Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: fjbt6kDqMJmVq1GSO1RPB2E6OkKz+bKLOMLyReB1Zek=
Subject key identifier: AE:26:52:42:F5:A5:F5:46:74:B1:A7:17:07:EC:77:BD:F1:F7:B7:5D
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 019D25837B086695A8C551F48E0CB0F5D923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 15BB
Signing time: Wed 25 Mar 2026 15:01:06 +0000
Manifest this update: Wed 25 Mar 2026 15:01:06 +0000
Manifest next update: Thu 26 Mar 2026 15:01:06 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: RKp43kUW1IbLo0RMz9Pa8L7HK7REXI/9y4A8FFiVEO8=)
2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:7b:08:66:95:a8:c5:51:f4:8e:0c:b0:f5:d9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: Mar 25 15:01:06 2026 GMT
Not After : Mar 26 15:01:06 2026 GMT
Subject: CN=ae265242f5a5f54674b1a71707ec77bdf1f7b75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:69:be:95:1b:4c:a9:f9:0c:c5:4a:c0:ef:
73:6f:16:2c:04:ee:a9:cc:21:65:92:1a:5f:b7:23:
a7:f7:44:2d:27:b1:53:b6:7a:a0:bd:fc:5d:b6:31:
c6:fd:26:22:e7:d5:5d:72:d2:b4:26:73:fc:9f:68:
9d:4d:d7:76:b6:29:67:36:52:77:d3:de:86:6b:a3:
e3:35:3e:fb:e2:4d:7f:61:61:43:9e:47:2c:76:7b:
c3:9c:91:77:70:a3:3d:aa:01:c0:27:66:ea:8a:94:
2d:c2:0f:73:57:12:4f:f6:af:a9:e5:d6:f0:e6:e0:
6d:39:89:8a:2d:3a:fe:2d:ce:1d:ad:38:49:19:07:
fc:4b:4c:32:78:65:e4:10:0b:28:7c:cb:a7:94:df:
8f:3c:03:6a:3f:53:ad:6f:8b:a5:31:de:e2:49:8b:
2c:11:84:73:6d:af:a0:23:5b:7c:f8:fc:ac:3d:6c:
ec:14:06:e4:5f:ce:0b:e9:41:b7:57:7b:2c:db:6b:
20:7d:66:54:15:1a:04:e3:67:47:0a:46:8f:84:17:
1c:dd:be:7e:c0:16:71:f9:3c:72:ac:92:65:be:4b:
72:42:0a:08:d5:9a:6f:09:27:33:be:39:57:a1:f1:
62:d1:01:26:f2:7b:94:e7:d7:34:35:25:66:03:0a:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:26:52:42:F5:A5:F5:46:74:B1:A7:17:07:EC:77:BD:F1:F7:B7:5D
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:87:10:fe:cd:75:0d:93:e6:e7:39:53:e6:b4:8b:63:b8:c7:
0f:89:c7:a1:c5:fa:52:2e:42:f1:87:b1:09:20:dd:29:1a:85:
72:f8:9c:99:9d:74:be:88:36:db:a8:9e:d5:20:3d:2f:2b:ff:
aa:f4:32:67:df:b1:9c:27:56:f1:50:6e:30:c7:4f:fb:b8:64:
a1:b0:72:a8:c7:b6:ad:1e:e4:02:43:98:36:40:a6:96:28:4d:
89:40:63:51:18:da:b7:b5:1b:bc:ef:c3:2c:ab:ea:21:61:f4:
ad:3a:18:b8:00:d2:f6:41:c2:ea:cb:dd:23:40:93:b3:7d:b7:
6a:2b:5c:fd:0c:79:23:07:e7:28:a5:bc:cd:e4:87:db:82:3a:
90:7d:33:d4:68:4d:f7:61:28:5c:ae:9b:a7:b6:c0:30:e7:85:
4f:77:86:88:a5:7d:37:c9:07:f7:e4:3d:03:c8:d1:cc:38:ed:
6d:6f:e3:6d:fe:17:d0:35:f3:31:75:7e:83:69:7d:65:07:8a:
b7:13:9b:9f:82:6d:e3:1e:bb:68:a4:7a:5a:57:36:e4:f7:c3:
1a:08:c3:a7:8b:da:a1:9a:7e:d5:9b:31:4d:33:c6:e7:f5:63:
14:eb:48:49:00:37:bb:6b:2f:4c:a7:f5:83:52:16:f5:ae:ce:
a0:1b:e4:45
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0lg3sIZpWoxVH0jgyw9dkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWE3ZTQ3YjkxYTYyOTVjYmY3MThjMWYyZGRiMGEyNWMy
NzZlYjIwHhcNMjYwMzI1MTUwMTA2WhcNMjYwMzI2MTUwMTA2WjAzMTEwLwYDVQQD
EyhhZTI2NTI0MmY1YTVmNTQ2NzRiMWE3MTcwN2VjNzdiZGYxZjdiNzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncRpvpUbTKn5DMVKwO9zbxYsBO6p
zCFlkhpftyOn90QtJ7FTtnqgvfxdtjHG/SYi59VdctK0JnP8n2idTdd2tilnNlJ3
096Ga6PjNT774k1/YWFDnkcsdnvDnJF3cKM9qgHAJ2bqipQtwg9zVxJP9q+p5dbw
5uBtOYmKLTr+Lc4drThJGQf8S0wyeGXkEAsofMunlN+PPANqP1Otb4ulMd7iSYss
EYRzba+gI1t8+PysPWzsFAbkX84L6UG3V3ss22sgfWZUFRoE42dHCkaPhBcc3b5+
wBZx+TxyrJJlvktyQgoI1ZpvCSczvjlXofFi0QEm8nuU59c0NSVmAwrKOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK4mUkL1pfVGdLGnFwfsd73x97ddMB8GA1UdIwQY
MBaAFPiqfke5GmKVy/cYwfLdsKJcJ26yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LcC1SN2thWXBYTDl4akI4dDJ3b2x3bmJySS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZGU0OTRmLTUxMjktNDlmOS05Mjll
LTk3MGM4M2U5NmNiYy8xLzEtS3AtUjdrYVlwWEw5eGpCOHQyd29sd25ickkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2RlNDk0Zi01MTI5LTQ5ZjktOTI5ZS05NzBjODNlOTZj
YmMvMS8xLUtwLVI3a2FZcFhMOXhqQjh0MndvbHduYnJJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALocQ
/s11DZPm5zlT5rSLY7jHD4nHocX6Ui5C8YexCSDdKRqFcvicmZ10vog226ie1SA9
Lyv/qvQyZ9+xnCdW8VBuMMdP+7hkobByqMe2rR7kAkOYNkCmlihNiUBjURjat7Ub
vO/DLKvqIWH0rToYuADS9kHC6svdI0CTs323aitc/Qx5IwfnKKW8zeSH24I6kH0z
1GhN92EoXK6bp7bAMOeFT3eGiKV9N8kH9+Q9A8jRzDjtbW/jbf4X0DXzMXV+g2l9
ZQeKtxObn4Jt4x67aKR6Wlc25PfDGgjDp4vaoZp+1ZsxTTPG5/VjFOtISQA3u2sv
TKf1g1IW9a7OoBvkRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:27 2026 by rpki-client