Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: 8ha3jrlC6MFzOIkpLE4IS/Hv0sCLB94H5r7ABPSU4Ac=
Subject key identifier: 66:D5:3B:45:4A:0A:3A:B1:84:F4:75:D7:8C:67:A6:11:FF:73:C8:E4
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 01A17ADF335F0C97BBA5D84D1E65313C6581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 0865
Signing time: Tue 27 Oct 2026 01:00:10 +0000
Manifest this update: Tue 27 Oct 2026 01:00:10 +0000
Manifest next update: Wed 28 Oct 2026 01:00:10 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: 73w9wXF54BJhAl2K40iQJIgBLptSAPxTdmzPTfDUa/k=)
2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:33:5f:0c:97:bb:a5:d8:4d:1e:65:31:3c:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Oct 27 01:00:10 2026 GMT
Not After : Oct 28 01:00:10 2026 GMT
Subject: CN=66d53b454a0a3ab184f475d78c67a611ff73c8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:8d:9a:73:9e:21:99:be:f0:46:c4:3b:0b:
99:85:0d:64:ab:36:c6:af:6b:7c:7d:c1:b1:9e:56:
57:f2:98:32:4f:ac:9f:5d:e2:ae:ff:ab:d3:ed:9f:
f0:3a:8c:85:04:65:a0:34:ad:1a:19:39:c9:9f:dd:
2a:0f:48:24:27:a6:08:c6:7e:9e:8e:3f:33:e3:53:
e2:74:c8:83:76:4d:52:e2:43:e5:e6:68:1c:2d:87:
5e:b0:63:51:a2:15:cf:32:4b:f2:58:37:0b:b3:ac:
da:ae:cc:45:eb:3e:03:00:cc:9f:4a:d8:ed:4e:7b:
37:2e:ca:9c:a5:f4:29:c3:ed:ef:a7:40:85:2a:e7:
c8:0b:a9:b4:87:6b:51:cd:54:0f:f2:bb:5a:e8:88:
af:c5:f0:18:ee:df:14:34:f3:25:5a:1a:f4:9d:63:
34:4d:7b:23:ba:98:21:d9:2a:b6:0f:53:81:3b:16:
e2:21:3f:9a:72:3e:a7:36:19:18:37:ee:2d:92:d8:
3e:eb:80:e3:03:60:de:1a:6a:93:ee:b7:72:37:d4:
90:4b:10:a1:26:fa:e9:fe:f1:1b:4c:3c:42:7d:31:
30:9c:9d:06:0a:b8:de:5d:13:42:e9:a2:5e:bb:7f:
77:c8:d1:7e:2e:3a:0c:2e:f7:c7:7b:bf:49:47:eb:
13:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:3B:45:4A:0A:3A:B1:84:F4:75:D7:8C:67:A6:11:FF:73:C8:E4
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:73:5c:ba:5f:7b:96:56:ef:ac:52:70:da:5f:41:eb:10:0a:
8e:cf:bf:1b:c9:c6:63:73:e9:83:df:58:45:59:59:93:be:44:
1a:4e:34:6e:75:41:02:bf:9e:f0:59:06:fa:68:8c:65:1d:49:
bf:d7:6b:91:38:c5:72:52:d2:b1:ef:1c:67:de:60:78:76:ec:
ae:03:f4:fd:0f:f9:a7:3f:c5:51:fe:12:65:f9:a4:f1:11:d4:
d8:bd:cb:0d:5b:54:d9:f6:5d:bd:94:2a:97:9a:94:54:5e:ee:
15:d2:c2:08:51:e3:5e:24:9d:26:77:2c:a3:0b:6c:c3:41:21:
34:e1:27:03:95:f1:d2:b1:41:4b:bd:3e:f7:e3:d2:06:31:5e:
ab:e3:8f:84:af:0f:79:8e:7f:a8:34:af:db:bf:23:ab:5c:35:
10:da:e6:62:e3:90:31:9b:30:90:38:ed:f7:05:67:d6:38:60:
04:63:dc:0c:66:6f:68:7b:3d:6a:1c:6f:45:66:15:48:9b:7a:
11:20:36:e9:9e:70:5f:c9:c9:a5:b5:d1:81:fc:55:60:c6:b2:
39:3f:89:07:50:eb:2d:fd:57:1e:ff:2b:90:4e:0d:cd:35:1d:
37:78:17:4e:e4:c4:ef:db:43:ee:7b:08:84:ae:ed:fa:cd:c4:
e1:27:0f:a2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaF63zNfDJe7pdhNHmUxPGWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWZmNGRmMmVmYzY5ZWNjMTkyZWE1YWVmZDdiM2I5N2Y1
ODA5MDEwHhcNMjYxMDI3MDEwMDEwWhcNMjYxMDI4MDEwMDEwWjAzMTEwLwYDVQQD
Eyg2NmQ1M2I0NTRhMGEzYWIxODRmNDc1ZDc4YzY3YTYxMWZmNzNjOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2iNmnOeIZm+8EbEOwuZhQ1kqzbG
r2t8fcGxnlZX8pgyT6yfXeKu/6vT7Z/wOoyFBGWgNK0aGTnJn90qD0gkJ6YIxn6e
jj8z41PidMiDdk1S4kPl5mgcLYdesGNRohXPMkvyWDcLs6zarsxF6z4DAMyfStjt
Tns3LsqcpfQpw+3vp0CFKufIC6m0h2tRzVQP8rta6IivxfAY7t8UNPMlWhr0nWM0
TXsjupgh2Sq2D1OBOxbiIT+acj6nNhkYN+4tktg+64DjA2DeGmqT7rdyN9SQSxCh
Jvrp/vEbTDxCfTEwnJ0GCrjeXRNC6aJeu393yNF+LjoMLvfHe79JR+sT7QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGbVO0VKCjqxhPR114xnphH/c8jkMB8GA1UdIwQY
MBaAFPsf9N8u/GnswZLqWu/Xs7l/WAkBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14XzAzeTc4YWV6Qmt1cGE3OWV6dVg5WUNRRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNjc5ZTE1LWUxYTMtNDJiNS05Yjdi
LTNmMWMwMjNhZGEwNS8xLzEteF8wM3k3OGFlekJrdXBhNzllenVYOVlDUUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RiLzY3OWUxNS1lMWEzLTQyYjUtOWI3Yi0zZjFjMDIzYWRh
MDUvMS8xLXhfMDN5NzhhZXpCa3VwYTc5ZXp1WDlZQ1FFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHNc
ul97llbvrFJw2l9B6xAKjs+/G8nGY3Ppg99YRVlZk75EGk40bnVBAr+e8FkG+miM
ZR1Jv9drkTjFclLSse8cZ95geHbsrgP0/Q/5pz/FUf4SZfmk8RHU2L3LDVtU2fZd
vZQql5qUVF7uFdLCCFHjXiSdJncsowtsw0EhNOEnA5Xx0rFBS70+9+PSBjFeq+OP
hK8PeY5/qDSv278jq1w1ENrmYuOQMZswkDjt9wVn1jhgBGPcDGZvaHs9ahxvRWYV
SJt6ESA26Z5wX8nJpbXRgfxVYMayOT+JB1DrLf1XHv8rkE4NzTUdN3gXTuTE79tD
7nsIhK7t+s3E4ScPog==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:43 2026 by rpki-client