Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: EjfB/T3kqY0XW2aRRql1EwIB7pkjf0U89Mfn9WkOCeg=
Subject key identifier: 38:F4:F3:02:1C:82:56:B1:91:34:66:47:F1:13:48:C3:41:04:0C:B6
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 01A08B30D8F18CB1C04A0F7CBEA144B26E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 19DD
Signing time: Thu 10 Sep 2026 12:00:29 +0000
Manifest this update: Thu 10 Sep 2026 12:00:29 +0000
Manifest next update: Fri 11 Sep 2026 12:00:29 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: DgSrUms46ngVvkY7F9OqZ2rH+aNPJF/aXng7Iaqs1Ro=)
2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:d8:f1:8c:b1:c0:4a:0f:7c:be:a1:44:b2:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Sep 10 12:00:29 2026 GMT
Not After : Sep 11 12:00:29 2026 GMT
Subject: CN=38f4f3021c8256b191346647f11348c341040cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:0c:26:6f:21:62:f6:96:86:eb:6c:e5:76:
32:b6:65:ae:11:99:c1:aa:04:7e:20:08:4d:b6:58:
02:fa:3d:56:f1:ce:c3:d4:d6:5c:21:43:88:95:19:
89:d2:6e:a3:ef:84:04:2c:46:23:f0:f8:a2:55:3d:
51:43:ba:64:6b:5c:68:3a:57:7e:a9:0d:f8:a2:2e:
cc:5b:b3:f1:a5:dc:56:60:12:ab:9f:66:6d:04:ff:
5b:6f:96:df:7c:95:8d:4b:0e:f1:03:d0:13:0b:95:
1b:0f:05:f1:d1:ab:e5:56:4a:cf:b3:f7:21:a0:98:
68:f5:26:94:a8:8e:5e:79:33:2a:57:cb:a5:af:a8:
e5:16:bd:4e:c3:b6:94:c9:73:8a:c9:5e:ab:61:31:
f0:de:5f:e6:aa:1a:52:e3:16:1f:a4:71:4a:68:6f:
35:73:8d:a2:8b:ed:4e:6d:62:fe:00:92:0d:a2:51:
cc:f4:20:fe:34:7b:e9:bd:03:70:4b:bb:53:7d:8c:
2c:e5:e6:18:37:c3:32:8c:29:7a:74:5c:1d:39:d3:
a4:23:38:d2:01:f7:d8:f0:b7:86:5b:85:80:ab:6b:
28:bf:48:d4:02:61:82:06:b3:35:67:87:7c:f0:46:
82:ad:5a:f2:39:c5:14:3c:e5:a7:88:bd:7f:85:60:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F4:F3:02:1C:82:56:B1:91:34:66:47:F1:13:48:C3:41:04:0C:B6
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0f:fe:54:b3:2d:6c:64:b2:b9:07:32:fd:65:63:93:86:f0:
33:8a:fb:f1:37:c3:40:af:9c:ae:1f:ee:77:64:80:17:97:27:
16:dc:56:26:a9:f5:cc:ae:db:1f:d4:f7:3d:5c:58:89:e5:9b:
21:25:3e:e0:ea:21:32:20:bb:1f:bb:0f:be:d5:ad:d3:8a:f3:
86:e0:d9:4e:bb:47:36:f1:27:52:57:e1:14:ea:60:b3:07:55:
11:4f:71:d2:0e:92:67:36:12:a8:81:ff:c3:a0:53:8e:a4:4a:
52:d0:fa:06:00:2b:3c:c4:7a:cc:d7:37:8f:04:32:4a:91:52:
c6:e8:07:99:a2:5b:35:dd:8b:f8:73:6e:03:e2:89:6f:e2:a0:
d3:1e:4b:19:d5:49:ca:af:ba:75:a9:b1:41:f4:c3:66:e9:0f:
0e:7d:08:51:4f:9b:13:eb:7f:52:b7:91:ff:8d:e5:d4:10:ea:
32:1f:0b:47:e6:81:89:df:b8:44:fa:95:72:8d:90:f4:8e:f3:
55:5b:b1:b2:66:ff:32:d1:a9:d4:47:9f:3e:90:26:27:79:4e:
48:86:3f:e4:ba:12:3a:5b:28:fc:db:2d:6b:1c:54:3a:0b:2d:
46:34:bb:06:42:1c:7c:5c:52:c6:b0:b6:17:bf:3c:87:b1:fc:
44:0e:59:a3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaCLMNjxjLHASg98vqFEsm4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjMwYzNkMjNjNjA0NmMyZjFhN2UwYzhmY2NiZDgzZTIw
ZWQ0YzcwHhcNMjYwOTEwMTIwMDI5WhcNMjYwOTExMTIwMDI5WjAzMTEwLwYDVQQD
EygzOGY0ZjMwMjFjODI1NmIxOTEzNDY2NDdmMTEzNDhjMzQxMDQwY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYoMJm8hYvaWhuts5XYytmWuEZnB
qgR+IAhNtlgC+j1W8c7D1NZcIUOIlRmJ0m6j74QELEYj8PiiVT1RQ7pka1xoOld+
qQ34oi7MW7PxpdxWYBKrn2ZtBP9bb5bffJWNSw7xA9ATC5UbDwXx0avlVkrPs/ch
oJho9SaUqI5eeTMqV8ulr6jlFr1Ow7aUyXOKyV6rYTHw3l/mqhpS4xYfpHFKaG81
c42ii+1ObWL+AJINolHM9CD+NHvpvQNwS7tTfYws5eYYN8MyjCl6dFwdOdOkIzjS
AffY8LeGW4WAq2sov0jUAmGCBrM1Z4d88EaCrVryOcUUPOWniL1/hWCJSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDj08wIcglaxkTRmR/ETSMNBBAy2MB8GA1UdIwQY
MBaAFPpjDD0jxgRsLxp+DI/MvYPiDtTHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tTU1QU1BHQkd3dkduNE1qOHk5Zy1JTzFNYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDlhZDk3LTIxZjEtNGNjOS1iNzc2
LThjYmVlNWEwMjdjMy8xLzEtbU1NUFNQR0JHd3ZHbjRNajh5OWctSU8xTWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JjLzQ5YWQ5Ny0yMWYxLTRjYzktYjc3Ni04Y2JlZTVhMDI3
YzMvMS8xLW1NTVBTUEdCR3d2R240TWo4eTlnLUlPMU1jLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw/+
VLMtbGSyuQcy/WVjk4bwM4r78TfDQK+crh/ud2SAF5cnFtxWJqn1zK7bH9T3PVxY
ieWbISU+4OohMiC7H7sPvtWt04rzhuDZTrtHNvEnUlfhFOpgswdVEU9x0g6SZzYS
qIH/w6BTjqRKUtD6BgArPMR6zNc3jwQySpFSxugHmaJbNd2L+HNuA+KJb+Kg0x5L
GdVJyq+6damxQfTDZukPDn0IUU+bE+t/UreR/43l1BDqMh8LR+aBid+4RPqVco2Q
9I7zVVuxsmb/MtGp1EefPpAmJ3lOSIY/5LoSOlso/NstaxxUOgstRjS7BkIcfFxS
xrC2F788h7H8RA5Zow==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:18:09 2026 by rpki-client