Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier: wRmv8NW9AETm95V7SdJdz1BShMsCJXczFngSSzzrpUQ=
Subject key identifier: 55:28:5A:BD:04:F8:D1:4A:EA:2D:68:68:77:62:7F:CF:46:95:A5:71
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 01A08BD66054225EF226F91308822261E1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number: 0F4D
Signing time: Thu 10 Sep 2026 15:01:17 +0000
Manifest this update: Thu 10 Sep 2026 15:01:17 +0000
Manifest next update: Fri 11 Sep 2026 15:01:17 +0000
Files and hashes: 1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: /r44R4EPf+NWIGVVPgKW8gaJS9oRDZ7xEmfUAQWgsoY=)
2: OESlpPK-jzIeY_kWKji03hACpHA.asa (hash: NcdspYFEkIzBfyRyPM+LLSVIvHJYNJkjtuc1feLbI+0=)
3: r3HWDDRgTxZjt0f8A4zqbjMarks.roa (hash: +uYv6GLbwnY+R5JBDKQIFIfeDHhF4FB60kCchPztyPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:60:54:22:5e:f2:26:f9:13:08:82:22:61:e1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Sep 10 15:01:17 2026 GMT
Not After : Sep 11 15:01:17 2026 GMT
Subject: CN=55285abd04f8d14aea2d686877627fcf4695a571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:93:13:4d:5d:94:74:63:d1:02:78:d6:67:
b8:64:dd:6d:76:ad:0a:e9:f3:d5:9a:28:c1:54:c6:
7e:c0:45:b3:56:1d:9a:32:a7:49:86:c4:38:7c:8c:
41:4f:8a:ce:4c:a9:bf:b4:80:7f:9a:1a:fc:e0:5d:
d7:9b:f8:e1:b8:e2:4e:b0:b0:d8:91:6d:4c:aa:1d:
46:21:36:b7:7e:d6:dd:d5:b0:83:94:ab:bc:9d:08:
54:33:ba:a9:ba:4f:54:ab:db:af:b7:c3:7f:fe:94:
33:18:4c:fb:21:a1:bf:8d:91:f7:bf:c3:bc:e6:6e:
98:a6:8f:3f:69:e9:2e:69:00:47:87:04:75:8f:98:
18:28:27:df:b2:41:31:17:89:21:0e:be:8c:22:45:
84:53:85:62:e2:9a:c7:8f:f7:87:ce:09:c6:fc:fd:
75:56:46:20:71:4a:95:c7:b6:49:83:4a:c2:d9:2e:
b9:db:05:99:ff:dd:db:05:0d:5c:6a:bb:11:2e:dc:
6f:d2:0b:b7:e2:c2:6e:21:ce:d7:f9:5a:c7:f5:f9:
03:b8:c0:2c:8b:2e:07:b6:41:37:25:71:2b:d5:23:
fd:4f:c4:30:53:86:dd:f0:57:a3:99:c2:6f:c5:dc:
54:a8:44:7e:99:89:20:43:66:30:2a:ce:d9:ad:6e:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:5A:BD:04:F8:D1:4A:EA:2D:68:68:77:62:7F:CF:46:95:A5:71
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:18:89:e4:a3:c3:08:7c:61:26:7b:cd:22:c1:7a:cd:95:cf:
0c:b0:6f:a0:f5:60:96:cb:a2:68:66:2d:39:f2:84:29:e2:60:
df:de:04:2d:3a:51:b0:78:c3:21:12:60:bd:12:c4:71:53:d8:
b3:91:a5:69:34:fb:c1:e8:65:1d:69:2d:96:14:77:82:b6:81:
78:32:bc:9f:ed:9f:03:38:29:e5:d1:41:d0:6a:4d:7d:c1:18:
51:3d:fe:fe:9d:db:e8:04:5e:92:9f:80:27:69:b1:f9:42:98:
d9:1c:fb:18:cd:4d:74:fd:8f:07:d0:e7:47:9b:e5:99:ef:26:
f7:44:0e:fc:67:41:8b:fe:17:73:34:ba:77:81:21:d6:e1:f5:
06:72:0b:32:d2:27:43:d5:3b:d3:68:38:63:de:15:c7:d8:8f:
d4:8e:df:f2:21:a6:c1:a6:3b:cd:ff:ee:17:e1:37:d2:e1:17:
08:d5:78:00:0f:97:d8:22:5d:e9:32:86:4e:fb:d6:30:1e:bd:
26:61:75:12:80:34:9d:4f:fe:cf:04:a4:26:2d:35:77:06:3c:
ac:ba:75:96:5c:69:b6:eb:56:4c:05:70:99:f7:2f:93:25:4f:
2e:3c:6e:93:a2:5e:98:cc:02:a7:d4:04:e8:ce:15:34:1f:f1:
9c:d1:f0:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1mBUIl7yJvkTCIIiYeHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzU0MzIxYzEyNTQzNjAxNDVlYWYyNWY2OTkzOGI4ZGYz
NDdiMzEwHhcNMjYwOTEwMTUwMTE3WhcNMjYwOTExMTUwMTE3WjAzMTEwLwYDVQQD
Eyg1NTI4NWFiZDA0ZjhkMTRhZWEyZDY4Njg3NzYyN2ZjZjQ2OTVhNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uWTE01dlHRj0QJ41me4ZN1tdq0K
6fPVmijBVMZ+wEWzVh2aMqdJhsQ4fIxBT4rOTKm/tIB/mhr84F3Xm/jhuOJOsLDY
kW1Mqh1GITa3ftbd1bCDlKu8nQhUM7qpuk9Uq9uvt8N//pQzGEz7IaG/jZH3v8O8
5m6Ypo8/aekuaQBHhwR1j5gYKCffskExF4khDr6MIkWEU4Vi4prHj/eHzgnG/P11
VkYgcUqVx7ZJg0rC2S652wWZ/93bBQ1carsRLtxv0gu34sJuIc7X+VrH9fkDuMAs
iy4HtkE3JXEr1SP9T8QwU4bd8FejmcJvxdxUqER+mYkgQ2YwKs7ZrW696QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUoWr0E+NFK6i1oaHdif89GlaVxMB8GA1UdIwQY
MBaAFNU1QyHBJUNgFF6vJfaZOLjfNHsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRWREljRWxRMkFVWHE4bDlwazR1TjgwZXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kOWY5YTgtZGEwMS00ZDM1LTgyODQt
YjY0ZWI4ZDgzNjU4LzEvMVRWREljRWxRMkFVWHE4bDlwazR1TjgwZXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kOWY5YTgtZGEwMS00ZDM1LTgyODQtYjY0ZWI4ZDgzNjU4
LzEvMVRWREljRWxRMkFVWHE4bDlwazR1TjgwZXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRiJ5KPD
CHxhJnvNIsF6zZXPDLBvoPVglsuiaGYtOfKEKeJg394ELTpRsHjDIRJgvRLEcVPY
s5GlaTT7wehlHWktlhR3graBeDK8n+2fAzgp5dFB0GpNfcEYUT3+/p3b6ARekp+A
J2mx+UKY2Rz7GM1NdP2PB9DnR5vlme8m90QO/GdBi/4XczS6d4Eh1uH1BnILMtIn
Q9U702g4Y94Vx9iP1I7f8iGmwaY7zf/uF+E30uEXCNV4AA+X2CJd6TKGTvvWMB69
JmF1EoA0nU/+zwSkJi01dwY8rLp1llxptutWTAVwmfcvkyVPLjxuk6JemMwCp9QE
6M4VNB/xnNHwbg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:43 2026 by rpki-client