Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: oRCMQWanzZnYp0rqjC//UuK7uQpQyr8eqXEVzUbJB8c=
Subject key identifier: 31:42:2A:54:DE:84:7F:77:74:84:DD:A4:6D:CA:F9:87:12:FD:24:ED
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 01A08F0E0A6E6D3F03D83C51EA59B1699DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 19DD
Signing time: Fri 11 Sep 2026 06:00:57 +0000
Manifest this update: Fri 11 Sep 2026 06:00:57 +0000
Manifest next update: Sat 12 Sep 2026 06:00:57 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: L+d8cDmtDKkW1lNG6yTp0jcUvSlwiCc/0AP1qFnMFPE=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0e:0a:6e:6d:3f:03:d8:3c:51:ea:59:b1:69:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Sep 11 06:00:57 2026 GMT
Not After : Sep 12 06:00:57 2026 GMT
Subject: CN=31422a54de847f777484dda46dcaf98712fd24ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:0b:c4:aa:3f:9c:54:b7:5a:78:a8:1f:52:
87:04:a1:73:5c:9a:df:73:f5:4e:80:6c:e5:a2:de:
c9:0e:68:3f:45:33:0a:35:7c:49:59:f8:b5:8a:9a:
39:7c:1c:cf:d2:62:3f:6f:02:bb:ce:3d:54:a9:36:
88:c6:ab:b4:0e:23:d7:d4:86:c6:af:40:37:9e:ec:
5e:3f:f0:3b:29:02:84:be:95:42:95:7e:c3:ec:c4:
dc:4d:d1:53:3b:d0:cf:49:63:0c:53:18:46:ad:c1:
1f:84:8a:e0:8e:b9:db:be:a2:ec:db:73:be:bc:78:
e2:be:a2:23:bf:27:0f:05:20:e2:f4:c5:6b:e3:08:
15:4d:75:2c:a6:f0:63:12:09:23:23:19:c2:4b:54:
06:ff:b1:3e:05:6e:de:7d:87:fb:1f:65:6f:cb:3b:
5f:e8:2b:5a:07:06:97:13:ca:f2:80:18:15:79:2d:
85:63:4a:36:18:e3:98:4a:06:e1:b3:41:9b:51:b4:
9b:53:8b:35:b3:23:a0:b8:19:c2:24:7d:e5:a9:3e:
b2:29:6a:7b:42:f0:ab:e6:57:16:f3:dd:73:26:9a:
aa:f5:e4:9d:30:74:b2:31:d3:c6:eb:28:e1:82:16:
01:99:29:9d:50:9b:27:c2:d1:d3:92:20:d3:3a:96:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:2A:54:DE:84:7F:77:74:84:DD:A4:6D:CA:F9:87:12:FD:24:ED
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4d:44:d2:41:cd:b6:7a:d1:c6:55:ff:82:9a:b6:ee:23:59:
85:a9:1b:dd:bb:17:d3:56:34:ab:63:45:32:f1:37:5c:3d:0d:
dd:77:17:8f:1b:c3:9d:1f:31:3d:e3:31:cc:c4:2f:f1:c9:ba:
a8:be:9e:d2:59:87:b8:1e:12:a8:f1:92:5d:00:1f:16:a3:ab:
27:cd:f7:bb:66:07:08:be:46:64:d8:eb:e3:65:42:e6:38:54:
dc:dc:c0:c6:dd:d6:3b:9f:7c:ac:46:4f:55:75:4a:6f:c7:79:
1f:53:66:a8:4b:23:f0:93:ea:4e:15:13:59:75:1e:cc:60:42:
c2:40:21:8a:0e:38:d6:8b:7f:84:bd:9e:a2:74:b3:e7:70:08:
1e:5c:04:15:c4:d9:2e:5c:be:b0:8a:2f:d8:0f:fb:93:ae:61:
92:75:82:ce:7b:de:59:68:1b:fb:59:57:42:8b:7f:fa:e4:86:
5b:9e:a2:35:e0:7b:04:db:ea:13:29:9b:65:2a:78:e3:24:5f:
18:a8:98:e5:77:69:19:53:37:93:93:23:0b:f1:2e:6d:df:0f:
ba:10:95:01:0e:84:b1:0f:f2:87:8f:d2:f3:43:f2:6e:99:fb:
53:36:67:37:cb:ac:cc:46:19:67:09:10:86:f6:bd:d2:b1:b5:
2f:b6:f2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCPDgpubT8D2DxR6lmxaZ36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw
ZGRiMzYwHhcNMjYwOTExMDYwMDU3WhcNMjYwOTEyMDYwMDU3WjAzMTEwLwYDVQQD
EygzMTQyMmE1NGRlODQ3Zjc3NzQ4NGRkYTQ2ZGNhZjk4NzEyZmQyNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwwLxKo/nFS3WnioH1KHBKFzXJrf
c/VOgGzlot7JDmg/RTMKNXxJWfi1ipo5fBzP0mI/bwK7zj1UqTaIxqu0DiPX1IbG
r0A3nuxeP/A7KQKEvpVClX7D7MTcTdFTO9DPSWMMUxhGrcEfhIrgjrnbvqLs23O+
vHjivqIjvycPBSDi9MVr4wgVTXUspvBjEgkjIxnCS1QG/7E+BW7efYf7H2Vvyztf
6CtaBwaXE8rygBgVeS2FY0o2GOOYSgbhs0GbUbSbU4s1syOguBnCJH3lqT6yKWp7
QvCr5lcW891zJpqq9eSdMHSyMdPG6yjhghYBmSmdUJsnwtHTkiDTOpbMvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFCKlTehH93dITdpG3K+YcS/STtMB8GA1UdIwQY
MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct
NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw
LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK01E0kHN
tnrRxlX/gpq27iNZhakb3bsX01Y0q2NFMvE3XD0N3XcXjxvDnR8xPeMxzMQv8cm6
qL6e0lmHuB4SqPGSXQAfFqOrJ833u2YHCL5GZNjr42VC5jhU3NzAxt3WO598rEZP
VXVKb8d5H1NmqEsj8JPqThUTWXUezGBCwkAhig441ot/hL2eonSz53AIHlwEFcTZ
Lly+sIov2A/7k65hknWCznveWWgb+1lXQot/+uSGW56iNeB7BNvqEymbZSp44yRf
GKiY5XdpGVM3k5MjC/Eubd8PuhCVAQ6EsQ/yh4/S80Pybpn7UzZnN8uszEYZZwkQ
hva90rG1L7byGQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 12:08:48 2026 by rpki-client