Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: uXQvlmT7LX01FL4fJdEYchai+GZSTbnCI9nGQi8HBqI=
Subject key identifier: 84:FB:50:5E:44:C7:EB:49:D1:03:43:B5:9A:F2:BC:5C:5E:7A:26:FE
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 01A13FA7ACCB33D669D347738537DA0A5EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 097B
Signing time: Thu 15 Oct 2026 13:01:55 +0000
Manifest this update: Thu 15 Oct 2026 13:01:55 +0000
Manifest next update: Fri 16 Oct 2026 13:01:55 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: OApNnkhgfAFjkymPXatwVOiin7vpfSmGCFv/Ohjw6/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:ac:cb:33:d6:69:d3:47:73:85:37:da:0a:5e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Oct 15 13:01:55 2026 GMT
Not After : Oct 16 13:01:55 2026 GMT
Subject: CN=84fb505e44c7eb49d10343b59af2bc5c5e7a26fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:7b:e2:53:01:d4:33:b8:be:06:50:ed:2f:
66:f8:0c:f8:fd:42:2c:d4:5c:06:08:ae:00:9c:31:
3b:d1:4c:76:25:d6:90:ab:f6:d1:93:80:c6:42:d6:
84:46:61:09:62:5c:76:04:c5:6d:39:0f:42:39:58:
27:73:63:18:9d:34:0b:4b:1d:f4:f3:93:67:21:ce:
e1:1e:f3:0d:86:be:d1:cc:1c:02:01:44:cc:96:d1:
8e:61:aa:9f:4c:ff:b3:f3:ed:4d:db:bf:de:d9:26:
0b:0e:aa:93:2c:22:44:b6:cb:85:95:b8:26:e4:53:
ae:b9:24:0f:bb:d1:3d:40:24:38:7f:9d:67:5f:8d:
68:ff:9d:eb:f2:0a:15:5e:2c:bf:4d:a1:ba:ad:11:
2d:c7:81:98:68:e1:28:3c:17:6b:2d:cc:d9:0d:56:
a2:56:43:dc:77:a5:8a:56:fb:c6:e8:6f:2b:b1:d6:
f6:c1:fe:ae:78:85:11:f8:dd:08:f2:ea:79:e9:5e:
ee:c4:c2:c6:88:cd:62:6a:62:2b:08:ea:38:14:8a:
5d:df:f8:97:68:02:e7:01:a6:e5:29:fa:e8:82:96:
d3:28:54:0f:c5:b3:aa:6e:25:91:38:30:52:b6:71:
e3:1a:0f:c5:b6:58:ef:32:2c:40:4a:27:3e:fb:c2:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FB:50:5E:44:C7:EB:49:D1:03:43:B5:9A:F2:BC:5C:5E:7A:26:FE
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:19:86:e0:cb:2d:a7:20:64:05:85:6f:08:ec:6b:76:2d:88:
66:42:f7:b1:7c:cc:b6:a7:08:d2:b1:ee:8b:d8:a1:dd:af:5f:
99:46:d3:c5:83:0b:28:9c:f3:41:8b:44:f7:76:b3:6d:1f:42:
ce:a9:e4:57:ea:39:ae:98:09:b7:13:fd:ec:96:c2:70:a8:4f:
4e:bc:61:36:83:fa:a7:b4:46:a0:75:c0:7d:65:4a:10:2e:84:
66:4e:2e:d8:73:74:b2:ba:ac:5c:dd:0c:0e:d0:31:ef:86:4f:
39:71:cb:72:df:70:64:86:46:4b:6f:63:08:9e:75:77:40:fc:
aa:cd:93:bc:e3:94:55:8e:4c:97:3b:28:45:eb:94:c1:3e:23:
a6:f7:c3:5a:f0:ca:50:e6:f2:0d:ba:0c:ff:e7:ca:af:b9:1b:
73:94:04:f6:13:22:d9:14:e6:8b:3b:66:88:8f:c1:09:5f:78:
9e:05:3d:85:89:63:74:c0:3f:06:84:bd:fa:00:67:ab:5e:1b:
e6:9e:13:b0:5f:bf:62:22:38:ca:83:4d:9b:21:e2:a9:d7:df:
33:82:f9:9d:f5:78:65:0b:64:d6:51:a8:22:51:3d:6f:d2:8b:
e9:9b:76:b1:c5:97:e4:45:ba:93:56:47:4f:d9:62:c0:cd:77:
c3:b2:dc:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p6zLM9Zp00dzhTfaCl7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODg4NTE5ODFjZmIzYzE1NjI0YjZlOTdmNjBhM2Q5OTFk
NmQ5NjkwHhcNMjYxMDE1MTMwMTU1WhcNMjYxMDE2MTMwMTU1WjAzMTEwLwYDVQQD
Eyg4NGZiNTA1ZTQ0YzdlYjQ5ZDEwMzQzYjU5YWYyYmM1YzVlN2EyNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9174lMB1DO4vgZQ7S9m+Az4/UIs
1FwGCK4AnDE70Ux2JdaQq/bRk4DGQtaERmEJYlx2BMVtOQ9COVgnc2MYnTQLSx30
85NnIc7hHvMNhr7RzBwCAUTMltGOYaqfTP+z8+1N27/e2SYLDqqTLCJEtsuFlbgm
5FOuuSQPu9E9QCQ4f51nX41o/53r8goVXiy/TaG6rREtx4GYaOEoPBdrLczZDVai
VkPcd6WKVvvG6G8rsdb2wf6ueIUR+N0I8up56V7uxMLGiM1iamIrCOo4FIpd3/iX
aALnAablKfrogpbTKFQPxbOqbiWRODBStnHjGg/FtljvMixASic++8JSGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT7UF5Ex+tJ0QNDtZryvFxeeib+MB8GA1UdIwQY
MBaAFNeIhRmBz7PBViS26X9go9mR1tlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgt
ZDA4MDA0NDkzZDE0LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgtZDA4MDA0NDkzZDE0
LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRmG4Mst
pyBkBYVvCOxrdi2IZkL3sXzMtqcI0rHui9ih3a9fmUbTxYMLKJzzQYtE93azbR9C
zqnkV+o5rpgJtxP97JbCcKhPTrxhNoP6p7RGoHXAfWVKEC6EZk4u2HN0srqsXN0M
DtAx74ZPOXHLct9wZIZGS29jCJ51d0D8qs2TvOOUVY5MlzsoReuUwT4jpvfDWvDK
UObyDboM/+fKr7kbc5QE9hMi2RTmiztmiI/BCV94ngU9hYljdMA/BoS9+gBnq14b
5p4TsF+/YiI4yoNNmyHiqdffM4L5nfV4ZQtk1lGoIlE9b9KL6Zt2scWX5EW6k1ZH
T9liwM13w7Lc5g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:58:01 2026 by rpki-client