Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
File: 1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft (raw, json)
Hash identifier: LA932ldQxHxQ5pn0Tef65GhuqYWTPWAmFXMh0teUtLs=
Subject key identifier: F7:BF:BA:CC:5E:C1:B8:AE:94:EA:74:1E:37:49:32:AA:49:AA:A2:76
Authority key identifier: D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4
Certificate issuer: /CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
Certificate serial: 01A040F33DAF4BD739FCEC944DCD45D7BEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
Manifest number: 01EC
Signing time: Thu 27 Aug 2026 02:01:17 +0000
Manifest this update: Thu 27 Aug 2026 02:01:17 +0000
Manifest next update: Fri 28 Aug 2026 02:01:17 +0000
Files and hashes: 1: 1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl (hash: PHyIA0gbhXa7Q2sjFtOKCtP71WTTg97WDHtdMpoBj0Q=)
2: o0b3FLGT6_KTAMziRPFBDuoxIFs.roa (hash: HuGKkmAJlpIF3je5dBAlXM+W0Ozh9HwD67fbKdy/D8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f3:3d:af:4b:d7:39:fc:ec:94:4d:cd:45:d7:be:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
Validity
Not Before: Aug 27 02:01:17 2026 GMT
Not After : Aug 28 02:01:17 2026 GMT
Subject: CN=f7bfbacc5ec1b8ae94ea741e374932aa49aaa276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:4d:e7:70:7e:a5:23:9e:9c:57:9b:d2:cd:
4d:cb:1f:b3:8e:b3:56:6d:65:43:37:8e:2d:5c:17:
6c:41:ce:54:ba:76:50:24:33:e6:10:31:61:51:80:
10:54:9d:f2:03:62:5c:17:5e:0b:f3:0c:75:3b:42:
08:93:9b:e3:3d:81:37:03:c4:3e:74:fb:a9:0c:e6:
2c:21:e8:18:1c:a5:4a:50:f3:de:85:26:eb:0c:51:
1d:8a:d7:a4:50:5c:e8:e6:82:a4:87:74:f7:1f:20:
17:eb:ba:68:9a:ca:1b:82:2c:3d:b0:31:d6:55:41:
da:fe:d5:fa:93:93:f9:29:8b:fb:cb:f5:ef:50:99:
7d:1c:18:37:91:ec:49:75:64:99:31:7f:3c:47:a9:
56:08:67:7c:ab:35:55:11:8b:af:1a:de:fb:bd:85:
3e:b7:63:69:2e:0f:b4:f2:eb:5c:24:18:d9:b7:5f:
75:24:65:f9:25:fa:19:96:22:76:bf:5b:c6:25:e0:
36:e6:8b:88:5b:50:bd:17:d2:d4:58:ac:4f:36:e7:
2b:80:e9:92:e0:f4:53:99:d9:4f:d3:11:45:c1:de:
35:1c:b6:08:31:d8:c6:52:60:71:1d:53:68:3a:be:
ae:b7:8d:cf:3e:8d:21:65:a9:b1:31:09:58:8d:05:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:BA:CC:5E:C1:B8:AE:94:EA:74:1E:37:49:32:AA:49:AA:A2:76
X509v3 Authority Key Identifier:
keyid:D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:df:b7:87:3a:6d:92:59:06:11:b1:76:d5:e4:c0:df:fa:29:
0f:14:45:4a:37:8e:44:65:13:58:94:2e:7f:68:b0:4e:8b:81:
77:af:4c:7d:5f:c4:6b:b4:25:de:63:e3:68:4f:73:cd:11:a8:
f4:25:f8:6c:10:09:bf:dd:84:0d:10:a0:b6:4d:57:cc:18:2a:
80:2a:94:c6:0a:98:3d:44:0e:c4:ba:fc:26:4c:a5:8b:b5:3a:
a7:8a:71:3a:16:df:5b:4c:ea:ab:d6:1e:35:70:8d:67:9a:d5:
61:c8:e8:f0:19:58:86:b6:35:14:00:f0:c7:12:7c:e2:26:62:
98:ea:66:25:e6:d1:b5:9a:d5:0d:cf:67:73:fd:82:43:fb:5b:
e4:c8:05:35:0e:60:d3:d4:f9:35:13:e7:f7:7c:bc:45:1a:2a:
4b:55:81:35:f4:07:f7:47:68:41:5c:e1:a7:2f:68:e6:b9:5a:
22:fa:f3:9f:c2:5f:94:0c:b2:56:69:fc:47:b8:39:56:26:15:
e1:c4:55:14:b7:02:1c:fa:b4:47:24:70:bc:a3:0e:da:ae:01:
94:f3:aa:d8:d9:0c:c0:ac:f0:ca:f1:4f:30:56:6b:d5:75:04:
4d:85:8d:41:af:0c:5b:bf:64:db:aa:dc:31:4d:56:99:26:f7:
11:b8:8d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBA8z2vS9c5/OyUTc1F1769MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTBjYzllNmE1ZDViOTdkYmVhOTY2NjRkZDk0YWMzZTQy
MjdjZjQwHhcNMjYwODI3MDIwMTE3WhcNMjYwODI4MDIwMTE3WjAzMTEwLwYDVQQD
EyhmN2JmYmFjYzVlYzFiOGFlOTRlYTc0MWUzNzQ5MzJhYTQ5YWFhMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusJN53B+pSOenFeb0s1Nyx+zjrNW
bWVDN44tXBdsQc5UunZQJDPmEDFhUYAQVJ3yA2JcF14L8wx1O0IIk5vjPYE3A8Q+
dPupDOYsIegYHKVKUPPehSbrDFEditekUFzo5oKkh3T3HyAX67pomsobgiw9sDHW
VUHa/tX6k5P5KYv7y/XvUJl9HBg3kexJdWSZMX88R6lWCGd8qzVVEYuvGt77vYU+
t2NpLg+08utcJBjZt191JGX5JfoZliJ2v1vGJeA25ouIW1C9F9LUWKxPNucrgOmS
4PRTmdlP0xFFwd41HLYIMdjGUmBxHVNoOr6ut43PPo0hZamxMQlYjQVt5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe/usxewbiulOp0HjdJMqpJqqJ2MB8GA1UdIwQY
MBaAFNWgzJ5qXVuX2+qWZk3ZSsPkInz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFETW5tcGRXNWZiNnBabVRkbEt3LVFpZlBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mMGI2YWQtODU5Ny00OGIyLTgxYTUt
MWQ1NWNiZDNmMjJjLzEvMWFETW5tcGRXNWZiNnBabVRkbEt3LVFpZlBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9mMGI2YWQtODU5Ny00OGIyLTgxYTUtMWQ1NWNiZDNmMjJj
LzEvMWFETW5tcGRXNWZiNnBabVRkbEt3LVFpZlBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbd+3hzpt
klkGEbF21eTA3/opDxRFSjeORGUTWJQuf2iwTouBd69MfV/Ea7Ql3mPjaE9zzRGo
9CX4bBAJv92EDRCgtk1XzBgqgCqUxgqYPUQOxLr8Jkyli7U6p4pxOhbfW0zqq9Ye
NXCNZ5rVYcjo8BlYhrY1FADwxxJ84iZimOpmJebRtZrVDc9nc/2CQ/tb5MgFNQ5g
09T5NRPn93y8RRoqS1WBNfQH90doQVzhpy9o5rlaIvrzn8JflAyyVmn8R7g5ViYV
4cRVFLcCHPq0RyRwvKMO2q4BlPOq2NkMwKzwyvFPMFZr1XUETYWNQa8MW79k26rc
MU1WmSb3EbiNUQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:52 2026 by rpki-client