Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: b2Qe7NSHKj8syrhYsO8OrWeSVCqN04m7iTL71F7tFYQ=
Subject key identifier: 56:F1:4E:63:A0:7E:56:09:00:8D:A2:C8:04:08:8E:D4:9B:9B:F9:C3
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 01A14C4F676C3F87AC6C6A98D880BED9D822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 0A62
Signing time: Sun 18 Oct 2026 00:00:34 +0000
Manifest this update: Sun 18 Oct 2026 00:00:34 +0000
Manifest next update: Mon 19 Oct 2026 00:00:34 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: uCM7tvQJHU6Pj0IfxfKttxMxX3OmF9gzel/imVtaLzg=)
2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:4f:67:6c:3f:87:ac:6c:6a:98:d8:80:be:d9:d8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Oct 18 00:00:34 2026 GMT
Not After : Oct 19 00:00:34 2026 GMT
Subject: CN=56f14e63a07e5609008da2c804088ed49b9bf9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:98:19:9e:52:7f:3b:d2:49:0b:e4:32:88:
ca:4a:0c:db:58:1c:1c:fb:c0:d8:c0:40:37:d7:6b:
8c:6f:7d:d5:cb:3e:e8:8e:9b:b4:9d:c8:34:80:c6:
ae:d0:6d:32:6f:46:1c:94:0a:74:8f:de:22:df:cf:
ef:11:42:2f:1b:27:cd:51:0a:e9:e9:23:9a:92:3e:
4f:06:4b:42:c5:d6:57:b6:4d:a4:57:94:15:ef:de:
a4:64:21:83:f9:be:58:2b:b5:de:b4:6f:15:01:08:
7c:65:24:d1:f9:e0:ec:94:ab:9b:20:70:55:4c:06:
64:7f:33:5c:87:21:47:ef:d7:fd:e1:bf:97:81:06:
cb:c8:f3:0f:4e:0f:95:f0:5b:73:a8:20:2d:bf:04:
6b:85:90:f6:f3:cf:32:7e:aa:4d:28:97:65:81:ab:
f3:20:0b:f8:05:3c:27:00:6a:3a:4e:d2:1d:6d:9b:
5c:54:5c:04:59:84:b4:61:64:f7:b2:c0:1d:e8:1f:
0e:9a:af:61:4a:ce:89:4f:0e:56:4d:b7:3d:8c:eb:
4b:f3:68:0f:c6:f2:b1:76:aa:ee:49:ee:a2:d7:76:
e2:38:01:2f:64:02:7d:4b:8f:b8:13:80:57:e8:af:
ec:2b:bd:4d:81:bb:55:65:bc:d7:c5:5c:66:fd:50:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:4E:63:A0:7E:56:09:00:8D:A2:C8:04:08:8E:D4:9B:9B:F9:C3
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:23:8b:23:10:a0:7b:44:9c:ee:26:ad:ed:c0:48:31:37:b0:
20:83:46:a5:48:13:de:71:66:f0:d9:db:2f:36:5f:c6:c7:06:
0f:20:b8:3d:ee:cd:72:23:27:c9:5a:81:d7:c1:02:d2:9a:d5:
4c:64:5c:5a:d2:cb:2a:12:92:b3:c5:d9:6e:69:1f:f9:60:1e:
a8:de:6c:66:56:67:6f:42:47:94:49:9b:e7:cf:53:35:35:1f:
ef:3d:21:86:e6:26:1e:34:e9:a8:7e:1a:03:01:8c:75:db:7e:
bf:b7:0a:b8:5c:ea:f9:3f:8d:78:82:8a:81:cc:74:8b:43:18:
53:f6:ae:0a:8e:25:49:37:43:16:70:ac:27:b3:83:cf:b8:de:
9b:70:3a:c9:b5:8a:19:cd:13:a1:a4:0f:61:fa:ec:53:50:5a:
0a:e1:65:31:4c:59:5c:45:76:e0:69:84:07:93:99:99:cf:ee:
00:39:88:4c:0f:ce:3c:27:db:45:b9:d0:64:0a:23:9b:bc:d1:
a2:f0:b2:5d:53:5d:10:ee:c1:c1:92:75:d9:16:7f:66:15:ca:
19:62:ef:ec:9d:26:fd:ad:d4:0a:e8:37:9e:34:71:37:41:4d:
4b:29:30:8b:4c:e6:ce:70:52:5d:2c:7a:eb:72:06:2a:e2:bd:
91:9a:c2:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMT2dsP4esbGqY2IC+2dgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWQ0Yjk0MWUwNjRiNDZiYzI5YWY2NDViYzc1NDcwNGQz
YTk0YzEwHhcNMjYxMDE4MDAwMDM0WhcNMjYxMDE5MDAwMDM0WjAzMTEwLwYDVQQD
Eyg1NmYxNGU2M2EwN2U1NjA5MDA4ZGEyYzgwNDA4OGVkNDliOWJmOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGaYGZ5SfzvSSQvkMojKSgzbWBwc
+8DYwEA312uMb33Vyz7ojpu0ncg0gMau0G0yb0YclAp0j94i38/vEUIvGyfNUQrp
6SOakj5PBktCxdZXtk2kV5QV796kZCGD+b5YK7XetG8VAQh8ZSTR+eDslKubIHBV
TAZkfzNchyFH79f94b+XgQbLyPMPTg+V8FtzqCAtvwRrhZD2888yfqpNKJdlgavz
IAv4BTwnAGo6TtIdbZtcVFwEWYS0YWT3ssAd6B8Omq9hSs6JTw5WTbc9jOtL82gP
xvKxdqruSe6i13biOAEvZAJ9S4+4E4BX6K/sK71NgbtVZbzXxVxm/VBxxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbxTmOgflYJAI2iyAQIjtSbm/nDMB8GA1UdIwQY
MBaAFNMdS5QeBktGvCmvZFvHVHBNOpTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2Njkt
NzA1NDQ5YmRlZWI2LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2NjktNzA1NDQ5YmRlZWI2
LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiOLIxCg
e0Sc7iat7cBIMTewIINGpUgT3nFm8NnbLzZfxscGDyC4Pe7NciMnyVqB18EC0prV
TGRcWtLLKhKSs8XZbmkf+WAeqN5sZlZnb0JHlEmb589TNTUf7z0hhuYmHjTpqH4a
AwGMddt+v7cKuFzq+T+NeIKKgcx0i0MYU/auCo4lSTdDFnCsJ7ODz7jem3A6ybWK
Gc0ToaQPYfrsU1BaCuFlMUxZXEV24GmEB5OZmc/uADmITA/OPCfbRbnQZAojm7zR
ovCyXVNdEO7BwZJ12RZ/ZhXKGWLv7J0m/a3UCug3njRxN0FNSykwi0zmznBSXSx6
63IGKuK9kZrC+Q==
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:27:36 2026 by rpki-client