Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: HTLKY01poFubepPghlBU02oAh48Bs6c1mYPPQItu4UA=
Subject key identifier: 36:CB:00:C8:F7:0A:25:98:D7:5B:E6:A4:CF:5F:72:FA:2E:43:B9:54
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 019D28168F71EF29F4795A2431D213857452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 122A
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: XowN9LvY4hnlqh0QyrZKpRkf8EGlyWeUjl0ER00q7aw=)
2: aIdT9TU8Mchvi1KT8xDqqF_aYww.roa (hash: L0SKCt/IF1f3xCcEQuDLjZD6COmk+1+SlyBXGktU14Q=)
3: qfbmdAxrKJhL7MuKfw49467oMe0.roa (hash: tAJCqrPUfCnpIMZF6i2OOK4HRvotFOEnPGbHmvdQqEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8f:71:ef:29:f4:79:5a:24:31:d2:13:85:74:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=36cb00c8f70a2598d75be6a4cf5f72fa2e43b954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:83:d9:d7:4f:2c:3f:5c:c9:c1:d9:50:ec:
fa:f1:08:6f:ed:51:dc:c9:c5:b1:91:97:5a:99:3e:
e4:85:6e:c2:c0:bb:bb:80:61:86:72:8b:95:78:64:
6d:51:3b:76:12:f7:db:dc:f3:b6:6c:20:66:b5:5a:
42:cb:42:64:7f:39:a0:41:97:35:2a:1f:08:2a:2e:
16:67:8b:b6:22:e0:84:9d:2f:1c:b1:4e:4a:46:10:
dc:3e:a1:9e:97:85:4d:c4:c0:06:b0:66:49:23:e5:
e0:55:b2:c2:98:14:ac:87:1c:b0:1c:36:9f:c6:cc:
72:fe:89:80:b5:9b:7c:25:d5:eb:cc:ae:2b:64:76:
36:a3:20:55:c4:e7:e8:f1:46:3f:1d:01:b9:34:b5:
6b:cb:78:0f:47:f0:c2:86:df:83:af:81:1e:1e:a2:
a3:85:50:9f:b0:16:d5:cc:29:b4:42:b6:f0:a3:0a:
a5:28:87:18:14:ba:36:20:81:7a:fb:2c:f6:f7:d4:
8b:64:9d:08:1e:98:0c:8f:81:f9:ad:19:b1:e9:ed:
cf:64:c6:47:bf:5a:e9:08:fc:8e:ff:b9:94:5b:a1:
ea:3b:0d:7f:4f:e6:36:c1:1e:91:4c:f2:5e:ce:b3:
bb:bf:64:42:fd:5b:9c:d4:ce:50:23:5c:4d:88:a9:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:00:C8:F7:0A:25:98:D7:5B:E6:A4:CF:5F:72:FA:2E:43:B9:54
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:19:7e:da:bb:c8:33:cd:76:71:8f:8e:59:4b:79:0d:c1:1a:
38:59:8e:81:ef:a4:1c:93:08:d5:de:e8:dc:d5:31:2b:fe:6f:
ea:06:1c:a9:f9:88:fe:64:3e:05:87:83:6d:62:2b:12:aa:24:
2e:59:b1:0d:6a:ee:f9:ae:44:e0:e2:0c:0a:18:af:81:af:98:
a8:38:b7:0b:f9:66:13:73:ba:42:22:e7:9b:e3:92:17:5c:9e:
ef:e0:5a:d2:2c:3a:fb:6e:7b:71:e9:40:93:bc:d0:16:9a:eb:
d7:6b:5e:8c:4c:c4:e7:76:69:21:ea:94:d5:df:05:b3:3d:85:
f4:6a:dc:80:83:49:f0:97:7d:b3:ff:45:1a:c3:41:4f:22:53:
83:33:0a:bf:8b:96:29:d7:ac:9e:7a:ff:5f:4d:78:36:b6:4f:
14:85:96:d0:a5:78:0f:35:81:5c:fb:9c:61:85:3e:df:13:f3:
57:02:9c:fe:c6:d9:85:52:8c:ff:ee:d9:68:f7:6f:b1:f5:38:
a8:1d:ef:be:0f:a9:15:e9:3a:be:89:45:9f:ab:05:73:c0:49:
ff:89:45:e3:d9:18:fe:ee:e2:fb:5a:21:65:93:c0:4d:d5:97:
43:20:d4:02:b3:89:36:c8:40:70:e1:f7:2b:45:82:af:f6:c5:
29:6c:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:17 2026 by rpki-client