Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: TDpW9mDqeaONLEilLixzPtDxU7r/1UwfVplKvW67UH8=
Subject key identifier: 59:53:87:BE:E2:7D:45:A3:B3:04:2E:7A:B5:D1:BD:4B:73:01:08:B8
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 01A140835A70FE7280E4381A3C924FDE9D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 19EA
Signing time: Thu 15 Oct 2026 17:01:52 +0000
Manifest this update: Thu 15 Oct 2026 17:01:52 +0000
Manifest next update: Fri 16 Oct 2026 17:01:52 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: JKYbKqSeqtn0SkU2+sa7ntWLXpuKD73wloYhxznIYRk=)
2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:5a:70:fe:72:80:e4:38:1a:3c:92:4f:de:9d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Oct 15 17:01:52 2026 GMT
Not After : Oct 16 17:01:52 2026 GMT
Subject: CN=595387bee27d45a3b3042e7ab5d1bd4b730108b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:82:f7:26:8e:3c:1e:3c:33:1c:82:6c:c5:
b4:9c:df:36:e3:ab:21:86:20:56:34:80:c2:76:7e:
5b:b7:8e:2c:cb:94:8a:76:ce:ec:db:b0:8b:ef:34:
ce:45:c0:90:4c:10:01:be:80:d0:80:24:75:d6:c1:
68:84:ff:1b:fd:7a:2a:af:61:9a:1b:5f:e4:78:b2:
28:10:7e:be:d8:43:f8:20:b8:e6:4f:c9:57:b7:43:
09:15:e9:04:e1:ad:00:2a:8a:b8:e6:e0:5b:16:62:
24:fa:ad:e3:0e:5c:d3:9e:cf:61:d7:53:d8:cb:40:
5d:f6:6f:53:bf:1a:aa:79:ab:81:f9:3f:43:5c:9b:
9c:f4:d3:62:bd:65:e2:ea:70:52:03:b5:9d:70:3a:
52:1c:79:71:30:99:b2:11:f3:ae:fe:06:a3:a9:a9:
4e:df:df:d5:34:a5:48:3a:f7:97:e8:81:51:b5:b3:
98:40:13:2b:68:ea:fa:60:34:45:62:fb:c9:3a:54:
d8:1d:cd:2a:fe:e2:62:fb:e5:10:a0:e8:98:b0:ad:
72:c8:7a:b0:77:a1:dd:41:cf:d8:e9:19:f3:23:20:
cb:36:02:13:1a:07:dd:85:42:c4:89:5a:90:65:06:
bf:cb:54:20:e2:08:72:32:33:df:49:c7:1e:55:55:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:53:87:BE:E2:7D:45:A3:B3:04:2E:7A:B5:D1:BD:4B:73:01:08:B8
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b7:1b:a9:ce:b7:78:2f:e0:9c:4c:ce:f4:07:41:90:2a:ea:
d2:1d:8f:fc:ba:32:0b:7e:e1:cc:ec:86:ef:68:58:75:b3:63:
a5:f0:5e:86:b5:8d:d5:fc:56:b9:8d:58:e2:69:80:a2:9c:bc:
e4:9d:fe:fa:aa:b4:89:fc:d3:7d:c8:15:ca:ea:e3:84:35:6a:
37:e6:0f:fa:07:47:3a:c9:23:41:77:67:ba:d6:a1:d9:ba:d9:
5d:76:f5:71:09:21:ac:ff:d8:19:77:14:8d:65:52:a9:e2:36:
c7:56:5b:3e:35:db:19:52:48:bb:52:a2:63:54:08:9c:fe:5c:
a6:f3:d0:e8:d0:04:8d:22:a1:d1:03:db:ac:db:93:39:ce:b1:
b7:9b:b0:3a:56:75:8d:f1:48:cf:d7:09:fd:bb:c2:b4:19:c2:
89:72:b1:b8:d0:e9:9b:e9:ad:8e:1c:50:bd:5a:9e:9b:ef:49:
48:8a:99:db:00:dd:34:bd:0e:46:87:2e:56:f9:27:8f:75:24:
01:90:4f:80:0b:83:80:3f:d8:7c:c4:f3:f4:55:63:c7:6a:d3:
02:c5:41:35:84:67:88:33:2c:cc:68:63:ed:6a:b6:ad:04:8f:
ed:ed:bd:b1:a1:4a:7a:5c:08:88:5b:74:c0:79:29:09:22:96:
3a:a7:00:43
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaFAg1pw/nKA5DgaPJJP3p0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4M2NjYWVmOWM5MTEyMGVjNmZiMTRmZjRjNGM1NzQ1YTAy
MzliNzcwHhcNMjYxMDE1MTcwMTUyWhcNMjYxMDE2MTcwMTUyWjAzMTEwLwYDVQQD
Eyg1OTUzODdiZWUyN2Q0NWEzYjMwNDJlN2FiNWQxYmQ0YjczMDEwOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnluC9yaOPB48MxyCbMW0nN8246sh
hiBWNIDCdn5bt44sy5SKds7s27CL7zTORcCQTBABvoDQgCR11sFohP8b/Xoqr2Ga
G1/keLIoEH6+2EP4ILjmT8lXt0MJFekE4a0AKoq45uBbFmIk+q3jDlzTns9h11PY
y0Bd9m9TvxqqeauB+T9DXJuc9NNivWXi6nBSA7WdcDpSHHlxMJmyEfOu/gajqalO
39/VNKVIOveX6IFRtbOYQBMraOr6YDRFYvvJOlTYHc0q/uJi++UQoOiYsK1yyHqw
d6HdQc/Y6RnzIyDLNgITGgfdhULEiVqQZQa/y1Qg4ghyMjPfScceVVUR1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFlTh77ifUWjswQuerXRvUtzAQi4MB8GA1UdIwQY
MBaAFPg8yu+ckRIOxvsU/0xMV0WgI5t3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Eeks3NXlSRWc3Ry14VF9URXhYUmFBam0zYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNDVmY2Q1LTg4MTItNDMyZC1iNTM3
LTc2OTgyZjAzZWEwYy8xLzEtRHpLNzV5UkVnN0cteFRfVEV4WFJhQWptM2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JmLzQ1ZmNkNS04ODEyLTQzMmQtYjUzNy03Njk4MmYwM2Vh
MGMvMS8xLUR6Szc1eVJFZzdHLXhUX1RFeFhSYUFqbTNjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbcb
qc63eC/gnEzO9AdBkCrq0h2P/LoyC37hzOyG72hYdbNjpfBehrWN1fxWuY1Y4mmA
opy85J3++qq0ifzTfcgVyurjhDVqN+YP+gdHOskjQXdnutah2brZXXb1cQkhrP/Y
GXcUjWVSqeI2x1ZbPjXbGVJIu1KiY1QInP5cpvPQ6NAEjSKh0QPbrNuTOc6xt5uw
OlZ1jfFIz9cJ/bvCtBnCiXKxuNDpm+mtjhxQvVqem+9JSIqZ2wDdNL0ORocuVvkn
j3UkAZBPgAuDgD/YfMTz9FVjx2rTAsVBNYRniDMszGhj7Wq2rQSP7e29saFKelwI
iFt0wHkpCSKWOqcAQw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:24 2026 by rpki-client