Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
File: 1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft (raw, json)
Hash identifier: Vx9fNeuy0sqO9hVXP02cyIFD6vcKfDTMZFHeiqYyBho=
Subject key identifier: 21:88:3A:F6:96:B1:71:D0:0C:7E:64:A7:81:B7:B0:E8:43:5B:F9:80
Authority key identifier: FA:4E:97:A5:BA:D2:6F:F1:BD:BA:85:9B:2A:FD:C3:8F:1A:5A:85:20
Certificate issuer: /CN=fa4e97a5bad26ff1bdba859b2afdc38f1a5a8520
Certificate serial: 01A040175E0764C3B47CAC8C1C5D5E4EBF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 22:01:08 +0000
Manifest this update: Wed 26 Aug 2026 22:01:08 +0000
Manifest next update: Thu 27 Aug 2026 22:01:08 +0000
Files and hashes: 1: 1-k6XpbrSb_G9uoWbKv3DjxpahSA.crl (hash: 5U48xl80hzfYrYCFwKbxUtF58K/Ol90Z7m7bDIsk0I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:5e:07:64:c3:b4:7c:ac:8c:1c:5d:5e:4e:bf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e97a5bad26ff1bdba859b2afdc38f1a5a8520
Validity
Not Before: Aug 26 22:01:08 2026 GMT
Not After : Aug 27 22:01:08 2026 GMT
Subject: CN=21883af696b171d00c7e64a781b7b0e8435bf980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f0:a6:a6:41:fe:37:3a:6b:b5:29:fb:59:a3:
93:af:0f:02:2b:e3:41:24:d7:1c:05:f2:9e:be:4f:
7b:c4:4c:a8:3b:9d:c2:62:9a:0c:c8:50:70:8c:87:
5b:90:a0:4f:41:56:17:d1:5a:60:59:20:43:25:c1:
17:11:1b:ab:63:7b:7d:19:18:78:75:71:1e:ff:6c:
dc:91:3f:85:d9:26:10:fb:f3:24:d7:c9:4e:fc:bf:
35:9e:97:fd:4d:7f:27:06:0d:52:57:46:79:91:f9:
46:2c:72:87:93:fe:1b:24:6a:5a:f4:31:85:09:25:
22:48:09:8a:f0:2a:99:ba:9d:75:f1:94:f1:78:9e:
39:b9:cf:61:f5:ab:1c:dc:53:04:4a:7b:41:10:c8:
f6:e4:b2:0a:c8:43:f2:94:28:82:97:dc:29:2f:ec:
11:2c:a3:99:c1:ac:a0:34:f3:99:00:31:c4:ac:a3:
2c:cf:a5:ff:3a:33:d1:ad:10:ce:06:ac:3d:0f:7a:
d3:1e:e2:ac:f3:77:63:aa:f4:a7:1c:0c:05:11:31:
0a:ab:ea:38:78:3b:f2:42:0a:9f:ba:a0:94:7d:38:
44:27:41:f5:19:bb:d7:71:31:de:ee:3c:a1:65:ba:
fb:ef:5f:9a:24:cb:02:6b:c7:cb:b3:c9:11:f0:17:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:88:3A:F6:96:B1:71:D0:0C:7E:64:A7:81:B7:B0:E8:43:5B:F9:80
X509v3 Authority Key Identifier:
keyid:FA:4E:97:A5:BA:D2:6F:F1:BD:BA:85:9B:2A:FD:C3:8F:1A:5A:85:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:be:e1:4e:67:76:68:70:4d:d3:a2:0e:99:61:25:ce:f9:e4:
75:b9:43:4a:e1:5c:26:dc:11:d9:2e:85:bd:87:1f:50:19:81:
0b:3a:3a:6a:b8:4d:e3:ca:9e:6e:9e:4f:67:46:b3:6d:e2:f8:
c2:8d:e6:a9:15:c1:75:b1:8e:64:1e:e6:f0:41:ce:3a:a3:63:
5b:59:89:5d:19:77:48:18:47:d0:cf:fc:ec:8d:4e:62:10:e3:
51:5e:b3:a5:05:19:12:f7:b2:f7:d5:05:22:63:65:70:71:10:
cd:2d:26:ad:12:7e:40:59:42:ff:71:ff:62:75:7d:de:bb:33:
ac:e4:93:02:6b:93:d2:ca:e4:84:37:80:17:54:0a:e8:3c:7d:
6a:92:43:8b:18:df:1b:9a:f9:5f:29:24:dd:e4:02:fa:e0:4c:
64:4d:09:43:91:2b:65:87:6e:37:e8:a2:91:9c:bc:35:7d:5d:
45:7e:2d:7e:ea:87:11:21:99:67:7d:d4:d5:09:5a:29:32:41:
1b:55:9e:8f:be:fd:2e:2b:f2:55:fb:e7:dc:4e:fa:8a:6f:be:
82:b1:b9:e6:1b:ea:de:ad:68:e5:26:e2:ad:71:82:27:8e:a5:
98:ae:52:fb:28:27:61:f1:b7:51:71:02:5e:35:b9:6b:52:92:
7f:f0:9c:66
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaBAF14HZMO0fKyMHF1eTr8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNGU5N2E1YmFkMjZmZjFiZGJhODU5YjJhZmRjMzhmMWE1
YTg1MjAwHhcNMjYwODI2MjIwMTA4WhcNMjYwODI3MjIwMTA4WjAzMTEwLwYDVQQD
EygyMTg4M2FmNjk2YjE3MWQwMGM3ZTY0YTc4MWI3YjBlODQzNWJmOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vCmpkH+NzprtSn7WaOTrw8CK+NB
JNccBfKevk97xEyoO53CYpoMyFBwjIdbkKBPQVYX0VpgWSBDJcEXERurY3t9GRh4
dXEe/2zckT+F2SYQ+/Mk18lO/L81npf9TX8nBg1SV0Z5kflGLHKHk/4bJGpa9DGF
CSUiSAmK8CqZup118ZTxeJ45uc9h9asc3FMESntBEMj25LIKyEPylCiCl9wpL+wR
LKOZwaygNPOZADHErKMsz6X/OjPRrRDOBqw9D3rTHuKs83djqvSnHAwFETEKq+o4
eDvyQgqfuqCUfThEJ0H1GbvXcTHe7jyhZbr771+aJMsCa8fLs8kR8BeotQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCGIOvaWsXHQDH5kp4G3sOhDW/mAMB8GA1UdIwQY
MBaAFPpOl6W60m/xvbqFmyr9w48aWoUgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rNlhwYnJTYl9HOXVvV2JLdjNEanhwYWhTQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMzhiOGJhLWRmNmMtNDg2ZC1iNmNk
LTFkNWRkMjI1OGM0ZS8xLzEtazZYcGJyU2JfRzl1b1diS3YzRGp4cGFoU0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmLzM4YjhiYS1kZjZjLTQ4NmQtYjZjZC0xZDVkZDIyNThj
NGUvMS8xLWs2WHBiclNiX0c5dW9XYkt2M0RqeHBhaFNBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdL7h
Tmd2aHBN06IOmWElzvnkdblDSuFcJtwR2S6FvYcfUBmBCzo6arhN48qebp5PZ0az
beL4wo3mqRXBdbGOZB7m8EHOOqNjW1mJXRl3SBhH0M/87I1OYhDjUV6zpQUZEvey
99UFImNlcHEQzS0mrRJ+QFlC/3H/YnV93rszrOSTAmuT0srkhDeAF1QK6Dx9apJD
ixjfG5r5Xykk3eQC+uBMZE0JQ5ErZYduN+iikZy8NX1dRX4tfuqHESGZZ33U1Qla
KTJBG1Wej779LivyVfvn3E76im++grG55hvq3q1o5SbirXGCJ46lmK5S+ygnYfG3
UXECXjW5a1KSf/CcZg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:43:33 2026 by rpki-client