Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: NOVAGeAbpBZr52XQnhwJzbFdjjhhE1PeP6f4Uzib67c=
Subject key identifier: 31:7F:40:37:BF:B9:CE:F5:C2:02:6A:7C:13:E8:AB:8D:BA:04:51:92
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 01A110A8B1278CC9B60963F968284E5B750C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 10:00:53 +0000
Manifest this update: Tue 06 Oct 2026 10:00:53 +0000
Manifest next update: Wed 07 Oct 2026 10:00:53 +0000
Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: Zy2ucwpvPu1uXlnoWIPHhTF8oH85X8KTq6Ol2gbn6A4=)
3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:b1:27:8c:c9:b6:09:63:f9:68:28:4e:5b:75:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Oct 6 10:00:53 2026 GMT
Not After : Oct 7 10:00:53 2026 GMT
Subject: CN=317f4037bfb9cef5c2026a7c13e8ab8dba045192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:9f:0a:34:65:1d:99:ca:77:9d:19:26:21:
91:80:36:cf:4b:99:85:94:9d:fb:c9:d5:2b:d3:74:
0f:46:f3:be:32:3d:ee:a9:85:b8:55:d5:1c:d4:e4:
2b:19:3f:7f:88:2d:2a:d6:29:56:dd:34:6e:12:f1:
5b:a6:7b:5d:b5:c8:ab:3a:e8:e1:4a:d7:a8:f3:6b:
46:02:91:8c:6d:27:a1:65:c0:21:26:95:aa:70:57:
6b:f0:40:37:c0:5a:41:41:8c:86:60:2a:fe:a0:87:
0c:98:2d:33:df:5f:7f:ba:c8:3e:02:d1:0d:45:0f:
3e:34:d2:dd:da:2a:31:6c:86:d6:6e:d6:c0:53:c3:
53:80:8b:c2:17:7e:73:d8:58:d2:cd:79:de:38:a5:
b0:5c:c2:19:e6:79:59:a8:76:f6:6f:3e:d3:46:79:
a7:23:8f:d7:f5:a3:03:0c:34:c9:f2:09:76:1b:f9:
00:4c:ef:3e:b6:a3:a1:9b:65:33:53:ce:e7:cb:49:
90:ff:fb:74:b2:05:9e:31:65:e0:e7:a0:d7:a6:92:
ea:c1:14:f8:eb:30:09:15:fa:a7:b6:d4:f5:53:69:
d8:5d:17:7d:5b:25:44:87:5d:8a:38:9a:ab:01:79:
48:ce:34:1b:fb:d0:b7:46:07:07:91:92:25:4a:91:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:40:37:BF:B9:CE:F5:C2:02:6A:7C:13:E8:AB:8D:BA:04:51:92
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:40:b2:c4:41:c4:bf:d1:ca:29:13:64:3c:e1:d2:48:20:0a:
ba:1b:14:62:2b:e8:4d:d0:30:b8:d7:39:6c:78:6a:6e:d6:15:
63:d1:47:c5:28:92:a2:0c:64:56:6c:7e:75:77:44:ad:2a:4d:
e4:d2:f2:1f:66:3c:fb:06:26:e1:93:09:69:49:2b:85:44:6f:
3e:eb:f4:e9:74:da:96:38:d2:ae:a6:a6:33:13:9c:94:ed:af:
06:f0:ab:b9:8d:4b:eb:c1:8f:62:57:8e:7b:c2:15:d9:9c:d5:
86:c8:5e:8d:68:3f:c9:e6:0b:eb:36:54:9b:39:50:95:d4:73:
ef:25:2c:05:f8:a8:68:60:17:9e:e0:71:c3:31:79:ff:d3:7c:
c3:90:45:f0:4f:d9:f9:ca:2d:f2:72:d1:8b:dc:fa:ac:75:c5:
72:de:18:13:a6:a4:84:69:e5:2b:50:61:32:08:da:5e:aa:84:
44:d5:a2:43:e7:b7:0e:95:73:8c:dd:d1:2e:01:4a:06:08:af:
04:f0:0b:b8:ec:43:72:93:f1:72:2f:bd:7f:ef:ea:3c:10:d0:
33:b3:f5:4e:57:32:6a:0e:af:f5:17:3b:c8:19:0b:13:8e:03:
d8:f8:cd:41:77:85:55:57:43:91:b2:54:32:5c:24:1b:82:ac:
2f:d7:f0:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQqLEnjMm2CWP5aChOW3UMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1
MjE3NDYwHhcNMjYxMDA2MTAwMDUzWhcNMjYxMDA3MTAwMDUzWjAzMTEwLwYDVQQD
EygzMTdmNDAzN2JmYjljZWY1YzIwMjZhN2MxM2U4YWI4ZGJhMDQ1MTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+qfCjRlHZnKd50ZJiGRgDbPS5mF
lJ37ydUr03QPRvO+Mj3uqYW4VdUc1OQrGT9/iC0q1ilW3TRuEvFbpntdtcirOujh
Steo82tGApGMbSehZcAhJpWqcFdr8EA3wFpBQYyGYCr+oIcMmC0z319/usg+AtEN
RQ8+NNLd2ioxbIbWbtbAU8NTgIvCF35z2FjSzXneOKWwXMIZ5nlZqHb2bz7TRnmn
I4/X9aMDDDTJ8gl2G/kATO8+tqOhm2UzU87ny0mQ//t0sgWeMWXg56DXppLqwRT4
6zAJFfqnttT1U2nYXRd9WyVEh12KOJqrAXlIzjQb+9C3RgcHkZIlSpHH4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDF/QDe/uc71wgJqfBPoq426BFGSMB8GA1UdIwQY
MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt
NTBmYzRkNTU3ZDA4LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4
LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYECyxEHE
v9HKKRNkPOHSSCAKuhsUYivoTdAwuNc5bHhqbtYVY9FHxSiSogxkVmx+dXdErSpN
5NLyH2Y8+wYm4ZMJaUkrhURvPuv06XTaljjSrqamMxOclO2vBvCruY1L68GPYleO
e8IV2ZzVhshejWg/yeYL6zZUmzlQldRz7yUsBfioaGAXnuBxwzF5/9N8w5BF8E/Z
+cot8nLRi9z6rHXFct4YE6akhGnlK1BhMgjaXqqERNWiQ+e3DpVzjN3RLgFKBgiv
BPALuOxDcpPxci+9f+/qPBDQM7P1Tlcyag6v9Rc7yBkLE44D2PjNQXeFVVdDkbJU
MlwkG4KsL9fwAg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:42:20 2026 by rpki-client