Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: 7cbGD9q5Eo2ucNWqvBm4lTYDsdwXNroc6lZE8Fq2BBk=
Subject key identifier: 75:3D:88:0C:81:CF:C2:F5:53:0B:83:BC:DD:DF:8B:9D:89:DE:B0:98
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 01A001A651A19CCCCAA5F0F576CA2CDE9F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 111F
Signing time: Fri 14 Aug 2026 19:01:11 +0000
Manifest this update: Fri 14 Aug 2026 19:01:11 +0000
Manifest next update: Sat 15 Aug 2026 19:01:11 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: QvIbZWZN5KhFewJ1l4drpR3I/RJMXXJA5DJmNt9CEkA=)
2: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (hash: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:51:a1:9c:cc:ca:a5:f0:f5:76:ca:2c:de:9f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Aug 14 19:01:11 2026 GMT
Not After : Aug 15 19:01:11 2026 GMT
Subject: CN=753d880c81cfc2f5530b83bcdddf8b9d89deb098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:05:05:7b:ff:a1:a8:93:54:2f:4f:00:c6:
88:e8:d9:3b:ee:b7:a4:68:44:92:63:c3:4d:cc:da:
de:cd:8c:da:57:75:d3:e8:15:07:15:62:fe:7d:f5:
84:91:bc:6c:6a:81:4b:22:45:fc:5d:b5:fa:d1:09:
42:a2:3b:9b:72:81:fd:de:ab:7c:c8:eb:38:34:0d:
34:01:c5:b6:d8:82:ea:17:0f:ec:b4:97:29:8b:29:
42:56:68:ee:ef:f5:36:a5:9f:fb:13:61:aa:5c:06:
54:3b:a2:a3:80:26:5e:8f:3f:db:67:4f:1d:4a:af:
60:8d:90:67:67:54:d3:c0:30:56:1e:f8:00:e0:5e:
04:5f:07:58:c7:c8:e1:38:8b:b4:56:c1:cd:3d:15:
f8:f8:c5:40:6a:19:d1:9e:85:3c:0f:93:81:8c:e3:
81:e6:13:41:24:26:51:8f:73:37:82:71:e6:af:b2:
27:06:14:5c:c9:bd:67:59:36:7f:24:ef:8f:7e:9d:
ae:5c:3e:65:35:7c:c1:54:c3:dc:25:b9:45:9b:ee:
47:a6:e0:92:f4:66:1d:71:82:32:8c:b0:af:af:19:
66:4d:50:1f:bd:5f:bc:8b:8b:53:d9:36:9a:b0:b8:
ed:03:1c:12:71:b9:39:88:0d:40:20:db:b5:5d:31:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:88:0C:81:CF:C2:F5:53:0B:83:BC:DD:DF:8B:9D:89:DE:B0:98
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:39:0b:fb:6f:67:b4:e8:32:70:1d:28:b1:19:eb:77:40:9d:
3d:9c:af:eb:98:87:86:2e:ec:52:f9:4f:69:2f:cc:f0:fc:2f:
9b:2b:65:31:b8:67:ea:d8:3d:8c:63:f9:18:7f:c0:e7:65:d0:
51:27:c6:70:61:15:18:07:3b:41:32:65:5e:b3:f7:ef:ef:b4:
7e:a0:42:c1:3f:5c:44:d8:cb:3c:f5:02:ae:9d:43:4d:99:43:
1a:e2:e6:24:57:60:48:1f:63:ac:d0:3e:a1:65:b3:03:49:f3:
2a:86:92:31:2b:aa:ef:8f:17:ae:1e:18:54:eb:2d:9c:b6:b0:
11:e1:35:b5:e3:05:a1:a3:d4:90:97:0e:c3:72:e8:3f:49:b5:
30:5d:37:d6:42:9a:da:ae:f0:a1:d2:c2:bb:09:b4:9a:4e:d3:
cd:88:b6:b0:ec:82:95:fa:34:00:47:9c:bb:40:f2:1c:6e:4e:
35:43:a8:05:0f:5c:00:c7:30:9e:8d:10:8a:b3:8a:1b:37:e0:
2f:ca:6a:c4:8d:d4:30:fc:cf:59:e1:64:57:8b:2b:ad:e7:f1:
4b:4b:76:75:14:9c:0d:d2:d6:49:50:9c:8e:f8:1f:09:d6:ab:
da:da:2a:a4:f5:87:56:26:8a:47:d1:74:e6:c1:b3:95:d4:e2:
b7:ee:1b:d1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaABplGhnMzKpfD1dsos3p9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWY2NWUxYmU0MmE2NWI0OTRjZjI2NDJhNGRkOGUzMjhk
MGY5Y2UwHhcNMjYwODE0MTkwMTExWhcNMjYwODE1MTkwMTExWjAzMTEwLwYDVQQD
Eyg3NTNkODgwYzgxY2ZjMmY1NTMwYjgzYmNkZGRmOGI5ZDg5ZGViMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8UFBXv/oaiTVC9PAMaI6Nk77rek
aESSY8NNzNrezYzaV3XT6BUHFWL+ffWEkbxsaoFLIkX8XbX60QlCojubcoH93qt8
yOs4NA00AcW22ILqFw/stJcpiylCVmju7/U2pZ/7E2GqXAZUO6KjgCZejz/bZ08d
Sq9gjZBnZ1TTwDBWHvgA4F4EXwdYx8jhOIu0VsHNPRX4+MVAahnRnoU8D5OBjOOB
5hNBJCZRj3M3gnHmr7InBhRcyb1nWTZ/JO+Pfp2uXD5lNXzBVMPcJblFm+5HpuCS
9GYdcYIyjLCvrxlmTVAfvV+8i4tT2TaasLjtAxwScbk5iA1AINu1XTETtQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHU9iAyBz8L1UwuDvN3fi52J3rCYMB8GA1UdIwQY
MBaAFPmfZeG+QqZbSUzyZCpN2OMo0PnOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1aOWw0YjVDcGx0SlRQSmtLazNZNHlqUS1jNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNmRmOGJhLWQ0Y2ItNDcwNS1iZjU1
LTU0ZDE2MjI5OGZmZC8xLzEtWjlsNGI1Q3BsdEpUUEprS2szWTR5alEtYzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I2LzZkZjhiYS1kNGNiLTQ3MDUtYmY1NS01NGQxNjIyOThm
ZmQvMS8xLVo5bDRiNUNwbHRKVFBKa0trM1k0eWpRLWM0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjkL
+29ntOgycB0osRnrd0CdPZyv65iHhi7sUvlPaS/M8PwvmytlMbhn6tg9jGP5GH/A
52XQUSfGcGEVGAc7QTJlXrP37++0fqBCwT9cRNjLPPUCrp1DTZlDGuLmJFdgSB9j
rNA+oWWzA0nzKoaSMSuq748Xrh4YVOstnLawEeE1teMFoaPUkJcOw3LoP0m1MF03
1kKa2q7wodLCuwm0mk7TzYi2sOyClfo0AEecu0DyHG5ONUOoBQ9cAMcwno0QirOK
GzfgL8pqxI3UMPzPWeFkV4srrefxS0t2dRScDdLWSVCcjvgfCdar2toqpPWHViaK
R9F05sGzldTit+4b0Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:45 2026 by rpki-client