Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: J0u3groLW9dwJeke4tzap9Zjz3BiSwThsB6XNDr/Mv4=
Subject key identifier: 39:8F:FA:B3:75:46:AC:D8:E0:E2:50:3A:11:09:E6:BE:A4:E3:FC:CE
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 01A03FA901DABDC1ACE8C4C11065E791EBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 0236
Signing time: Wed 26 Aug 2026 20:00:35 +0000
Manifest this update: Wed 26 Aug 2026 20:00:35 +0000
Manifest next update: Thu 27 Aug 2026 20:00:35 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: 7/+fx8XWkJKyfMoFj3OeNa5lP3u7Hi7M48k39Ohaw10=)
2: dWQzDZpVB7OiM0vZm0oBe4UUrds.asa (hash: g6XCHoueCq216JgmRUZR1LKQhV53b5OQSgUBfD4mvXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:01:da:bd:c1:ac:e8:c4:c1:10:65:e7:91:eb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Aug 26 20:00:35 2026 GMT
Not After : Aug 27 20:00:35 2026 GMT
Subject: CN=398ffab37546acd8e0e2503a1109e6bea4e3fcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:91:e6:5a:60:f8:bf:1e:1b:f9:df:95:34:
27:2e:ce:a8:e7:d7:bf:72:38:c0:c8:00:fd:65:99:
c1:2d:ab:2b:54:66:7c:ff:81:de:66:8a:80:e5:ea:
ef:34:70:66:38:1d:76:a7:63:ad:88:ab:fd:08:d3:
e5:15:7f:16:49:34:50:c0:0a:48:23:0b:26:7e:5e:
23:89:05:21:a9:70:6f:e6:04:e7:b0:2f:40:19:e6:
f4:70:c3:82:56:64:ee:6e:6d:f7:3e:e0:ec:df:9c:
80:87:a1:c0:f3:92:0e:9c:15:5f:71:3a:31:38:94:
c6:16:39:66:62:ca:73:51:88:d0:63:a8:52:ea:96:
c2:10:a9:4a:0f:31:27:bf:8f:0a:8b:97:23:03:e2:
09:88:60:3f:ae:4c:62:af:26:94:4e:83:95:57:bf:
d2:01:0a:c6:ae:68:e4:35:4f:e3:13:0c:a4:a9:9f:
f1:fb:82:e5:41:b4:16:08:55:50:e8:97:27:0b:0e:
60:22:c4:58:a8:c8:92:93:15:60:10:42:fa:87:3b:
24:d8:69:f5:d5:90:a0:13:33:b7:4f:a0:4c:40:70:
99:b4:bf:01:a2:71:88:b1:17:34:28:bc:ef:df:68:
3d:e2:b7:3b:10:04:93:d4:2c:78:55:b5:37:db:58:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:FA:B3:75:46:AC:D8:E0:E2:50:3A:11:09:E6:BE:A4:E3:FC:CE
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:04:5e:c7:cb:3d:f2:1a:2e:ad:c2:e8:cc:ef:7f:31:b1:0a:
3a:d8:09:ba:b6:79:54:8d:8e:ad:ed:f1:e8:77:1c:d0:fe:c2:
f5:fa:65:d7:c3:90:0c:f7:af:e8:82:a4:9a:0d:ff:3d:1e:19:
14:a8:c4:93:0c:e3:97:12:8d:8f:24:2c:d4:b2:da:42:9b:6b:
0e:c1:14:66:89:a1:19:1c:ed:01:6f:35:c0:63:d5:61:f6:0f:
e5:c6:41:a7:2d:e9:fe:50:db:b6:99:ba:9c:90:d4:5c:ce:fb:
e3:a4:38:e9:12:94:c8:b0:bc:d0:84:6c:04:c4:64:6c:ac:06:
a3:b6:3f:63:9f:32:1a:0b:c0:6b:c4:61:6c:c1:bd:ad:32:6b:
5b:92:3f:7e:f3:cf:5c:3c:f3:05:fe:64:28:b9:2f:8d:f2:90:
4f:5a:30:46:14:ae:39:a3:5a:42:7b:c2:7c:dd:60:c7:19:26:
11:54:ae:79:dc:fd:73:a6:f1:48:0d:f2:bc:20:6a:20:ce:b2:
47:07:c8:a6:a2:e5:91:62:9a:36:a9:7d:1f:9f:0c:7b:d5:7d:
04:a8:7a:3a:92:fa:0c:73:cc:20:dd:f5:86:8b:97:55:80:0c:
bb:6d:78:0f:f9:8a:f7:ef:7a:47:90:a7:ca:74:c1:bf:b4:86:
0a:0d:34:b4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaA/qQHavcGs6MTBEGXnkevPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDY1NWFhMjljYjRjODM5NDdmNWZhNmM2OGYwNGMyMzkw
YjUxMjIwHhcNMjYwODI2MjAwMDM1WhcNMjYwODI3MjAwMDM1WjAzMTEwLwYDVQQD
EygzOThmZmFiMzc1NDZhY2Q4ZTBlMjUwM2ExMTA5ZTZiZWE0ZTNmY2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mSR5lpg+L8eG/nflTQnLs6o59e/
cjjAyAD9ZZnBLasrVGZ8/4HeZoqA5ervNHBmOB12p2OtiKv9CNPlFX8WSTRQwApI
Iwsmfl4jiQUhqXBv5gTnsC9AGeb0cMOCVmTubm33PuDs35yAh6HA85IOnBVfcTox
OJTGFjlmYspzUYjQY6hS6pbCEKlKDzEnv48Ki5cjA+IJiGA/rkxiryaUToOVV7/S
AQrGrmjkNU/jEwykqZ/x+4LlQbQWCFVQ6JcnCw5gIsRYqMiSkxVgEEL6hzsk2Gn1
1ZCgEzO3T6BMQHCZtL8BonGIsRc0KLzv32g94rc7EAST1Cx4VbU321jGqwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDmP+rN1RqzY4OJQOhEJ5r6k4/zOMB8GA1UdIwQY
MBaAFPpGVaopy0yDlH9fpsaPBMI5C1EiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rWlZxaW5MVElPVWYxLW14bzhFd2prTFVTSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2
LWM4NjE1YTU0MGNkZC8xLzEta1pWcWluTFRJT1VmMS1teG84RXdqa0xVU0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4L2Y0OWQ4NC00YTFjLTQwZmQtYmFhNi1jODYxNWE1NDBj
ZGQvMS8xLWtaVnFpbkxUSU9VZjEtbXhvOEV3amtMVVNJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgRe
x8s98hourcLozO9/MbEKOtgJurZ5VI2Ore3x6Hcc0P7C9fpl18OQDPev6IKkmg3/
PR4ZFKjEkwzjlxKNjyQs1LLaQptrDsEUZomhGRztAW81wGPVYfYP5cZBpy3p/lDb
tpm6nJDUXM7746Q46RKUyLC80IRsBMRkbKwGo7Y/Y58yGgvAa8RhbMG9rTJrW5I/
fvPPXDzzBf5kKLkvjfKQT1owRhSuOaNaQnvCfN1gxxkmEVSuedz9c6bxSA3yvCBq
IM6yRwfIpqLlkWKaNql9H58Me9V9BKh6OpL6DHPMIN31houXVYAMu214D/mK9+96
R5CnynTBv7SGCg00tA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:17 2026 by rpki-client