Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: FxX/l/lUZ+1704w7Fh35Q1THkxawGkcwph5KTySNGRI=
Subject key identifier: 61:8D:B3:6A:A4:40:96:85:1E:6E:C5:4B:30:A2:FB:A5:23:3B:9D:97
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 01A001DCF53208290056C9C930ED2DBDE896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:00:52 +0000
Manifest this update: Fri 14 Aug 2026 20:00:52 +0000
Manifest next update: Sat 15 Aug 2026 20:00:52 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: dPQh9GOPsLqN/JBf2A2RRy93+pkZjdhu5ml8JvY3h0E=)
2: FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa (hash: r/kaZb9DIyXkcq115EsvWd63BomYksvgYorP1CzK3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:f5:32:08:29:00:56:c9:c9:30:ed:2d:bd:e8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Aug 14 20:00:52 2026 GMT
Not After : Aug 15 20:00:52 2026 GMT
Subject: CN=618db36aa44096851e6ec54b30a2fba5233b9d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:61:f3:a1:f9:b5:24:30:ee:a3:9e:13:5d:
7b:02:b7:e9:b3:f1:59:8a:98:e0:73:c0:d2:ff:e7:
19:68:4f:44:05:39:76:2f:54:c5:b6:89:fd:7a:9a:
ca:37:ce:88:d1:42:93:3a:3b:d7:ff:5d:74:62:bd:
7d:8c:62:bb:ff:db:39:ac:5e:16:d3:33:09:71:34:
f9:ec:48:76:ca:3d:e7:07:da:6c:c4:06:97:72:f8:
03:0f:0c:61:05:c3:e2:7d:b3:d9:0d:c7:01:cc:f9:
ee:dc:dd:eb:cc:da:eb:02:93:9f:4b:62:5a:1d:d3:
34:d3:7d:be:cc:9e:bf:14:c7:35:e6:1f:47:d1:15:
9f:0f:d2:bf:92:98:e2:bd:1a:53:41:e6:3a:6b:ce:
74:e9:20:e6:d1:f5:b6:fe:60:8a:2f:46:7c:fb:dd:
fd:aa:09:a2:24:11:3e:12:78:6e:c9:83:e0:c3:87:
76:a3:01:b5:f7:b4:35:78:d4:9e:d5:35:50:b5:eb:
af:8f:80:4a:53:56:60:4f:0b:26:05:5f:d4:05:e8:
21:53:f3:30:cd:a7:0c:30:7f:e8:8a:f8:f2:3e:71:
16:9c:ec:eb:e3:49:15:36:cc:22:a9:66:d3:c2:e5:
35:8f:c3:1d:1b:c9:9e:4a:83:5a:dc:0f:2b:85:c3:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8D:B3:6A:A4:40:96:85:1E:6E:C5:4B:30:A2:FB:A5:23:3B:9D:97
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3f:6b:f1:e9:2b:01:2f:fe:ca:e7:a1:bc:08:71:2e:6c:7a:
14:65:a4:e5:70:ca:a6:bc:af:d4:8c:23:58:2d:20:be:20:46:
7d:ca:d6:0e:42:fe:d3:aa:bf:24:a7:c8:3a:3c:d1:34:e4:c8:
43:f3:19:dc:34:e0:4b:64:a8:c5:6f:4e:43:42:82:8d:e8:e6:
c7:ae:df:92:56:30:77:fe:72:83:b4:6b:52:ed:37:e3:06:e1:
a7:df:27:c4:34:57:60:60:5d:fb:cd:70:f4:76:ae:2e:68:5e:
e9:55:85:77:c1:4a:52:65:58:a1:46:f6:27:65:70:09:b0:5c:
87:06:41:de:a8:f0:fe:34:3c:d7:93:35:6c:ae:58:53:94:ae:
d1:c4:dd:36:49:ca:9d:84:2f:94:fe:ac:5c:ad:82:a5:9e:b5:
35:44:92:78:71:70:fc:d5:83:81:e9:8d:f3:1b:fe:ef:d7:f0:
6b:26:a0:f5:2a:d0:bc:83:24:d6:42:44:f7:ca:63:86:d0:06:
4f:13:b4:a0:51:65:12:94:86:47:bd:49:51:d8:90:83:86:6a:
08:0b:e2:d4:3d:9d:df:44:c9:22:6a:b8:15:13:c8:38:95:4f:
9e:cb:94:4a:cc:ee:6f:c1:01:e1:a5:fa:eb:60:8e:81:61:df:
d0:2f:bc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:28 2026 by rpki-client