Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
File: 1Kje6labT0AYsLpuRDtVY663YiA.mft (raw, json)
Hash identifier: okuhOBUc5zwdepDbI0arYJw0NW/GtDpFGQzzp9EQ7Ek=
Subject key identifier: 06:16:28:DF:55:63:51:BA:FC:1E:9E:EA:00:1C:95:41:A0:AA:37:75
Authority key identifier: D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
Certificate issuer: /CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Certificate serial: 01A010E34C32E4924B33460F2B05E5015E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
Manifest number: 85
Signing time: Mon 17 Aug 2026 18:02:06 +0000
Manifest this update: Mon 17 Aug 2026 18:02:06 +0000
Manifest next update: Tue 18 Aug 2026 18:02:06 +0000
Files and hashes: 1: 1Kje6labT0AYsLpuRDtVY663YiA.crl (hash: BIw1mhCbqX61+METC6wRXmIf+ni+j/6PPIaZGcvRKXA=)
2: puE6u0HKBVhoiNbcuu-ULYY8Kk8.roa (hash: Nsy+BGKO8DFH8hsL6UVbzQQ8Z1YVvGEGRofMSsrpZ4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 18:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:e3:4c:32:e4:92:4b:33:46:0f:2b:05:e5:01:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Validity
Not Before: Aug 17 18:02:06 2026 GMT
Not After : Aug 18 18:02:06 2026 GMT
Subject: CN=061628df556351bafc1e9eea001c9541a0aa3775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:bf:c1:19:55:4f:67:50:91:87:bf:2e:ab:
68:e4:9a:ff:9b:43:fa:00:7a:ba:d6:79:84:18:d4:
05:f5:d9:2e:2a:b0:45:70:2c:29:bc:f7:dc:bd:19:
4b:e5:4a:1d:db:0a:08:18:05:9e:a0:c3:9a:21:04:
9b:a2:3a:29:98:ac:38:29:cf:0c:c5:85:bb:4e:d2:
8f:ed:11:9a:28:ea:a2:1c:bb:05:a3:22:c0:d7:99:
22:92:00:b1:1f:b9:45:6c:be:46:3c:e4:b6:74:65:
bb:e0:74:e6:13:9e:96:d0:90:6c:cd:85:44:2a:5f:
32:6b:22:c8:a3:2c:2e:ae:6d:fb:fe:cb:77:fb:d4:
32:5e:3f:83:6c:2e:fa:df:ab:3a:16:ec:c8:3d:14:
28:fb:b6:39:e0:88:99:d8:b0:31:79:67:0e:bb:1e:
6c:02:13:08:63:12:ef:ae:f1:96:1f:04:be:08:79:
da:f2:1f:07:8d:d6:29:5a:14:9d:0b:10:7d:0b:af:
a3:46:4d:88:9a:22:cd:f0:e3:72:e6:8e:54:d1:cd:
5c:e5:f5:d2:93:32:cd:99:8f:c3:9f:31:97:fb:b3:
82:12:19:75:2c:1d:3d:59:83:e5:f3:a8:a8:9e:65:
e7:57:7c:3a:d7:d0:2a:64:71:a4:30:1a:e7:4d:4a:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:16:28:DF:55:63:51:BA:FC:1E:9E:EA:00:1C:95:41:A0:AA:37:75
X509v3 Authority Key Identifier:
keyid:D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4e:58:72:91:17:93:fe:ba:5e:2e:74:46:b2:ea:44:98:f0:
70:d2:5a:a7:b6:24:30:91:b5:cb:f9:b3:46:84:45:bf:82:d0:
7a:84:80:25:90:85:2f:2c:af:3f:4c:cb:ad:01:96:1c:a5:be:
71:15:e2:16:ab:6e:03:8a:55:d6:b5:99:60:fb:85:5d:72:fd:
5d:37:43:6b:00:64:6d:33:33:09:48:dd:ed:03:9c:58:cf:a1:
a4:e7:81:cb:3c:10:93:26:49:93:37:31:3e:eb:62:85:9d:a8:
d8:31:8c:df:84:fb:c6:ea:ad:37:15:37:1a:45:2a:cf:5f:dc:
a5:6a:41:88:22:84:e3:22:12:56:29:55:a7:96:46:a4:f9:08:
e1:0f:6e:2e:30:61:6b:2c:dc:a9:3c:9a:61:a7:e5:01:6e:44:
41:4d:e9:d7:74:5d:c4:00:e3:ef:56:cf:85:26:eb:66:f6:72:
6c:6f:59:cb:c3:c1:47:cc:ee:b5:1a:91:74:f6:bf:0f:4d:76:
cd:bd:2a:61:6c:7b:44:46:62:fb:f6:c8:ed:24:93:c2:7b:76:
34:c9:64:03:fa:2e:3c:ea:17:e4:78:7e:a6:ef:f1:d2:4f:83:
6c:55:d0:e5:90:57:5b:f8:fe:47:3e:a3:15:67:da:b4:67:ce:
47:5d:5a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAQ40wy5JJLM0YPKwXlAV46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YThkZWVhNTY5YjRmNDAxOGIwYmE2ZTQ0M2I1NTYzYWVi
NzYyMjAwHhcNMjYwODE3MTgwMjA2WhcNMjYwODE4MTgwMjA2WjAzMTEwLwYDVQQD
EygwNjE2MjhkZjU1NjM1MWJhZmMxZTllZWEwMDFjOTU0MWEwYWEzNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKa/wRlVT2dQkYe/Lqto5Jr/m0P6
AHq61nmEGNQF9dkuKrBFcCwpvPfcvRlL5Uod2woIGAWeoMOaIQSbojopmKw4Kc8M
xYW7TtKP7RGaKOqiHLsFoyLA15kikgCxH7lFbL5GPOS2dGW74HTmE56W0JBszYVE
Kl8yayLIoywurm37/st3+9QyXj+DbC7636s6FuzIPRQo+7Y54IiZ2LAxeWcOux5s
AhMIYxLvrvGWHwS+CHna8h8HjdYpWhSdCxB9C6+jRk2ImiLN8ONy5o5U0c1c5fXS
kzLNmY/DnzGX+7OCEhl1LB09WYPl86ionmXnV3w619AqZHGkMBrnTUrE3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYWKN9VY1G6/B6e6gAclUGgqjd1MB8GA1UdIwQY
MBaAFNSo3upWm09AGLC6bkQ7VWOut2IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2It
MTYwMmQ2YWQxNDFhLzEvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2ItMTYwMmQ2YWQxNDFh
LzEvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME5YcpEX
k/66Xi50RrLqRJjwcNJap7YkMJG1y/mzRoRFv4LQeoSAJZCFLyyvP0zLrQGWHKW+
cRXiFqtuA4pV1rWZYPuFXXL9XTdDawBkbTMzCUjd7QOcWM+hpOeByzwQkyZJkzcx
PutihZ2o2DGM34T7xuqtNxU3GkUqz1/cpWpBiCKE4yISVilVp5ZGpPkI4Q9uLjBh
ayzcqTyaYaflAW5EQU3p13RdxADj71bPhSbrZvZybG9Zy8PBR8zutRqRdPa/D012
zb0qYWx7REZi+/bI7SSTwnt2NMlkA/ouPOoX5Hh+pu/x0k+DbFXQ5ZBXW/j+Rz6j
FWfatGfOR11avQ==
-----END CERTIFICATE-----
Generated at Tue Aug 18 01:05:24 2026 by rpki-client