Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: bGyxYLAehB5luZro5Bf7jlqPIjJQDPp97s4LHKMoQ9A=
Subject key identifier: 97:D6:96:7C:BB:15:88:10:B5:72:EE:67:66:39:47:3C:99:34:EE:79
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 01A001DD1993BE4FB25F2FFAFDC680025F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:01:02 +0000
Manifest this update: Fri 14 Aug 2026 20:01:02 +0000
Manifest next update: Sat 15 Aug 2026 20:01:02 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: y4GP1cAcH/NhwcQbYlLpKxY7V3YIiRuNuxqcvrasPac=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:19:93:be:4f:b2:5f:2f:fa:fd:c6:80:02:5f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Aug 14 20:01:02 2026 GMT
Not After : Aug 15 20:01:02 2026 GMT
Subject: CN=97d6967cbb158810b572ee676639473c9934ee79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:ce:48:d9:97:70:50:c8:95:fb:5a:be:e3:
42:10:61:25:24:36:af:83:d4:ad:ab:e5:97:f3:02:
04:39:35:5f:4d:aa:34:0a:1c:b1:be:07:97:aa:b4:
5e:44:29:76:b9:c9:fe:9d:5e:55:c8:a0:76:48:f6:
69:7d:0b:4c:bc:86:6f:52:54:5d:ef:bd:92:0e:02:
0f:88:94:ea:f6:4f:d2:43:33:ac:55:35:83:9a:44:
96:72:49:e7:93:95:2d:15:45:82:64:0f:4a:f6:cb:
78:21:fc:f5:50:e7:f3:9c:60:05:93:10:2a:f3:fa:
47:c5:18:90:a8:fc:ab:62:2f:8c:57:90:82:10:be:
91:c3:df:37:a2:c3:19:d9:7c:cc:a5:e3:4d:b5:df:
98:4a:d5:21:83:ec:6d:43:a7:35:65:dc:23:68:65:
58:96:1e:1e:61:05:88:c1:ea:39:07:41:19:c5:a8:
d3:b4:14:20:cd:30:64:e2:01:d2:17:c2:13:3d:3f:
02:50:e4:e5:24:79:bb:c6:08:9a:5d:ee:41:7c:4c:
e7:83:d1:1c:c6:a3:3d:58:8e:fb:48:d9:5a:a0:b8:
38:3c:e4:28:b1:ec:48:ee:02:f0:05:0e:f2:f2:fb:
77:58:a3:21:14:f8:7d:87:85:6f:a0:b6:75:24:ef:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:96:7C:BB:15:88:10:B5:72:EE:67:66:39:47:3C:99:34:EE:79
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2b:91:1c:ec:e6:9c:30:5c:5d:9c:3d:f6:bb:12:82:d3:66:
2c:96:c5:75:54:24:e3:35:c6:31:b1:23:73:e8:d9:c4:c9:d0:
e9:84:85:88:68:59:fa:0d:92:76:bd:db:2f:ee:2b:ae:16:0c:
b3:3f:d0:02:10:ad:cd:7f:b2:65:d3:f4:92:28:d2:05:06:ad:
48:a1:ea:ab:d1:80:58:23:cf:1d:84:87:6a:30:a3:47:ac:f2:
78:41:23:61:0b:ae:5f:9e:e8:69:d1:c9:c8:26:28:01:0e:c3:
ad:ff:e3:cb:90:4f:f2:95:00:5b:e8:e8:7b:51:05:64:5f:17:
06:ae:7f:88:d0:67:da:9a:91:4f:3a:dc:41:49:eb:52:f1:22:
fc:ff:44:00:b1:bd:ee:ad:a0:11:62:ec:63:15:9b:0e:bc:19:
8b:be:78:d0:3f:26:b6:02:c8:4d:84:00:ae:a2:6c:02:c0:a2:
bc:4f:8c:c2:80:04:d9:8c:71:8c:3a:dc:eb:8e:0f:66:10:2d:
2e:70:d8:72:e0:01:9a:ed:cd:f6:91:a6:a8:4b:1d:97:b2:06:
b2:9a:95:8d:90:d7:5d:a4:d8:10:d5:0a:5c:55:fc:e5:75:aa:
1b:9c:e3:d8:b5:c7:fb:14:54:7d:6f:90:6c:b2:96:34:80:08:
00:48:0f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3RmTvk+yXy/6/caAAl+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOGYxMGEyYzc5MmQwZDM2NTY3OGEzNmNhN2Y3ZjE0MDlj
YTNhZmQwHhcNMjYwODE0MjAwMTAyWhcNMjYwODE1MjAwMTAyWjAzMTEwLwYDVQQD
Eyg5N2Q2OTY3Y2JiMTU4ODEwYjU3MmVlNjc2NjM5NDczYzk5MzRlZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAPOSNmXcFDIlftavuNCEGElJDav
g9Stq+WX8wIEOTVfTao0ChyxvgeXqrReRCl2ucn+nV5VyKB2SPZpfQtMvIZvUlRd
772SDgIPiJTq9k/SQzOsVTWDmkSWcknnk5UtFUWCZA9K9st4Ifz1UOfznGAFkxAq
8/pHxRiQqPyrYi+MV5CCEL6Rw983osMZ2XzMpeNNtd+YStUhg+xtQ6c1ZdwjaGVY
lh4eYQWIweo5B0EZxajTtBQgzTBk4gHSF8ITPT8CUOTlJHm7xgiaXe5BfEzng9Ec
xqM9WI77SNlaoLg4POQosexI7gLwBQ7y8vt3WKMhFPh9h4VvoLZ1JO9OLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfWlny7FYgQtXLuZ2Y5RzyZNO55MB8GA1UdIwQY
MBaAFOOPEKLHktDTZWeKNsp/fxQJyjr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjct
ODM1M2FhNDBiYWViLzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjctODM1M2FhNDBiYWVi
LzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiuRHOzm
nDBcXZw99rsSgtNmLJbFdVQk4zXGMbEjc+jZxMnQ6YSFiGhZ+g2Sdr3bL+4rrhYM
sz/QAhCtzX+yZdP0kijSBQatSKHqq9GAWCPPHYSHajCjR6zyeEEjYQuuX57oadHJ
yCYoAQ7Drf/jy5BP8pUAW+joe1EFZF8XBq5/iNBn2pqRTzrcQUnrUvEi/P9EALG9
7q2gEWLsYxWbDrwZi7540D8mtgLITYQArqJsAsCivE+MwoAE2YxxjDrc644PZhAt
LnDYcuABmu3N9pGmqEsdl7IGspqVjZDXXaTYENUKXFX85XWqG5zj2LXH+xRUfW+Q
bLKWNIAIAEgP/w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:31 2026 by rpki-client