Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: HK9jgL3b6hAltBxYWPBq0Nv7nrOUgEuuHcCVFKTAFZU=
Subject key identifier: DB:F4:44:76:CC:7C:DD:1E:3F:AA:11:E9:9D:FF:16:18:0A:70:46:80
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 01A13CA5E5AA88086D71745EC1AC3EB9765C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 1AA5
Signing time: Wed 14 Oct 2026 23:01:07 +0000
Manifest this update: Wed 14 Oct 2026 23:01:07 +0000
Manifest next update: Thu 15 Oct 2026 23:01:07 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: fWcVS1cn3cB+PEf1tUNrmWTlyN/dynkfUanPuUO7VIs=)
2: LeQ3hObwwgpbJJGcKzLsHqEGLVo.roa (hash: v9/GkM02Xeyz1OUCXNYSBaAnPEbgD0Y89kH3sO1Lbco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:e5:aa:88:08:6d:71:74:5e:c1:ac:3e:b9:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Oct 14 23:01:07 2026 GMT
Not After : Oct 15 23:01:07 2026 GMT
Subject: CN=dbf44476cc7cdd1e3faa11e99dff16180a704680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:a2:00:5d:a1:56:5c:ed:00:7b:80:1a:18:
10:96:82:76:38:7f:89:30:dc:fd:aa:01:af:46:52:
a7:84:44:37:13:ab:b9:92:58:c1:5e:2b:c1:5d:3f:
ec:98:df:57:35:8b:d2:e8:26:67:fb:aa:9e:db:a8:
82:d3:49:e2:b4:6c:9f:0f:39:c1:db:a3:b0:51:35:
6c:90:93:87:58:4e:3a:43:c3:bc:7e:6d:56:da:b5:
18:c5:bd:9a:2d:d5:50:c9:e9:81:fa:20:d8:22:ed:
c7:62:17:93:53:ba:71:03:22:2d:55:97:ea:47:21:
27:49:68:fa:0a:a5:3b:d1:3a:6c:e3:1f:0a:c1:e6:
8b:3e:e2:0a:4f:49:ad:aa:2f:04:6e:6b:a2:00:51:
84:a9:47:db:71:0f:be:0e:1e:6a:45:da:0d:4c:93:
8f:df:30:a5:af:17:56:9c:b1:0a:c6:4b:17:c7:bf:
61:46:bc:85:d2:a9:3a:95:c3:7a:65:3d:1a:79:3a:
00:05:a7:77:36:56:48:c8:6d:0f:7f:bd:9a:fe:4a:
7b:06:a0:be:09:e2:e8:67:f8:eb:30:e0:c3:b4:e3:
bb:18:26:88:2c:85:71:12:56:50:66:98:f7:31:f1:
44:70:b0:06:ba:ae:17:83:0a:8e:ef:f0:74:f4:d4:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:44:76:CC:7C:DD:1E:3F:AA:11:E9:9D:FF:16:18:0A:70:46:80
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:80:23:6d:a0:f4:b1:d2:5a:11:cb:75:4d:c8:97:0f:e5:89:
68:f0:e5:d1:b8:d5:a0:a7:bf:7b:6c:c2:2f:41:f9:9d:ce:c7:
86:87:0d:0f:f3:9e:98:b8:b4:61:81:1b:b2:3d:32:96:a8:22:
91:57:e4:e1:b0:72:d7:ce:8f:32:43:5f:e3:05:96:1b:64:79:
45:f4:b9:c1:73:60:6c:cd:d1:af:42:72:cf:71:f4:68:82:4e:
ab:75:32:46:8e:c2:24:2f:3f:45:97:6d:31:1b:a0:9a:db:e7:
19:00:d8:96:89:f6:61:48:d3:71:3e:08:58:bd:8b:64:19:e6:
10:14:d6:f3:9a:3b:a6:79:4d:69:a5:50:92:25:4a:92:ab:6c:
77:fc:4a:85:17:48:d6:eb:b3:d9:c8:67:60:b3:be:0f:45:49:
e9:82:d9:65:87:31:b0:b7:11:9b:ea:5a:61:6a:c3:65:60:48:
c6:32:19:bd:b2:d0:5a:32:c1:4f:3d:75:c7:cd:a2:1f:7d:7c:
dc:a3:99:80:7d:c8:93:fe:4f:bb:0a:d9:ff:17:7e:f6:11:72:
08:85:34:0e:fc:28:0d:ec:58:97:44:e1:8d:19:76:eb:49:42:
bb:e7:13:37:dc:6d:0c:e5:73:12:25:7a:81:07:fd:f7:92:88:
b3:15:f7:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8peWqiAhtcXRewaw+uXZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz
YWMwNDMwHhcNMjYxMDE0MjMwMTA3WhcNMjYxMDE1MjMwMTA3WjAzMTEwLwYDVQQD
EyhkYmY0NDQ3NmNjN2NkZDFlM2ZhYTExZTk5ZGZmMTYxODBhNzA0NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp2iAF2hVlztAHuAGhgQloJ2OH+J
MNz9qgGvRlKnhEQ3E6u5kljBXivBXT/smN9XNYvS6CZn+6qe26iC00nitGyfDznB
26OwUTVskJOHWE46Q8O8fm1W2rUYxb2aLdVQyemB+iDYIu3HYheTU7pxAyItVZfq
RyEnSWj6CqU70Tps4x8KweaLPuIKT0mtqi8EbmuiAFGEqUfbcQ++Dh5qRdoNTJOP
3zClrxdWnLEKxksXx79hRryF0qk6lcN6ZT0aeToABad3NlZIyG0Pf72a/kp7BqC+
CeLoZ/jrMODDtOO7GCaILIVxElZQZpj3MfFEcLAGuq4XgwqO7/B09NSMdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNv0RHbMfN0eP6oR6Z3/FhgKcEaAMB8GA1UdIwQY
MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt
ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj
LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIAjbaD0
sdJaEct1TciXD+WJaPDl0bjVoKe/e2zCL0H5nc7HhocND/OemLi0YYEbsj0ylqgi
kVfk4bBy186PMkNf4wWWG2R5RfS5wXNgbM3Rr0Jyz3H0aIJOq3UyRo7CJC8/RZdt
MRugmtvnGQDYlon2YUjTcT4IWL2LZBnmEBTW85o7pnlNaaVQkiVKkqtsd/xKhRdI
1uuz2chnYLO+D0VJ6YLZZYcxsLcRm+paYWrDZWBIxjIZvbLQWjLBTz11x82iH318
3KOZgH3Ik/5PuwrZ/xd+9hFyCIU0DvwoDexYl0ThjRl260lCu+cTN9xtDOVzEiV6
gQf995KIsxX3Sw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:09:59 2026 by rpki-client