Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: 2vj6iQ+RdB5RGFyCqzLGkqtPYtnLELxTyU21IXZsrjc=
Subject key identifier: B7:09:03:27:78:FD:1D:DD:12:61:BF:D2:A7:86:E5:86:F0:75:3D:87
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 01A13FA7A4256D79744D49FE36283549967D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0FED
Signing time: Thu 15 Oct 2026 13:01:53 +0000
Manifest this update: Thu 15 Oct 2026 13:01:53 +0000
Manifest next update: Fri 16 Oct 2026 13:01:53 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: wPNT3Q8j0vC3djQzB7u5nG+zJKJjaKkbIC9MM+vqsK4=)
2: ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa (hash: rTBvSqvCO1yVewsD3TnK3oF62RT8jXzzKUsjw4v3zO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:a4:25:6d:79:74:4d:49:fe:36:28:35:49:96:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Oct 15 13:01:53 2026 GMT
Not After : Oct 16 13:01:53 2026 GMT
Subject: CN=b709032778fd1ddd1261bfd2a786e586f0753d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:db:40:9f:f9:43:31:f4:c3:a7:eb:7d:2a:
2e:f5:2e:2d:75:b9:7f:e7:7e:18:b7:ea:cb:a1:d0:
cd:19:25:fa:ad:ea:59:99:20:1a:86:ae:44:74:89:
34:06:08:25:c3:be:8e:1e:e1:c7:86:d2:cc:ee:c1:
6d:b3:f1:bf:30:c4:f2:bc:39:1e:45:2f:a6:74:5a:
ed:76:27:5a:d6:1c:53:fb:b2:ce:d8:02:62:46:e5:
e1:92:c5:99:6a:d7:ac:b5:89:b6:89:dc:5a:c0:57:
b4:39:c5:96:6c:9f:b3:a6:21:85:ad:65:e6:70:63:
e6:1d:83:dc:14:01:07:12:e1:73:51:40:b3:f7:f3:
d6:4f:11:a0:27:63:c0:b6:80:9e:bb:a5:9e:d2:db:
49:b8:e7:22:89:e4:87:32:a5:e7:18:d1:09:98:c9:
99:8e:84:3e:71:81:d5:86:01:91:7b:b8:4a:70:bb:
d0:fa:5a:36:3f:cb:2f:88:f0:be:5f:dc:d1:78:bc:
d9:b1:76:1b:5d:6d:84:1f:fa:b6:a8:a3:a0:93:a2:
2f:a8:c8:d4:98:ac:97:49:7a:fa:70:14:71:81:bf:
6c:65:30:1a:a3:a8:54:bd:c6:b2:67:67:88:45:d5:
7b:83:10:f4:ad:1e:d6:3a:f6:fd:07:e3:a9:cc:31:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:09:03:27:78:FD:1D:DD:12:61:BF:D2:A7:86:E5:86:F0:75:3D:87
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9a:73:62:e4:e0:bd:a7:9e:f1:3b:77:f7:50:bb:2d:e6:05:
75:c9:5c:12:3d:84:6c:72:78:3d:ff:80:a9:e6:57:77:0f:0a:
87:ce:6e:c4:e5:18:f7:8e:5d:27:fe:39:54:f1:8b:5e:97:73:
fc:2d:ff:fb:df:4d:d2:b7:cb:19:be:2d:a8:f6:a5:1d:20:19:
43:48:b6:85:47:2f:fd:22:b1:6e:56:ec:b5:37:12:95:52:24:
4e:f3:70:4e:f4:62:0a:a3:9d:8e:c0:8e:0b:7a:a2:8f:cd:7c:
f8:0b:e3:04:a9:b8:24:f4:ea:a0:0a:57:76:3d:f2:65:69:94:
f8:bc:e6:b6:cc:70:ef:b0:47:14:a7:ba:e2:0b:80:82:fb:4a:
cf:91:61:c2:15:22:54:25:51:19:f7:78:19:0b:25:0d:19:58:
27:59:5d:c4:7d:13:92:5c:f0:a2:df:75:2a:9d:29:62:4b:f1:
aa:c5:e3:d3:bc:a7:2b:e1:25:db:26:aa:40:b9:56:aa:ea:ab:
49:15:fe:08:45:3f:de:51:c9:9b:dc:d4:d3:36:5c:a0:95:d9:
5a:e8:d5:17:cd:34:fa:9b:bc:74:5b:aa:ca:da:1a:0d:35:24:
f4:44:13:7e:c6:e1:1f:b9:52:df:57:1c:48:b7:b7:dc:75:ea:
08:ef:30:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p6QlbXl0TUn+Nig1SZZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzBkNjk0ZDU5ZDdkMzZiYTQyMWEzMDUwZjRlYzdkZDM3
ODFlZmQwHhcNMjYxMDE1MTMwMTUzWhcNMjYxMDE2MTMwMTUzWjAzMTEwLwYDVQQD
EyhiNzA5MDMyNzc4ZmQxZGRkMTI2MWJmZDJhNzg2ZTU4NmYwNzUzZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXzbQJ/5QzH0w6frfSou9S4tdbl/
534Yt+rLodDNGSX6repZmSAahq5EdIk0Bgglw76OHuHHhtLM7sFts/G/MMTyvDke
RS+mdFrtdida1hxT+7LO2AJiRuXhksWZatestYm2idxawFe0OcWWbJ+zpiGFrWXm
cGPmHYPcFAEHEuFzUUCz9/PWTxGgJ2PAtoCeu6We0ttJuOciieSHMqXnGNEJmMmZ
joQ+cYHVhgGRe7hKcLvQ+lo2P8sviPC+X9zReLzZsXYbXW2EH/q2qKOgk6IvqMjU
mKyXSXr6cBRxgb9sZTAao6hUvcayZ2eIRdV7gxD0rR7WOvb9B+OpzDFV9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcJAyd4/R3dEmG/0qeG5YbwdT2HMB8GA1UdIwQY
MBaAFNTA1pTVnX02ukIaMFD07H3TeB79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgt
YTc5NTEwZTYxM2U4LzEvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgtYTc5NTEwZTYxM2U4
LzEvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcppzYuTg
vaee8Tt391C7LeYFdclcEj2EbHJ4Pf+AqeZXdw8Kh85uxOUY945dJ/45VPGLXpdz
/C3/+99N0rfLGb4tqPalHSAZQ0i2hUcv/SKxblbstTcSlVIkTvNwTvRiCqOdjsCO
C3qij818+AvjBKm4JPTqoApXdj3yZWmU+Lzmtsxw77BHFKe64guAgvtKz5FhwhUi
VCVRGfd4GQslDRlYJ1ldxH0Tklzwot91Kp0pYkvxqsXj07ynK+El2yaqQLlWquqr
SRX+CEU/3lHJm9zU0zZcoJXZWujVF800+pu8dFuqytoaDTUk9EQTfsbhH7lS31cc
SLe33HXqCO8wmw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:35 2026 by rpki-client