Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: 4hu0YOsQaTzPDF0ktteRw+eEnQpAwtlFiGV8G5iuIKQ=
Subject key identifier: 43:26:B2:B5:88:F8:91:A0:7D:58:85:60:E7:25:CF:A8:A8:F0:67:C5
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019D27E0664E17363A0E2F833CA8A37CA4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 1027
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: +GFL7CXu7AR7OrHdiP4+KBtZvsBc3qD2wt64ByeGvLQ=)
2: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (hash: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k=)
3: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (hash: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:66:4e:17:36:3a:0e:2f:83:3c:a8:a3:7c:a4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=4326b2b588f891a07d588560e725cfa8a8f067c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:18:1f:5e:7c:f1:27:f2:96:cf:9d:26:b7:
96:d1:f0:5f:03:0a:1f:50:a3:f7:4b:7e:1f:9b:b3:
b2:0c:6b:5a:b7:38:fa:c2:0d:28:8e:4e:87:4a:65:
f1:8f:87:04:97:62:d1:2b:29:ba:15:a9:18:e0:22:
4c:f2:6f:c1:01:33:be:78:0c:97:7d:e0:9b:5f:00:
3a:90:2d:2f:c9:ee:fa:7c:95:f7:ac:8a:03:83:2b:
2d:af:97:01:40:29:cf:d9:38:6e:ee:db:e1:8a:81:
84:30:f8:cb:b6:8d:76:cc:18:8d:8d:f5:16:54:53:
8c:e4:5a:44:2b:94:7e:2f:e2:cc:89:9e:ec:a8:2c:
85:05:b6:b6:a6:16:c8:aa:06:01:d5:29:43:46:1c:
9f:0f:78:e6:c4:18:ff:20:47:27:44:bd:66:df:ee:
e8:8a:1f:af:f3:3b:fd:85:39:62:09:7c:b0:45:37:
5b:64:49:78:b0:51:10:31:ee:a6:3e:50:34:17:6e:
65:4b:63:3d:7b:a7:68:23:ba:26:8a:9c:84:19:ef:
97:6c:e2:05:9b:0e:c5:b7:f1:50:fc:c9:54:d7:4b:
68:04:f0:ab:8e:f5:91:da:12:06:80:e8:a0:f4:09:
62:77:cd:2f:27:42:08:66:37:90:e4:8f:f0:1a:07:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:B2:B5:88:F8:91:A0:7D:58:85:60:E7:25:CF:A8:A8:F0:67:C5
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a5:5b:1b:76:e5:f6:cc:f9:f0:a2:6c:48:37:18:06:8a:3c:
21:d2:83:5b:1b:45:66:8b:03:32:90:02:05:8d:52:c3:99:62:
a1:e7:42:23:28:6f:cb:ab:41:ba:64:d1:38:0c:07:90:b7:1b:
b8:fe:f1:b2:d0:fa:2a:0f:26:36:3c:15:21:5b:98:32:4f:2f:
86:70:ae:e8:c3:d7:67:57:08:d4:7c:5c:c3:d0:49:70:9d:7a:
6e:00:6e:56:af:28:37:6b:19:7d:72:56:36:6b:9e:28:49:40:
cc:f5:12:55:bb:26:c0:f6:3f:88:1d:10:34:55:15:38:d0:03:
c5:ab:51:99:a7:74:f5:d5:ad:88:b7:71:30:73:7f:96:a7:1c:
1d:ce:ae:54:83:b5:45:50:dd:ef:14:9d:91:3a:1c:e7:3a:09:
47:28:f4:85:a0:11:8b:43:6a:3f:11:0c:11:9e:7a:0b:94:44:
0c:a5:53:fd:f9:c0:74:cf:2a:de:93:6c:21:6c:56:48:0f:e8:
68:9e:e7:41:e0:fd:a5:85:51:5b:9a:04:9a:af:2d:19:82:3d:
36:08:6f:d9:4a:ae:df:ae:1a:4c:b9:51:c3:16:a8:46:77:f9:
42:14:80:67:f0:3c:49:28:0b:b7:5c:5f:1a:9d:a6:4e:e2:4b:
09:42:11:e4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0n4GZOFzY6Di+DPKijfKT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTMxZDJlZWViNjdhOTM3ZTJlODdkNzZhZDlmOWQxN2Nk
YTk3ZjAwHhcNMjYwMzI2MDIwMTUwWhcNMjYwMzI3MDIwMTUwWjAzMTEwLwYDVQQD
Eyg0MzI2YjJiNTg4Zjg5MWEwN2Q1ODg1NjBlNzI1Y2ZhOGE4ZjA2N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GsYH1588Sfyls+dJreW0fBfAwof
UKP3S34fm7OyDGtatzj6wg0ojk6HSmXxj4cEl2LRKym6FakY4CJM8m/BATO+eAyX
feCbXwA6kC0vye76fJX3rIoDgystr5cBQCnP2Thu7tvhioGEMPjLto12zBiNjfUW
VFOM5FpEK5R+L+LMiZ7sqCyFBba2phbIqgYB1SlDRhyfD3jmxBj/IEcnRL1m3+7o
ih+v8zv9hTliCXywRTdbZEl4sFEQMe6mPlA0F25lS2M9e6doI7omipyEGe+XbOIF
mw7Ft/FQ/MlU10toBPCrjvWR2hIGgOig9Alid80vJ0IIZjeQ5I/wGgfJJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEMmsrWI+JGgfViFYOclz6io8GfFMB8GA1UdIwQY
MBaAFPijHS7utnqTfi6H12rZ+dF82pfwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LTWRMdTYyZXBOLUxvZlhhdG41MFh6YWxfQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2
LTU5NWYyMTAwMTY2Yi8xLzEtS01kTHU2MmVwTi1Mb2ZYYXRuNTBYemFsX0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiLzg4NjY0Ni1mZmFhLTQwMGUtOGRmNi01OTVmMjEwMDE2
NmIvMS8xLUtNZEx1NjJlcE4tTG9mWGF0bjUwWHphbF9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtaVb
G3bl9sz58KJsSDcYBoo8IdKDWxtFZosDMpACBY1Sw5lioedCIyhvy6tBumTROAwH
kLcbuP7xstD6Kg8mNjwVIVuYMk8vhnCu6MPXZ1cI1Hxcw9BJcJ16bgBuVq8oN2sZ
fXJWNmueKElAzPUSVbsmwPY/iB0QNFUVONADxatRmad09dWtiLdxMHN/lqccHc6u
VIO1RVDd7xSdkToc5zoJRyj0haARi0NqPxEMEZ56C5REDKVT/fnAdM8q3pNsIWxW
SA/oaJ7nQeD9pYVRW5oEmq8tGYI9Nghv2Uqu364aTLlRwxaoRnf5QhSAZ/A8SSgL
t1xfGp2mTuJLCUIR5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:49 2026 by rpki-client