bc:96:
bc:4b:25:21:55:2e:c8:09:ae:90:4b:6b:3b:a7:af:4e:04:df:
e4:50:84:82:dc:f2:a3:92:f9:55:db:48:b6:7a:b0:66:03:6a:
53:cd:47:d2:84:3b:7d:ca:96:ef:13:03:13:0a:00:f1:17:ff:
94:64:2c:ee:da:0f:73:d5:86:5c:59:aa:a3:22:35:b0:71:17:
85:c4:fb:e0:d0:11:70:db:d0:95:de:81:e4:82:8f:e7:9d:c1:
3f:fc:43:b4:71:d8:a6:9a:3c:f9:52:80:af:62:b8:16:31:c0:
a1:33:e4:dd:04:79:45:af:43:3d:8d:7a:4b:6b:f2:88:13:88:
9b:3f:8b:9d:b7:91:c6:2f:a0:60:75:8f:0a:db:04:d8:48:cd:
3e:c6:09:2b:2c:ba:e3:86:42:95:29:26:ae:73:d3:0b:1b:ed:
1b:cf:8e:b5:21:d1:d1:eb:2b:7a:df:67:50:bc:88:96:9a:4b:
4b:e3:76:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFOPjfGLMOWxx+7tT/Z0HX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk
ZDRlZTYwHhcNMjYxMDE4MDkwMTAyWhcNMjYxMDE5MDkwMTAyWjAzMTEwLwYDVQQD
Eyg4MGVjZTNhOTJmMjk4MjUyMDBiZjVmNTIzMTIwYjA1ZGEzYTA4ZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKGFRh5gIfsmlDftCaSNFlBwnt9K
LupvsQT1WE89UbU1Nuhya3f4IXg9RE8DLKTc7tvIMEjBCWTXsbY4sAj0IqE0VqsX
Ey19NaP+LNj9XHwQCy8/Rs6AqICfl6/MWaF0IeJR7eSR9Yr8hdOqwIEYkNWZDBno
yGv1mNcc8cfZhHYi1lSyJXuXfXLTScQ0iz4a4lv+fAD4p38XLOuBO0s6BnAgONQw
Y3wWTAOLIgj5sw/eS57U7QE00mFVfgWqHNbDfTyzamnLDhxbxh7efXmNGLJb4oR6
sutFV7ThT76Z+eovVlzYHUuePLbkPFzTgy7c8iipBPkee/Oyv+CTfCPPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDs46kvKYJSAL9fUjEgsF2joI3dMB8GA1UdIwQY
MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt
NDJkYWZiNGI1MWQyLzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy
LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrLjzlDZ
a1Mvbb8OrnPavFX8h4zuoZ3adVLKCEDHuQTWi79B03mczgHw+HHqdb/kAHwTlnpi
Q2EAo7ySMUtuEJtjzXB3YryWvEslIVUuyAmukEtrO6evTgTf5FCEgtzyo5L5VdtI
tnqwZgNqU81H0oQ7fcqW7xMDEwoA8Rf/lGQs7toPc9WGXFmqoyI1sHEXhcT74NAR
cNvQld6B5IKP553BP/xDtHHYppo8+VKAr2K4FjHAoTPk3QR5Ra9DPY16S2vyiBOI
mz+LnbeRxi+gYHWPCtsE2EjNPsYJKyy644ZClSkmrnPTCxvtG8+OtSHR0esret9n
ULyIlppLS+N26Q==
-----END CERTIFICATE-----
Generated at Sun Oct 18 14:44:07 2026 by rpki-client