Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
File: 1-ItEPpksZlZYlC5okNKY1ozeZCU.mft (raw, json)
Hash identifier: fa0er0V7wMRtWf/SEMZrctRwTeuBSFGyMyjZUNAWWqQ=
Subject key identifier: F5:2D:63:3F:3C:D8:DA:BC:90:C1:D7:C5:2A:32:24:56:1F:0B:5B:1B
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Certificate issuer: /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial: 01A12FC5D6D135A878F30D713AC87C0C4AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
Manifest number: 024A
Signing time: Mon 12 Oct 2026 11:00:57 +0000
Manifest this update: Mon 12 Oct 2026 11:00:57 +0000
Manifest next update: Tue 13 Oct 2026 11:00:57 +0000
Files and hashes: 1: 1-ItEPpksZlZYlC5okNKY1ozeZCU.crl (hash: apu+EAsEWzfQSU3jDQKcHdt3ObA/66/WdjOlkzPACUQ=)
2: 560UvqVud9DEuhQPr1x60Rz_4no.asa (hash: R22iZnCp/y6i8IZet00/Fkh5m7KFKy8c2ikVMY1ramc=)
3: Kf9QvVgVrtl0XM8frEpJ_fd4yfM.roa (hash: fg4f8lm5urIblTtWM6P0oF5ZkLFnBYAOFc4g9paZJZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c5:d6:d1:35:a8:78:f3:0d:71:3a:c8:7c:0c:4a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
Validity
Not Before: Oct 12 11:00:57 2026 GMT
Not After : Oct 13 11:00:57 2026 GMT
Subject: CN=f52d633f3cd8dabc90c1d7c52a3224561f0b5b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:f0:2d:62:80:4f:04:86:c3:58:c5:d3:1e:
df:55:79:0e:d3:14:ce:dd:fb:06:f9:a3:33:bf:5e:
2d:6d:2b:08:f7:a0:65:bf:ee:12:a3:9a:e4:fa:ff:
32:0b:12:5e:e7:cd:6e:9e:14:8c:70:08:26:59:8b:
30:50:66:1f:98:a8:a6:ab:a6:b2:a4:ea:1a:12:1d:
c8:b2:f2:18:4c:0b:d5:02:cd:64:8d:3f:fd:eb:c4:
c2:5c:99:4d:45:00:44:fb:b0:8e:8b:c6:78:f6:53:
f5:5c:53:5a:53:d9:c9:36:ee:95:b4:ee:59:ef:e0:
01:70:2b:77:32:30:17:1b:04:b2:06:6d:41:b2:5b:
5e:3d:2b:56:38:6f:cb:94:cf:2f:2f:94:1d:ab:71:
f4:fe:a1:a7:ca:d4:f7:4e:c5:fb:f4:1b:fb:4b:8c:
a5:79:3b:79:1e:bb:fe:25:25:1d:c7:96:2a:83:ab:
72:e6:96:09:7c:a7:26:a5:e7:a0:4f:db:ef:cd:4c:
52:74:bb:c0:24:7d:ec:b3:0e:b5:e6:97:fc:3a:c4:
71:15:28:e5:27:75:7a:31:93:65:85:10:a4:d6:db:
6b:f0:3e:14:10:85:4e:07:7f:b9:08:cb:ec:cf:76:
22:47:a3:e6:f2:4b:59:a9:40:65:86:12:94:5c:70:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2D:63:3F:3C:D8:DA:BC:90:C1:D7:C5:2A:32:24:56:1F:0B:5B:1B
X509v3 Authority Key Identifier:
keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:62:d6:36:43:59:44:ae:1a:4c:c4:fa:ad:9d:9c:21:12:
95:aa:65:8a:97:70:7d:03:8e:c2:e6:3b:60:3c:97:34:16:6d:
28:e9:ed:05:c0:42:2f:fb:49:5c:16:f1:e8:82:6f:d8:38:7d:
98:6d:46:80:d2:8b:b5:9b:93:3d:e7:f8:32:d9:3c:77:1d:03:
65:db:0d:82:15:99:b5:3c:71:55:ee:08:e8:15:12:d3:08:fc:
70:d8:d2:09:0e:2c:84:be:45:81:30:88:eb:2d:72:48:4a:f6:
17:41:b0:18:18:71:10:05:7e:a4:a7:7b:6a:13:a5:c9:43:d7:
d3:c5:ce:b2:42:d1:cd:7f:1d:e8:7a:83:1f:44:9b:d4:33:1a:
32:3c:18:1e:29:30:c6:31:c8:77:2d:ff:f2:61:9e:f8:6c:83:
57:cc:71:6b:4b:f1:89:a2:06:4c:87:ef:e2:5e:3b:52:da:24:
2f:a2:07:25:7e:3b:a3:74:72:65:8e:7e:d4:15:c8:dd:00:bd:
a5:51:9b:c9:7e:b2:f5:cf:95:81:b3:5b:1e:ce:5d:be:79:ad:
42:f4:6d:68:52:c8:ff:fb:7a:bd:25:4a:70:08:fe:4f:fe:eb:
f6:6c:19:fc:c1:db:ec:89:0a:05:56:66:41:ed:2a:c6:93:14:
10:15:da:7e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaEvxdbRNah48w1xOsh8DEr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OGI0NDNlOTkyYzY2NTY1ODk0MmU2ODkwZDI5OGQ2OGNk
ZTY0MjUwHhcNMjYxMDEyMTEwMDU3WhcNMjYxMDEzMTEwMDU3WjAzMTEwLwYDVQQD
EyhmNTJkNjMzZjNjZDhkYWJjOTBjMWQ3YzUyYTMyMjQ1NjFmMGI1YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/HwLWKATwSGw1jF0x7fVXkO0xTO
3fsG+aMzv14tbSsI96Blv+4So5rk+v8yCxJe581unhSMcAgmWYswUGYfmKimq6ay
pOoaEh3IsvIYTAvVAs1kjT/968TCXJlNRQBE+7COi8Z49lP1XFNaU9nJNu6VtO5Z
7+ABcCt3MjAXGwSyBm1BsltePStWOG/LlM8vL5Qdq3H0/qGnytT3TsX79Bv7S4yl
eTt5Hrv+JSUdx5Yqg6ty5pYJfKcmpeegT9vvzUxSdLvAJH3ssw615pf8OsRxFSjl
J3V6MZNlhRCk1ttr8D4UEIVOB3+5CMvsz3YiR6Pm8ktZqUBlhhKUXHCC2wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPUtYz882Nq8kMHXxSoyJFYfC1sbMB8GA1UdIwQY
MBaAFPiLRD6ZLGZWWJQuaJDSmNaM3mQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JdEVQcGtzWmxaWWxDNW9rTktZMW96ZVpDVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvYmZiNTQyLTRmNjctNDZjNS05NzEw
LTY5NDI1MmYwMjlmMS8xLzEtSXRFUHBrc1psWllsQzVva05LWTFvemVaQ1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzViL2JmYjU0Mi00ZjY3LTQ2YzUtOTcxMC02OTQyNTJmMDI5
ZjEvMS8xLUl0RVBwa3NabFpZbEM1b2tOS1kxb3plWkNVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzVi
1jZDWUSuGkzE+q2dnCESlaplipdwfQOOwuY7YDyXNBZtKOntBcBCL/tJXBbx6IJv
2Dh9mG1GgNKLtZuTPef4Mtk8dx0DZdsNghWZtTxxVe4I6BUS0wj8cNjSCQ4shL5F
gTCI6y1ySEr2F0GwGBhxEAV+pKd7ahOlyUPX08XOskLRzX8d6HqDH0Sb1DMaMjwY
HikwxjHIdy3/8mGe+GyDV8xxa0vxiaIGTIfv4l47UtokL6IHJX47o3RyZY5+1BXI
3QC9pVGbyX6y9c+VgbNbHs5dvnmtQvRtaFLI//t6vSVKcAj+T/7r9mwZ/MHb7IkK
BVZmQe0qxpMUEBXafg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 18:28:46 2026 by rpki-client