Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: PX0n3dHZGyFDHrMr/8MkswE+1VVc4HiDAQ7YjazEzlQ=
Subject key identifier: 22:C2:47:AF:5E:1B:54:71:30:E8:3F:40:66:F3:9F:9A:B2:10:31:FE
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 01A088D523BC4E8618104CBB621AB743858F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 01:01:04 +0000
Manifest this update: Thu 10 Sep 2026 01:01:04 +0000
Manifest next update: Fri 11 Sep 2026 01:01:04 +0000
Files and hashes: 1: 36DzStGfXWJaTvy_DFt5js-qBkY.roa (hash: 8LA/a3S6Q/+rbVsFghMDCmBix0HHSJzG0POoZHw8My4=)
2: 9yn0ZWrwWlwVQcTY4DZrDaNSuqU.roa (hash: XESXJFfuiD+BaGLEcM4v4ajEMguCnVi9qwOcF7gca0c=)
3: E1fZi9ctnO61xdkwBdXsEigsazY.roa (hash: AfabkRw7EM5b0Hf4k7+LAG9L1ed9yMxYQaK/+/5IZY8=)
4: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: fDuEBkIVdcd/WaZqr0FKIBHldQrD1STEBKiUlyRE7bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:23:bc:4e:86:18:10:4c:bb:62:1a:b7:43:85:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Sep 10 01:01:04 2026 GMT
Not After : Sep 11 01:01:04 2026 GMT
Subject: CN=22c247af5e1b547130e83f4066f39f9ab21031fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:7c:d3:13:fa:ae:15:3c:b1:bc:db:44:83:
ab:12:40:80:20:8c:4e:ff:4f:f2:9f:de:57:9a:b9:
c8:54:07:02:8e:e1:a0:50:a2:ab:52:e8:d6:80:ad:
5a:28:d1:87:17:37:18:dc:54:8e:30:9d:ae:e7:08:
af:a9:7b:4d:3e:3c:a2:09:92:69:c8:3c:f6:f5:bb:
4e:78:95:7b:f7:fb:f5:95:e1:ab:10:52:24:40:bc:
dd:99:a9:5e:9f:a6:60:35:d4:bb:7d:ad:17:1b:46:
22:3d:2e:7c:0c:76:80:b0:4b:74:3c:25:ac:1b:d7:
0e:dc:56:f0:50:5b:89:57:49:af:4e:2d:8c:72:c8:
53:ea:65:1c:72:9e:54:18:61:48:d1:78:c2:3b:8e:
de:79:c8:5e:52:83:db:c4:ab:f3:28:1d:2c:ea:3d:
e6:aa:7d:c3:69:07:37:6d:72:69:1a:61:58:73:75:
1d:0a:e7:12:a9:4d:05:06:b9:66:9a:77:19:86:e7:
aa:6a:4a:bb:71:63:ff:b6:dc:f6:3d:9e:9d:1f:12:
cb:51:c2:d4:5e:20:07:c3:5a:79:95:4a:7e:61:64:
99:7b:58:b5:fa:8d:f6:1b:54:44:bc:11:25:c3:7d:
b9:b0:1d:7f:26:24:32:6b:90:6e:66:f4:66:a8:c0:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C2:47:AF:5E:1B:54:71:30:E8:3F:40:66:F3:9F:9A:B2:10:31:FE
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:46:c3:6e:af:a1:2e:d2:88:1c:b2:97:6b:9e:f1:4d:08:d6:
55:c0:79:ef:01:24:4f:88:87:b8:fe:0c:17:41:00:1d:33:c5:
bc:76:76:2b:a0:57:e6:f9:3f:c1:60:81:fc:36:93:9c:f5:84:
16:d1:2a:56:c6:d8:d1:64:bb:d3:77:ca:1e:06:cf:59:f3:58:
9f:98:a1:be:e3:56:b8:2f:53:c6:d8:43:6a:fe:50:f1:a3:0b:
dc:dc:ef:24:c3:77:33:9f:77:ed:5a:fe:78:f9:c1:53:64:a2:
a7:7d:77:63:c4:8a:64:9e:db:2b:7c:04:a7:ea:dd:ac:aa:6c:
56:95:94:41:79:2c:9a:99:a7:9c:ec:4e:db:31:2a:b5:ea:a8:
99:74:7b:b1:12:15:04:38:6c:33:e7:34:ea:ee:97:be:d8:a5:
36:1f:90:43:f6:20:01:d1:5e:4f:f2:e8:e6:28:fa:45:87:07:
a9:7e:a8:61:90:05:92:0d:8c:3f:bd:eb:dd:2f:d1:d3:e8:55:
0b:5a:a3:78:eb:c4:d7:c3:b6:b8:23:cf:cd:c2:71:ad:8c:16:
c0:f6:36:7a:5f:9e:7c:27:95:a3:9c:10:7a:67:a4:b4:b3:ec:
92:cf:86:db:7d:2b:c9:eb:7f:25:ca:ea:85:71:6f:45:37:bf:
a3:d1:b2:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCI1SO8ToYYEEy7Yhq3Q4WPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw
YTUyOTYwHhcNMjYwOTEwMDEwMTA0WhcNMjYwOTExMDEwMTA0WjAzMTEwLwYDVQQD
EygyMmMyNDdhZjVlMWI1NDcxMzBlODNmNDA2NmYzOWY5YWIyMTAzMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC580xP6rhU8sbzbRIOrEkCAIIxO
/0/yn95XmrnIVAcCjuGgUKKrUujWgK1aKNGHFzcY3FSOMJ2u5wivqXtNPjyiCZJp
yDz29btOeJV79/v1leGrEFIkQLzdmalen6ZgNdS7fa0XG0YiPS58DHaAsEt0PCWs
G9cO3FbwUFuJV0mvTi2McshT6mUccp5UGGFI0XjCO47eecheUoPbxKvzKB0s6j3m
qn3DaQc3bXJpGmFYc3UdCucSqU0FBrlmmncZhueqakq7cWP/ttz2PZ6dHxLLUcLU
XiAHw1p5lUp+YWSZe1i1+o32G1REvBElw325sB1/JiQya5BuZvRmqMDctwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLCR69eG1RxMOg/QGbzn5qyEDH+MB8GA1UdIwQY
MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt
N2Y1ZjRkNjA0NzMxLzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx
LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEbDbq+h
LtKIHLKXa57xTQjWVcB57wEkT4iHuP4MF0EAHTPFvHZ2K6BX5vk/wWCB/DaTnPWE
FtEqVsbY0WS703fKHgbPWfNYn5ihvuNWuC9TxthDav5Q8aML3NzvJMN3M5937Vr+
ePnBU2Sip313Y8SKZJ7bK3wEp+rdrKpsVpWUQXksmpmnnOxO2zEqteqomXR7sRIV
BDhsM+c06u6XvtilNh+QQ/YgAdFeT/Lo5ij6RYcHqX6oYZAFkg2MP73r3S/R0+hV
C1qjeOvE18O2uCPPzcJxrYwWwPY2el+efCeVo5wQemektLPsks+G230ryet/Jcrq
hXFvRTe/o9Gy/A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:44 2026 by rpki-client