Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: /kV+owcN+ooIN3ShpCjtJhx60xPoQLDSMZiXPhgURW0=
Subject key identifier: 0B:E5:FF:C5:B3:7A:C9:FA:C4:97:99:57:DE:24:B1:84:E6:3A:A5:12
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 01A0016EDAB469CB3A4E84C9BB427EF2B549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 18:00:37 +0000
Manifest this update: Fri 14 Aug 2026 18:00:37 +0000
Manifest next update: Sat 15 Aug 2026 18:00:37 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: BEPUPYrcmTr7VC3dbjv2QzvKw1RScipZ/wYCu/j7ZA8=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:da:b4:69:cb:3a:4e:84:c9:bb:42:7e:f2:b5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Aug 14 18:00:37 2026 GMT
Not After : Aug 15 18:00:37 2026 GMT
Subject: CN=0be5ffc5b37ac9fac4979957de24b184e63aa512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:be:c4:b6:ca:2f:f6:ec:d7:d7:dd:1e:9b:
8d:be:6c:cb:11:c5:bf:1f:e9:b4:93:1b:33:ec:8e:
e2:eb:0c:d9:06:97:20:bc:39:5f:3f:e4:61:5b:99:
19:f4:53:e4:aa:e4:0f:8f:28:f4:b0:a2:53:03:a4:
0a:c0:f8:c9:39:b7:04:9b:91:4a:49:4b:3f:83:c5:
f8:09:d9:c5:4d:cb:20:f3:20:88:f0:b1:47:a5:a9:
3c:05:d7:7e:88:57:6f:bf:d7:75:f8:bd:7e:c7:e9:
46:68:50:7f:ed:28:33:8e:14:b9:8a:f1:34:a7:50:
1e:6b:d6:b7:0f:74:f1:f7:76:79:1f:f8:4c:c0:b5:
a6:7f:92:4a:dd:d0:5f:87:85:3d:50:51:f2:06:79:
08:ff:86:bc:14:e6:55:55:30:b4:24:eb:ea:4e:33:
ad:dc:48:3b:4c:0e:61:ca:1a:09:64:86:f8:26:a8:
0b:0c:b8:c8:5e:2a:c1:ad:fa:22:a7:b8:b7:24:a4:
8e:0e:88:f9:e8:25:e4:ad:a6:a9:49:27:28:be:2b:
94:24:02:a1:42:02:2d:3c:59:f9:6a:11:6b:47:37:
cc:bf:d8:cc:07:e0:e7:d3:0c:64:51:c0:82:c7:55:
b9:ee:2f:7c:30:e9:8f:33:aa:86:60:99:29:e2:a2:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E5:FF:C5:B3:7A:C9:FA:C4:97:99:57:DE:24:B1:84:E6:3A:A5:12
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:66:bf:48:97:56:e1:cf:21:77:83:77:c8:d2:8c:ac:bc:fc:
81:fa:54:6e:79:ad:f3:9c:37:76:05:70:cd:b9:08:94:14:c1:
90:cf:72:1f:01:fa:f9:ea:89:ca:2b:e1:9b:5e:74:3c:54:6b:
44:01:9e:70:1e:30:02:43:cf:0c:7a:6b:56:14:cc:c6:d6:8e:
7b:ce:d0:b6:b4:b1:e6:02:96:92:ec:f5:e8:a5:af:1a:1f:8e:
6d:d3:77:4a:fc:9b:d6:c7:38:b0:9b:a3:e0:c7:84:68:09:59:
c2:bf:00:f7:d8:19:2d:b1:e5:9a:f5:6d:fe:0e:bb:41:33:54:
0d:32:ea:09:ac:9f:e3:9c:80:fc:52:c7:58:23:10:7a:77:a3:
ba:fb:a7:f7:9b:52:0a:44:98:cf:45:32:b4:69:9b:62:52:22:
dc:e4:45:03:b8:88:88:d6:d1:6f:ff:86:f4:11:fd:01:c3:1c:
62:85:67:97:e8:26:04:2c:8d:bb:ab:f7:5c:ed:b7:64:c7:1f:
09:ff:62:21:2a:bb:fc:c1:68:63:c3:a9:bc:27:23:4c:7a:2f:
66:fe:cd:e8:7c:6f:be:3b:7f:73:dc:73:bc:f6:2a:d5:d5:19:
44:a5:0c:fa:d4:cc:32:ba:0c:41:0a:5f:51:0b:0e:ed:97:11:
78:af:3c:72
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaABbtq0acs6ToTJu0J+8rVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDZhNGYxMTQzYWJlM2FkZmM0YjY4MzVmYTEzNGUzZGYy
Y2FjMzQwHhcNMjYwODE0MTgwMDM3WhcNMjYwODE1MTgwMDM3WjAzMTEwLwYDVQQD
EygwYmU1ZmZjNWIzN2FjOWZhYzQ5Nzk5NTdkZTI0YjE4NGU2M2FhNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDy+xLbKL/bs19fdHpuNvmzLEcW/
H+m0kxsz7I7i6wzZBpcgvDlfP+RhW5kZ9FPkquQPjyj0sKJTA6QKwPjJObcEm5FK
SUs/g8X4CdnFTcsg8yCI8LFHpak8Bdd+iFdvv9d1+L1+x+lGaFB/7SgzjhS5ivE0
p1Aea9a3D3Tx93Z5H/hMwLWmf5JK3dBfh4U9UFHyBnkI/4a8FOZVVTC0JOvqTjOt
3Eg7TA5hyhoJZIb4JqgLDLjIXirBrfoip7i3JKSODoj56CXkraapSScoviuUJAKh
QgItPFn5ahFrRzfMv9jMB+Dn0wxkUcCCx1W57i98MOmPM6qGYJkp4qIe4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAvl/8Wzesn6xJeZV94ksYTmOqUSMB8GA1UdIwQY
MBaAFPpGpPEUOr4638S2g1+hNOPfLKw0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rYWs4UlE2dmpyZnhMYURYNkUwNDk4c3JEUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZjNhNzlkLTM4Y2YtNDkwNS1hYjVm
LTViY2E0NWVmZGU4Yy8xLzEta2FrOFJRNnZqcmZ4TGFEWDZFMDQ5OHNyRFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RjL2YzYTc5ZC0zOGNmLTQ5MDUtYWI1Zi01YmNhNDVlZmRl
OGMvMS8xLWthazhSUTZ2anJmeExhRFg2RTA0OThzckRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2a/
SJdW4c8hd4N3yNKMrLz8gfpUbnmt85w3dgVwzbkIlBTBkM9yHwH6+eqJyivhm150
PFRrRAGecB4wAkPPDHprVhTMxtaOe87QtrSx5gKWkuz16KWvGh+ObdN3Svyb1sc4
sJuj4MeEaAlZwr8A99gZLbHlmvVt/g67QTNUDTLqCayf45yA/FLHWCMQenejuvun
95tSCkSYz0UytGmbYlIi3ORFA7iIiNbRb/+G9BH9AcMcYoVnl+gmBCyNu6v3XO23
ZMcfCf9iISq7/MFoY8OpvCcjTHovZv7N6Hxvvjt/c9xzvPYq1dUZRKUM+tTMMroM
QQpfUQsO7ZcReK88cg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:16 2026 by rpki-client