Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: Mym10ZC2zbK5VTp3UlBsR6gQOGxR/XF9yLV1rvUwQfM=
Subject key identifier: F4:25:D8:48:B9:76:7E:92:76:85:DF:96:4C:48:B5:9F:99:27:FB:0F
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 01A13F70A4B1A942C940A88BD1415D68C218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 12:01:49 +0000
Manifest this update: Thu 15 Oct 2026 12:01:49 +0000
Manifest next update: Fri 16 Oct 2026 12:01:49 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: xoOLv/dhqlbACNUFhxsHbtEaQUj402iuVs2a/H6pWUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:a4:b1:a9:42:c9:40:a8:8b:d1:41:5d:68:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Oct 15 12:01:49 2026 GMT
Not After : Oct 16 12:01:49 2026 GMT
Subject: CN=f425d848b9767e927685df964c48b59f9927fb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:fb:49:84:1b:f2:25:20:a1:28:69:a9:2b:
2f:95:1b:ef:ce:fb:71:25:63:bd:05:c6:3a:51:e8:
d6:03:dd:5d:07:b5:74:30:44:1f:6a:25:67:ed:d6:
ed:0d:2a:8f:5c:7e:24:50:e8:85:2f:91:57:4d:b9:
44:4c:c4:ee:78:a0:90:71:d1:be:a0:24:a2:08:2f:
56:12:3b:55:1a:1c:46:57:e7:2e:34:0e:8f:63:4b:
9c:9c:68:d7:6c:6d:04:fa:bf:4c:d2:75:ee:72:0e:
2f:92:19:60:91:e1:ed:d8:a9:1a:ac:34:7f:33:8b:
ed:d7:7f:3d:42:92:15:38:08:f9:57:06:52:52:e1:
ef:95:55:cf:2c:e0:f1:46:b2:9e:43:a1:84:b0:43:
36:41:ce:76:27:d4:a0:b8:97:4f:56:ff:c2:43:9b:
f9:73:21:d9:a4:62:8c:5f:02:61:f4:55:65:ef:5f:
4c:48:31:3d:9e:be:52:48:17:74:e3:64:20:90:27:
1c:c6:db:b6:aa:16:bc:65:e4:51:1c:8e:7a:de:13:
10:8e:7e:36:5f:11:2f:cb:91:77:89:5c:b7:41:6b:
3b:71:f8:4f:d0:b5:90:cb:38:be:c7:dd:24:e0:5a:
be:51:b2:97:4b:51:e8:52:ba:16:00:bb:24:6d:0a:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:D8:48:B9:76:7E:92:76:85:DF:96:4C:48:B5:9F:99:27:FB:0F
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:38:34:d1:a8:24:8e:d0:55:31:e4:a4:85:50:b1:6e:35:
cf:3c:98:67:37:28:47:e5:d9:de:e6:30:43:2a:78:33:ae:ee:
66:3e:b1:dc:56:70:0e:f4:15:73:17:22:36:44:78:7c:4d:88:
e0:e7:4a:c2:7a:0e:d9:d0:dd:23:b7:4f:45:ed:f7:1a:ba:59:
26:bf:ff:59:b4:d1:41:5f:77:e9:a1:25:bd:a6:8c:5e:46:e5:
68:fa:4f:f9:f6:c1:ee:ec:6d:8c:52:ec:f7:22:c0:5f:49:6c:
2f:f8:aa:1e:6c:ce:e2:e4:b3:8e:75:10:76:7b:84:3c:65:19:
a3:46:d4:ea:7f:27:97:0e:1b:06:51:99:00:06:3a:9f:8b:00:
e7:7e:af:01:a8:5c:f3:81:f4:c6:2e:02:ad:3b:28:4a:85:12:
f6:7c:fb:3b:ab:0a:ee:08:7a:4b:d1:a1:f5:b0:ee:ec:74:b1:
77:d0:79:e6:b4:b3:f3:5c:c8:f3:18:75:c5:62:a3:84:a3:ac:
89:38:31:21:ad:24:f9:54:66:98:47:24:b8:32:6b:8e:25:44:
1c:e5:f6:64:7b:7f:80:6e:60:02:c9:83:e9:9d:df:f1:a3:2d:
ba:21:e3:58:1a:71:62:46:77:91:02:14:81:93:9c:b4:e6:88:
ea:f6:51:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/cKSxqULJQKiL0UFdaMIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzVjOTU0ZWUzOWM5MWU1MjVmNjhiMzA3MWNhMDU3OGQ2
YTViYWUwHhcNMjYxMDE1MTIwMTQ5WhcNMjYxMDE2MTIwMTQ5WjAzMTEwLwYDVQQD
EyhmNDI1ZDg0OGI5NzY3ZTkyNzY4NWRmOTY0YzQ4YjU5Zjk5MjdmYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP/7SYQb8iUgoShpqSsvlRvvzvtx
JWO9BcY6UejWA91dB7V0MEQfaiVn7dbtDSqPXH4kUOiFL5FXTblETMTueKCQcdG+
oCSiCC9WEjtVGhxGV+cuNA6PY0ucnGjXbG0E+r9M0nXucg4vkhlgkeHt2KkarDR/
M4vt1389QpIVOAj5VwZSUuHvlVXPLODxRrKeQ6GEsEM2Qc52J9SguJdPVv/CQ5v5
cyHZpGKMXwJh9FVl719MSDE9nr5SSBd042QgkCccxtu2qha8ZeRRHI563hMQjn42
XxEvy5F3iVy3QWs7cfhP0LWQyzi+x90k4Fq+UbKXS1HoUroWALskbQoHnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQl2Ei5dn6SdoXflkxItZ+ZJ/sPMB8GA1UdIwQY
MBaAFNZ1yVTuOckeUl9oswccoFeNaluuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUt
NTcxN2NmNTJjNzlhLzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUtNTcxN2NmNTJjNzlh
LzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXf04NNGo
JI7QVTHkpIVQsW41zzyYZzcoR+XZ3uYwQyp4M67uZj6x3FZwDvQVcxciNkR4fE2I
4OdKwnoO2dDdI7dPRe33GrpZJr//WbTRQV936aElvaaMXkblaPpP+fbB7uxtjFLs
9yLAX0lsL/iqHmzO4uSzjnUQdnuEPGUZo0bU6n8nlw4bBlGZAAY6n4sA536vAahc
84H0xi4CrTsoSoUS9nz7O6sK7gh6S9Gh9bDu7HSxd9B55rSz81zI8xh1xWKjhKOs
iTgxIa0k+VRmmEckuDJrjiVEHOX2ZHt/gG5gAsmD6Z3f8aMtuiHjWBpxYkZ3kQIU
gZOctOaI6vZRaA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:56 2026 by rpki-client