Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: c0GflnW2s03ZU1FfH48f65ye1tYutSmixrKRjBYWUJM=
Subject key identifier: CA:1B:54:B1:42:F7:44:63:D3:95:8E:26:5D:CE:B7:C8:CA:2B:24:11
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 01A093C67192A243C60C57B8F937E300FE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 1A4D
Signing time: Sat 12 Sep 2026 04:00:50 +0000
Manifest this update: Sat 12 Sep 2026 04:00:50 +0000
Manifest next update: Sun 13 Sep 2026 04:00:50 +0000
Files and hashes: 1: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: +w7QM4ekrHOnkVOSbSuUrhE7lBtLctDrHZqwR+M6q80=)
2: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (hash: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:93:c6:71:92:a2:43:c6:0c:57:b8:f9:37:e3:00:fe:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Sep 12 04:00:50 2026 GMT
Not After : Sep 13 04:00:50 2026 GMT
Subject: CN=ca1b54b142f74463d3958e265dceb7c8ca2b2411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:33:4f:9f:88:01:36:85:8c:96:51:a1:b7:
98:b0:34:f7:a5:83:f6:e7:88:6b:48:60:0f:77:8e:
e7:93:24:55:4b:e8:4b:7c:d1:d9:62:11:1e:60:4b:
ea:c3:a6:a4:76:43:1f:a6:8f:e3:36:71:da:45:fb:
57:7a:44:3c:c9:fa:90:95:65:d5:75:19:4c:08:48:
03:af:6c:b7:c2:89:11:20:12:5a:d9:90:d4:07:d4:
f8:07:4e:7e:e6:82:67:2f:8b:fb:43:e0:9e:a0:1f:
9b:17:db:bf:00:26:f0:a1:df:48:10:8e:fb:ed:47:
73:91:aa:0d:43:c9:c9:7f:b4:26:4e:b0:3d:1c:6d:
f1:31:57:4e:e3:e7:97:e2:ce:3f:e8:68:db:dd:b4:
44:8f:f8:b2:bf:8e:35:27:86:1a:71:bf:bc:75:bd:
28:37:51:f5:b0:c8:3f:e5:dd:85:91:2a:0b:bc:fa:
b3:d6:f1:f1:4d:ac:7e:93:33:70:da:f4:cc:14:27:
0e:10:83:c4:5a:7d:42:2f:a8:6a:c7:f4:47:56:88:
2c:54:69:59:ec:3d:2a:14:30:16:5b:62:9b:0a:78:
43:57:b8:88:44:cb:6a:98:cd:49:37:41:7e:99:02:
2c:fa:9b:ca:72:d1:7a:78:97:f0:a1:f5:91:2c:57:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1B:54:B1:42:F7:44:63:D3:95:8E:26:5D:CE:B7:C8:CA:2B:24:11
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:81:a2:e2:d8:e0:6a:e4:9c:ad:48:d1:a8:bf:c8:6f:5d:3b:
55:35:a0:6d:fa:2e:0f:fa:3b:61:f6:1c:7c:60:25:a1:e7:d1:
2d:32:47:1e:7d:80:d1:28:20:64:a3:16:2f:e4:1d:aa:4c:5d:
51:d8:a3:29:81:73:6a:28:8d:9c:5f:24:aa:42:2d:78:6f:a5:
35:f0:46:ae:49:00:cc:fd:9c:f1:03:28:b9:11:bd:3e:c4:cd:
97:a4:69:5b:e1:67:37:c2:be:1d:a0:4b:d2:50:fe:56:13:bd:
08:1c:52:77:bd:52:b9:56:4d:ef:93:85:e3:6e:1e:ad:6c:b0:
47:e4:94:66:33:53:fb:ba:6b:44:6c:2f:43:73:05:2c:5b:e1:
a5:0a:32:cb:9b:ba:ed:fc:ee:e1:fc:5a:48:44:eb:4b:af:de:
75:3f:80:ad:90:bf:43:5d:f3:f0:f9:f0:35:77:00:ba:4e:34:
d7:83:a5:19:1f:6f:3b:1c:3b:69:ec:47:0c:90:dd:c2:dd:1d:
26:02:a0:1e:71:63:05:d1:cf:cf:95:47:2e:f4:5e:6a:ae:53:
63:c8:06:4e:f4:b5:12:a5:89:6d:41:38:1e:17:7c:1a:e5:7c:
71:69:0e:c6:fc:dd:01:af:6e:a3:08:f3:7f:60:6a:4b:8e:8f:
c7:51:2e:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCTxnGSokPGDFe4+TfjAP6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3
ODhlNmUwHhcNMjYwOTEyMDQwMDUwWhcNMjYwOTEzMDQwMDUwWjAzMTEwLwYDVQQD
EyhjYTFiNTRiMTQyZjc0NDYzZDM5NThlMjY1ZGNlYjdjOGNhMmIyNDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmMzT5+IATaFjJZRobeYsDT3pYP2
54hrSGAPd47nkyRVS+hLfNHZYhEeYEvqw6akdkMfpo/jNnHaRftXekQ8yfqQlWXV
dRlMCEgDr2y3wokRIBJa2ZDUB9T4B05+5oJnL4v7Q+CeoB+bF9u/ACbwod9IEI77
7UdzkaoNQ8nJf7QmTrA9HG3xMVdO4+eX4s4/6Gjb3bREj/iyv441J4Yacb+8db0o
N1H1sMg/5d2FkSoLvPqz1vHxTax+kzNw2vTMFCcOEIPEWn1CL6hqx/RHVogsVGlZ
7D0qFDAWW2KbCnhDV7iIRMtqmM1JN0F+mQIs+pvKctF6eJfwofWRLFc1UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMobVLFC90Rj05WOJl3Ot8jKKyQRMB8GA1UdIwQY
MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt
YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj
LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvoGi4tjg
auScrUjRqL/Ib107VTWgbfouD/o7YfYcfGAloefRLTJHHn2A0SggZKMWL+Qdqkxd
UdijKYFzaiiNnF8kqkIteG+lNfBGrkkAzP2c8QMouRG9PsTNl6RpW+FnN8K+HaBL
0lD+VhO9CBxSd71SuVZN75OF424erWywR+SUZjNT+7prRGwvQ3MFLFvhpQoyy5u6
7fzu4fxaSETrS6/edT+ArZC/Q13z8PnwNXcAuk4014OlGR9vOxw7aexHDJDdwt0d
JgKgHnFjBdHPz5VHLvReaq5TY8gGTvS1EqWJbUE4Hhd8GuV8cWkOxvzdAa9uowjz
f2BqS46Px1EuPA==
-----END CERTIFICATE-----
Generated at Sat Sep 12 09:42:25 2026 by rpki-client