Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: 9qdvFK/TP5P9zhEQPExt6YRG+E86V/4cSO8sGuu0Unc=
Subject key identifier: D5:F8:D3:BE:1E:35:CF:C0:38:AA:8B:4B:71:B9:E9:1B:3B:00:45:50
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 01A17C976933963D8166F535F6580A6A41D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 1A58
Signing time: Tue 27 Oct 2026 09:00:59 +0000
Manifest this update: Tue 27 Oct 2026 09:00:59 +0000
Manifest next update: Wed 28 Oct 2026 09:00:59 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: 7k2Z4xHjktqxSGjjGC+fFYjrQqh8dw85n3ZsRf1GBLI=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:69:33:96:3d:81:66:f5:35:f6:58:0a:6a:41:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Oct 27 09:00:59 2026 GMT
Not After : Oct 28 09:00:59 2026 GMT
Subject: CN=d5f8d3be1e35cfc038aa8b4b71b9e91b3b004550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:9c:cc:a6:b3:d3:d4:7e:9b:88:6b:77:99:
21:56:93:a1:b4:5e:8c:cc:70:30:1d:c5:d7:d3:9d:
9d:ce:cf:53:ae:12:a5:a5:13:ea:93:0f:75:d7:24:
41:b3:35:0f:52:ac:94:c1:94:d1:fd:68:18:f8:09:
d2:8a:a0:b2:0a:9d:c0:93:97:b6:7b:dd:8f:d4:8a:
89:fd:f5:f3:78:da:e3:31:ae:db:82:78:94:9a:6c:
7a:7b:62:bf:5f:a8:82:0f:fd:55:a4:71:0c:61:5a:
e8:ba:d2:d2:c7:fc:5a:80:e6:8c:85:b9:9e:5c:c3:
46:53:4b:e7:23:6f:b9:a2:f6:94:84:c8:23:09:98:
50:cc:13:4c:66:1d:29:82:c3:24:ca:ca:a1:ee:dc:
e5:de:af:c7:7d:2f:2f:b9:ed:9e:46:f8:47:15:49:
ee:71:aa:f6:5b:db:12:24:8f:49:f1:79:2a:4b:9b:
cc:8a:e6:9c:80:74:4a:57:b1:13:a6:78:9e:66:4b:
8f:fe:47:a8:4c:29:5f:5e:5d:24:b2:c8:a8:5a:58:
14:2a:3c:ae:80:04:2d:e5:99:a5:dc:0b:dd:95:f4:
e3:97:02:52:99:a2:0f:7c:28:fd:13:0d:20:02:40:
1e:a2:e0:8b:df:e8:e8:94:0e:0e:7a:ac:09:f2:5a:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F8:D3:BE:1E:35:CF:C0:38:AA:8B:4B:71:B9:E9:1B:3B:00:45:50
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b8:9b:ed:48:67:e1:d2:6a:57:08:96:b2:0d:de:75:e3:52:
14:e0:3a:f1:44:78:7b:94:04:eb:1c:59:8d:9d:81:db:91:9c:
22:5f:af:fa:8c:57:83:7a:26:6e:f0:9a:7d:25:ff:ac:b8:89:
01:f9:3d:77:c8:af:48:7d:1a:21:2c:b3:bb:56:fe:d6:57:e3:
ed:19:1e:da:b5:13:12:38:90:df:77:a8:b3:fc:3e:55:29:99:
b5:d1:11:c2:8d:4b:df:a1:68:73:d8:de:2a:db:fa:73:57:c0:
b3:95:75:14:62:df:68:2f:ac:47:56:2f:3e:8c:ed:98:f1:bc:
ab:5c:cb:8d:73:7e:07:da:30:e4:ce:f7:b2:9c:da:94:3f:65:
40:e7:37:da:6f:bf:da:db:ef:ab:74:48:ea:5d:41:99:81:39:
c0:23:59:62:39:89:3e:5e:65:4a:a3:8f:00:bd:a5:6d:b3:8b:
96:73:98:0b:21:11:f5:9f:49:81:89:6b:fd:17:d1:45:e6:95:
7c:a8:9c:51:59:cf:98:b3:66:8b:cb:d5:39:5b:53:11:81:05:
8e:3f:b7:aa:99:02:7e:c2:d5:88:cf:c4:6b:e8:be:bb:33:29:
c8:c2:43:12:b7:7c:05:cd:2b:3b:e6:e4:83:a5:58:3c:28:7a:
b2:50:62:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8l2kzlj2BZvU19lgKakHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw
ZGRiMzYwHhcNMjYxMDI3MDkwMDU5WhcNMjYxMDI4MDkwMDU5WjAzMTEwLwYDVQQD
EyhkNWY4ZDNiZTFlMzVjZmMwMzhhYThiNGI3MWI5ZTkxYjNiMDA0NTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWyczKaz09R+m4hrd5khVpOhtF6M
zHAwHcXX052dzs9TrhKlpRPqkw911yRBszUPUqyUwZTR/WgY+AnSiqCyCp3Ak5e2
e92P1IqJ/fXzeNrjMa7bgniUmmx6e2K/X6iCD/1VpHEMYVroutLSx/xagOaMhbme
XMNGU0vnI2+5ovaUhMgjCZhQzBNMZh0pgsMkysqh7tzl3q/HfS8vue2eRvhHFUnu
car2W9sSJI9J8XkqS5vMiuacgHRKV7ETpnieZkuP/keoTClfXl0kssioWlgUKjyu
gAQt5Zml3AvdlfTjlwJSmaIPfCj9Ew0gAkAeouCL3+jolA4OeqwJ8lppOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX4074eNc/AOKqLS3G56Rs7AEVQMB8GA1UdIwQY
MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct
NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw
LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrib7Uhn
4dJqVwiWsg3edeNSFOA68UR4e5QE6xxZjZ2B25GcIl+v+oxXg3ombvCafSX/rLiJ
Afk9d8ivSH0aISyzu1b+1lfj7Rke2rUTEjiQ33eos/w+VSmZtdERwo1L36Foc9je
Ktv6c1fAs5V1FGLfaC+sR1YvPoztmPG8q1zLjXN+B9ow5M73spzalD9lQOc32m+/
2tvvq3RI6l1BmYE5wCNZYjmJPl5lSqOPAL2lbbOLlnOYCyER9Z9JgYlr/RfRReaV
fKicUVnPmLNmi8vVOVtTEYEFjj+3qpkCfsLViM/Ea+i+uzMpyMJDErd8Bc0rO+bk
g6VYPCh6slBiOg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:51:06 2026 by rpki-client