Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: fa0OGHbxPaVNLLzzWfD9UXzxjhtqOEipJKzzBP3T2uk=
Subject key identifier: 30:F2:07:6C:FD:9A:96:31:23:F1:2A:0F:95:33:5C:C3:66:61:6B:C9
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 019E1F477B51964E636935CB1AD3E5EE658E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 12AA
Signing time: Wed 13 May 2026 03:00:38 +0000
Manifest this update: Wed 13 May 2026 03:00:38 +0000
Manifest next update: Thu 14 May 2026 03:00:38 +0000
Files and hashes: 1: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: JEIu+dfFQzsKGa4no2qlSzbZ2LpyUrLPJftCcyD9v9g=)
2: aIdT9TU8Mchvi1KT8xDqqF_aYww.roa (hash: L0SKCt/IF1f3xCcEQuDLjZD6COmk+1+SlyBXGktU14Q=)
3: qfbmdAxrKJhL7MuKfw49467oMe0.roa (hash: tAJCqrPUfCnpIMZF6i2OOK4HRvotFOEnPGbHmvdQqEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:7b:51:96:4e:63:69:35:cb:1a:d3:e5:ee:65:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: May 13 03:00:38 2026 GMT
Not After : May 14 03:00:38 2026 GMT
Subject: CN=30f2076cfd9a963123f12a0f95335cc366616bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:8e:db:a9:a5:16:b6:49:69:9d:d8:74:aa:
bf:0b:8e:cf:4b:a6:bb:7c:42:d4:bd:1e:df:7a:07:
bf:cc:b4:6c:f2:f5:e5:f1:e8:51:f4:59:30:df:28:
a9:d7:9e:fd:13:97:29:96:ca:95:b3:ca:6e:94:88:
b5:f0:22:c7:c4:ff:f7:ed:da:91:90:27:cc:d9:5c:
4b:67:2b:19:71:da:fe:cf:0a:e0:b0:80:3d:93:fd:
52:12:0f:86:6a:fe:8c:53:8c:3f:39:16:96:9a:15:
6f:83:bc:06:28:5b:63:81:df:2f:8b:18:8e:e9:ac:
ee:eb:41:f9:e7:d9:5e:85:ca:ce:70:af:0a:75:e5:
f9:d4:3a:69:61:47:d4:64:be:c8:50:a0:d3:a6:50:
49:98:f8:13:85:f2:8e:77:10:30:90:50:d1:6e:c3:
c6:1f:51:11:b0:19:a0:92:06:65:aa:f0:1a:53:8e:
56:c1:89:41:17:59:70:a9:f5:fc:89:fe:dd:42:c0:
bf:11:36:d9:36:3b:ea:de:56:5a:54:20:c3:e7:f9:
f8:d3:99:6f:57:f4:d5:77:50:81:ba:67:ac:4b:20:
1b:3c:9b:ab:9f:57:cf:0a:a0:f8:9a:d7:0d:60:8b:
17:9f:86:45:ee:8f:e0:55:65:6b:f5:0c:56:1a:e5:
37:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F2:07:6C:FD:9A:96:31:23:F1:2A:0F:95:33:5C:C3:66:61:6B:C9
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e2:f3:2f:d6:e8:59:1d:b8:0d:7e:ab:e8:ce:d5:fc:84:e3:
b7:70:49:70:9c:76:ca:1c:3f:cf:5d:a2:0e:ed:a1:f0:83:a5:
02:ae:ca:fc:8d:50:c2:ea:04:8c:55:38:7f:8d:41:c3:4d:27:
b0:cf:f4:2d:ce:e1:95:9a:83:f7:61:cf:fd:b6:37:3a:4b:be:
d3:d9:02:c1:e8:b8:46:53:90:54:72:1d:ad:61:80:97:7b:2e:
34:53:af:85:33:eb:d4:0f:49:a3:c7:bb:b1:7e:a6:5f:3b:cd:
4c:c0:da:f4:f6:38:7d:be:4f:2d:18:2a:21:44:c6:d4:db:b4:
52:61:1b:37:5f:d1:eb:fa:13:43:2b:a8:3b:81:65:ef:48:13:
59:37:b4:32:f2:40:12:79:dc:00:17:1f:ba:19:dd:09:3c:99:
9a:a9:89:b9:c3:06:43:47:69:5e:00:24:db:55:a1:b2:b0:be:
40:84:ef:bc:bb:50:5e:89:61:d7:2b:8a:78:c4:38:57:f1:fd:
b2:44:e7:f7:5f:2d:ad:90:e7:cc:98:2e:18:7e:40:ea:f7:19:
22:90:c3:1f:a5:3b:7e:e2:b3:f8:eb:a6:7d:a5:8a:3b:1f:b0:
86:d6:f8:4b:65:a9:f5:1d:57:6b:0f:14:c5:15:a1:d0:25:48:
75:79:fa:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR3tRlk5jaTXLGtPl7mWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz
YjBmYjgwHhcNMjYwNTEzMDMwMDM4WhcNMjYwNTE0MDMwMDM4WjAzMTEwLwYDVQQD
EygzMGYyMDc2Y2ZkOWE5NjMxMjNmMTJhMGY5NTMzNWNjMzY2NjE2YmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MqO26mlFrZJaZ3YdKq/C47PS6a7
fELUvR7fege/zLRs8vXl8ehR9Fkw3yip1579E5cplsqVs8pulIi18CLHxP/37dqR
kCfM2VxLZysZcdr+zwrgsIA9k/1SEg+Gav6MU4w/ORaWmhVvg7wGKFtjgd8vixiO
6azu60H559lehcrOcK8KdeX51DppYUfUZL7IUKDTplBJmPgThfKOdxAwkFDRbsPG
H1ERsBmgkgZlqvAaU45WwYlBF1lwqfX8if7dQsC/ETbZNjvq3lZaVCDD5/n405lv
V/TVd1CBumesSyAbPJurn1fPCqD4mtcNYIsXn4ZF7o/gVWVr9QxWGuU3UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDyB2z9mpYxI/EqD5UzXMNmYWvJMB8GA1UdIwQY
MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt
ZmZiMmVmNGJmZTI1LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1
LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOLzL9bo
WR24DX6r6M7V/ITjt3BJcJx2yhw/z12iDu2h8IOlAq7K/I1QwuoEjFU4f41Bw00n
sM/0Lc7hlZqD92HP/bY3Oku+09kCwei4RlOQVHIdrWGAl3suNFOvhTPr1A9Jo8e7
sX6mXzvNTMDa9PY4fb5PLRgqIUTG1Nu0UmEbN1/R6/oTQyuoO4Fl70gTWTe0MvJA
EnncABcfuhndCTyZmqmJucMGQ0dpXgAk21WhsrC+QITvvLtQXolh1yuKeMQ4V/H9
skTn918trZDnzJguGH5A6vcZIpDDH6U7fuKz+OumfaWKOx+whtb4S2Wp9R1Xaw8U
xRWh0CVIdXn6Xw==
-----END CERTIFICATE-----
Generated at Wed May 13 10:48:06 2026 by rpki-client