
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: LtvpmPkr6dYwV0y66O7I6DHKC+CFcSzlBteb+LbKdUE=
Subject key identifier: 61:BB:50:B4:85:4C:06:6F:D7:73:2F:DA:AB:E7:5D:5B:67:C7:11:A0
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 019F92116206C247E8A321050C4B5DA04956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 136A
Signing time: Fri 24 Jul 2026 03:00:40 +0000
Manifest this update: Fri 24 Jul 2026 03:00:40 +0000
Manifest next update: Sat 25 Jul 2026 03:00:40 +0000
Files and hashes: 1: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: 6Ziuzgzmh+93lTkiuec2vNrAuU8/MDTfndRuipfzA98=)
2: aIdT9TU8Mchvi1KT8xDqqF_aYww.roa (hash: L0SKCt/IF1f3xCcEQuDLjZD6COmk+1+SlyBXGktU14Q=)
3: qfbmdAxrKJhL7MuKfw49467oMe0.roa (hash: tAJCqrPUfCnpIMZF6i2OOK4HRvotFOEnPGbHmvdQqEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:62:06:c2:47:e8:a3:21:05:0c:4b:5d:a0:49:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Jul 24 03:00:40 2026 GMT
Not After : Jul 25 03:00:40 2026 GMT
Subject: CN=61bb50b4854c066fd7732fdaabe75d5b67c711a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:9f:2a:78:a5:d0:f8:cb:96:16:9e:43:52:
64:13:15:94:2f:de:cd:41:07:c9:a4:76:db:44:8e:
43:cd:36:5e:59:a6:0d:e2:76:6c:33:c3:ce:56:e5:
a4:15:06:65:6f:2c:8f:64:1a:41:f4:bb:ab:00:9d:
f9:9d:88:a2:74:05:cd:54:c7:7c:93:72:14:a4:bb:
c7:87:37:c7:74:a9:6a:78:89:0b:44:36:43:c6:1a:
de:d7:83:a3:6c:5a:57:aa:80:ab:ba:86:c4:1e:a2:
f9:e3:95:c1:dc:eb:ac:86:10:99:02:8c:c2:0f:6f:
ce:f5:41:8e:22:97:99:c6:68:7e:46:9d:0c:79:89:
c7:7d:23:f5:08:d0:16:6c:65:5c:a1:12:cd:71:72:
17:54:7e:15:08:dd:e5:a4:2a:e0:f0:97:b9:29:c8:
2b:96:0a:42:26:cc:c9:07:73:9d:18:96:36:21:93:
cb:53:96:b6:7f:66:80:8f:e4:ef:9d:e8:6e:c6:fe:
b7:d4:84:5a:38:db:c1:3e:c8:4f:45:2f:ae:63:7a:
38:25:c7:70:02:9b:7b:7e:74:9f:b0:f0:98:40:d5:
2c:21:f3:e8:a4:67:63:0b:b0:69:2e:ec:18:14:35:
8b:47:29:35:1c:bf:ed:ed:54:c7:f8:e5:6b:7a:02:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:50:B4:85:4C:06:6F:D7:73:2F:DA:AB:E7:5D:5B:67:C7:11:A0
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ed:1f:f3:6a:4c:97:85:1f:24:19:e3:f3:45:f6:cc:56:2c:
de:ce:4e:80:10:14:85:48:17:dd:3b:bc:6e:2d:1d:07:1d:16:
a6:20:c3:fc:52:0b:a5:e7:f2:6a:38:c1:68:ca:75:41:5a:34:
15:9a:2d:6d:81:20:6c:f7:80:41:25:e7:f3:b0:6c:df:46:b9:
84:2f:99:a0:db:17:84:50:87:85:55:77:47:b7:a2:07:f2:c6:
51:64:7d:3f:d8:f9:b1:7f:27:b1:0c:11:bd:9d:ee:6e:00:7d:
5e:4a:e2:b2:8f:11:65:62:ac:40:74:24:c5:ff:75:f5:8f:63:
3c:0a:ac:76:74:43:cd:20:d8:4c:bc:d3:82:65:68:03:6f:67:
8c:2b:d0:b4:28:37:39:14:90:47:b5:16:fb:e4:87:28:58:a5:
41:87:a3:05:13:b3:a4:e2:23:85:04:58:2b:b4:9a:49:62:9c:
6b:25:e5:17:0e:48:f9:1d:bc:93:76:1e:cc:c8:49:76:29:1d:
ab:13:28:7f:99:1b:c9:d0:5d:e8:84:fe:5e:d4:7f:7a:7d:ea:
ca:e9:89:c1:56:5d:0a:7d:00:45:f4:fe:0a:a4:b9:0c:df:ab:
0c:85:b6:18:12:51:29:27:3f:a0:66:76:cb:9f:97:7a:6d:08:
81:92:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:00 2026 by rpki-client