Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: YcBlkQuumfF8gydCgM16MFU8L7bYVOqzAZ8bOglJVAI=
Subject key identifier: 39:F6:A1:0A:91:06:9F:77:B4:42:91:BF:32:B8:D0:FB:EC:89:03:44
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 01A13FDE0DD6105960895CECAA67D2E590B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 14:01:19 +0000
Manifest this update: Thu 15 Oct 2026 14:01:19 +0000
Manifest next update: Fri 16 Oct 2026 14:01:19 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: 7ct99IUZE/akaVY4IQMIVtcNu913sCutYukRgOpX9ko=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:0d:d6:10:59:60:89:5c:ec:aa:67:d2:e5:90:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Oct 15 14:01:19 2026 GMT
Not After : Oct 16 14:01:19 2026 GMT
Subject: CN=39f6a10a91069f77b44291bf32b8d0fbec890344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b3:29:81:89:b7:d2:e5:94:4b:39:d3:22:20:
d0:f4:37:80:89:8c:35:42:0a:90:bb:4d:31:d3:d9:
73:e8:f0:cf:eb:9a:cd:fd:64:00:8d:f0:62:f0:18:
06:f6:ee:99:88:6c:17:5b:5c:89:f9:7f:e7:1a:ce:
87:c0:69:f1:33:20:f5:2b:e3:2a:5d:09:ca:77:bd:
d0:a5:d8:7e:72:db:96:70:8d:da:e4:d8:c1:d9:d5:
21:d8:91:1a:46:08:cb:24:ad:fa:5f:66:8b:97:e9:
c2:a6:56:4a:54:95:dc:89:ee:a1:c7:40:cd:e6:44:
03:9e:53:70:0b:46:b3:a4:a0:7c:7a:de:89:fc:8a:
bd:65:82:e7:43:31:5b:ab:8b:0d:c4:70:fb:93:e1:
82:d0:a7:57:8e:e0:2b:d9:71:b8:13:42:58:41:f4:
61:45:1d:be:9d:41:38:de:de:95:69:e8:ba:8c:b9:
cd:62:50:63:90:a4:26:6f:d6:f1:51:51:63:91:53:
39:19:46:f1:7e:28:6e:01:b2:8b:fc:1c:7b:69:ad:
21:ba:25:87:97:4e:fd:19:fb:ff:9c:f6:af:61:ce:
93:66:b1:ea:99:dd:1c:d3:67:e6:a7:01:6d:f3:21:
db:1b:55:cf:b7:28:a6:df:e4:7e:95:0b:ac:53:c2:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:A1:0A:91:06:9F:77:B4:42:91:BF:32:B8:D0:FB:EC:89:03:44
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ad:35:c0:e3:60:a7:e5:db:44:cc:25:a2:cc:62:0c:07:bb:
5e:0b:f5:01:39:91:77:fe:8b:a3:b0:09:68:aa:21:9b:8d:7e:
1c:16:6b:c2:92:98:4a:95:f5:51:cb:40:a2:0d:58:96:08:9b:
fe:b8:b1:80:01:48:86:fa:1a:c0:7e:00:e3:16:5a:26:7e:56:
26:18:f6:6b:b7:18:a3:83:5e:44:c2:90:46:0c:ca:fa:59:dd:
77:9d:a1:5f:82:d7:b6:e7:e1:49:53:04:8c:3b:3d:2c:de:0d:
d1:20:81:93:2f:e3:0d:d8:92:a5:3d:d5:e1:12:35:f1:49:d0:
d1:c0:1e:60:49:42:7a:33:5c:9d:48:df:75:6d:ff:9f:1c:6f:
1a:d6:b7:0c:58:0e:86:37:e0:ce:b4:bb:6e:c9:72:c9:98:21:
79:e0:84:5a:2b:36:40:5e:46:2e:99:4b:67:72:0a:4b:ad:e8:
d1:e9:09:6d:d5:86:bc:8b:86:5d:22:8f:eb:ec:08:66:3b:04:
ba:2e:b2:e8:65:4b:ea:50:ab:f4:6a:60:00:b6:fc:51:57:f6:
36:09:d0:8c:f0:8c:9d:6c:b9:f0:1c:0b:44:aa:56:5e:92:e2:
42:95:dc:f1:6a:8d:bc:f6:7b:23:d7:6c:d5:2a:d0:28:b5:5d:
a9:bd:06:a9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE/3g3WEFlgiVzsqmfS5ZC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOTVlY2RhYTM1OWE2ZjgzNTU1NzNkMzkwMDFiYWEzNTg3
NGJlZDIwHhcNMjYxMDE1MTQwMTE5WhcNMjYxMDE2MTQwMTE5WjAzMTEwLwYDVQQD
EygzOWY2YTEwYTkxMDY5Zjc3YjQ0MjkxYmYzMmI4ZDBmYmVjODkwMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bMpgYm30uWUSznTIiDQ9DeAiYw1
QgqQu00x09lz6PDP65rN/WQAjfBi8BgG9u6ZiGwXW1yJ+X/nGs6HwGnxMyD1K+Mq
XQnKd73Qpdh+ctuWcI3a5NjB2dUh2JEaRgjLJK36X2aLl+nCplZKVJXcie6hx0DN
5kQDnlNwC0azpKB8et6J/Iq9ZYLnQzFbq4sNxHD7k+GC0KdXjuAr2XG4E0JYQfRh
RR2+nUE43t6Vaei6jLnNYlBjkKQmb9bxUVFjkVM5GUbxfihuAbKL/Bx7aa0huiWH
l079Gfv/nPavYc6TZrHqmd0c02fmpwFt8yHbG1XPtyim3+R+lQusU8K2EQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDn2oQqRBp93tEKRvzK40PvsiQNEMB8GA1UdIwQY
MBaAFPqV7NqjWab4NVVz05ABuqNYdL7SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wWHMycU5acHZnMVZYUFRrQUc2bzFoMHZ0SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGJiNWM3LTk0NjAtNDAwOS04ZTdk
LTFjMTdkNTAyZDRkZi8xLzEtcFhzMnFOWnB2ZzFWWFBUa0FHNm8xaDB2dEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlL2RiYjVjNy05NDYwLTQwMDktOGU3ZC0xYzE3ZDUwMmQ0
ZGYvMS8xLXBYczJxTlpwdmcxVlhQVGtBRzZvMWgwdnRJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoa01
wONgp+XbRMwlosxiDAe7Xgv1ATmRd/6Lo7AJaKohm41+HBZrwpKYSpX1UctAog1Y
lgib/rixgAFIhvoawH4A4xZaJn5WJhj2a7cYo4NeRMKQRgzK+lndd52hX4LXtufh
SVMEjDs9LN4N0SCBky/jDdiSpT3V4RI18UnQ0cAeYElCejNcnUjfdW3/nxxvGta3
DFgOhjfgzrS7bslyyZgheeCEWis2QF5GLplLZ3IKS63o0ekJbdWGvIuGXSKP6+wI
ZjsEui6y6GVL6lCr9GpgALb8UVf2NgnQjPCMnWy58BwLRKpWXpLiQpXc8WqNvPZ7
I9ds1SrQKLVdqb0GqQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:47 2026 by rpki-client