Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: 4FicD92CmHI+28sbAgZTcB93o+KRa42j6L6wEGj3x9w=
Subject key identifier: F8:8E:A6:39:9E:26:88:95:EB:53:D7:CD:29:18:3B:4B:81:B3:46:58
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 019E1DFEAE0F97F84D5F3430D2A33CC6BDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0BD1
Signing time: Tue 12 May 2026 21:01:30 +0000
Manifest this update: Tue 12 May 2026 21:01:30 +0000
Manifest next update: Wed 13 May 2026 21:01:30 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: 6NeWVXztaQhNPr80xr7gGAKaozYdsI8d8U04q5DN+bo=)
2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=)
3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=)
4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:ae:0f:97:f8:4d:5f:34:30:d2:a3:3c:c6:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: May 12 21:01:30 2026 GMT
Not After : May 13 21:01:30 2026 GMT
Subject: CN=f88ea6399e268895eb53d7cd29183b4b81b34658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:24:fa:9b:d9:d1:3d:0d:37:9f:fd:e8:4b:
f4:83:e7:1b:a0:56:83:e3:18:01:7b:85:ee:48:33:
8b:3f:76:48:dc:a9:8c:ce:39:62:5d:0c:31:f1:24:
e4:b0:14:42:04:f0:b3:c2:3b:f9:61:4a:13:ce:b7:
13:eb:bd:36:91:8f:a4:b3:18:d0:26:bd:73:2f:19:
f5:e0:0e:66:9d:b4:d5:80:58:b6:8e:0e:1c:99:b4:
32:94:cf:91:4e:88:84:ab:62:a9:b0:2b:6d:2b:de:
87:f0:9c:2b:74:e9:aa:85:eb:3d:c3:e4:0c:d2:8e:
d3:b1:36:29:dc:b1:a6:e2:f2:e8:55:ac:ed:70:14:
22:5e:c5:57:f7:62:8e:75:56:86:bf:10:66:d5:0a:
0b:43:8e:8a:b7:2b:af:fe:82:ff:03:21:9b:36:c2:
8a:0e:25:5e:68:a0:4a:54:a9:fe:f6:ee:eb:d7:57:
23:d8:3f:f5:1a:49:c9:47:41:eb:8a:b8:6a:41:bc:
ce:94:d0:a6:13:4f:55:29:ba:20:e4:fe:22:9b:5f:
0e:9f:5e:2a:c0:fc:ab:42:ae:11:31:85:e6:bd:d1:
39:86:cf:a7:00:b6:16:9c:f9:81:b7:8e:6e:54:21:
20:05:a5:12:cb:04:a1:94:3b:2b:1d:04:f7:8b:c8:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:A6:39:9E:26:88:95:EB:53:D7:CD:29:18:3B:4B:81:B3:46:58
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2e:71:a9:8e:34:8b:1b:c8:dc:07:ee:c8:9d:df:d0:b0:81:
a1:14:81:bf:c4:b8:75:35:7b:ce:69:d3:c2:75:18:17:85:54:
17:3c:47:45:26:f8:ef:d4:41:51:a5:e4:fc:bf:f3:6a:51:a6:
ed:93:c2:df:ee:66:84:b1:66:d9:54:cb:18:a5:bb:90:76:fc:
89:f3:d8:6f:7b:db:26:32:b1:04:e4:58:8d:c0:7a:d6:60:17:
62:ed:a3:6f:8c:7d:8e:96:89:01:2f:87:bf:19:8a:0a:f0:6c:
75:59:ce:f6:d5:8f:05:e7:46:a8:18:3a:a1:8e:44:d9:3c:ab:
aa:4b:28:e3:71:c3:fd:06:6e:69:ad:4e:61:8b:4c:70:0e:35:
ac:02:cd:0e:e1:ff:6b:59:bf:44:9a:f7:1e:8f:4a:a6:64:6c:
6f:44:09:95:40:33:5b:d4:af:14:93:fa:ec:39:b6:31:2b:22:
ee:32:8e:96:fe:39:b6:3d:f9:60:aa:3d:2c:5d:6d:0c:e8:62:
89:77:0f:c3:e3:2b:3c:2b:87:3f:1b:aa:a5:6f:3b:dd:a6:74:
62:fd:6d:a4:58:eb:54:33:aa:eb:4d:3e:e4:41:7b:da:20:a6:
b5:2c:0d:0c:51:38:1b:fd:01:ca:95:eb:8d:95:bb:2c:e5:9d:
81:fb:0d:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/q4Pl/hNXzQw0qM8xr3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll
YmU4ODUwHhcNMjYwNTEyMjEwMTMwWhcNMjYwNTEzMjEwMTMwWjAzMTEwLwYDVQQD
EyhmODhlYTYzOTllMjY4ODk1ZWI1M2Q3Y2QyOTE4M2I0YjgxYjM0NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgkk+pvZ0T0NN5/96Ev0g+cboFaD
4xgBe4XuSDOLP3ZI3KmMzjliXQwx8STksBRCBPCzwjv5YUoTzrcT6702kY+ksxjQ
Jr1zLxn14A5mnbTVgFi2jg4cmbQylM+RToiEq2KpsCttK96H8JwrdOmqhes9w+QM
0o7TsTYp3LGm4vLoVaztcBQiXsVX92KOdVaGvxBm1QoLQ46Ktyuv/oL/AyGbNsKK
DiVeaKBKVKn+9u7r11cj2D/1GknJR0HrirhqQbzOlNCmE09VKbog5P4im18On14q
wPyrQq4RMYXmvdE5hs+nALYWnPmBt45uVCEgBaUSywShlDsrHQT3i8iI7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiOpjmeJoiV61PXzSkYO0uBs0ZYMB8GA1UdIwQY
MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It
MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0
LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcC5xqY40
ixvI3AfuyJ3f0LCBoRSBv8S4dTV7zmnTwnUYF4VUFzxHRSb479RBUaXk/L/zalGm
7ZPC3+5mhLFm2VTLGKW7kHb8ifPYb3vbJjKxBORYjcB61mAXYu2jb4x9jpaJAS+H
vxmKCvBsdVnO9tWPBedGqBg6oY5E2Tyrqkso43HD/QZuaa1OYYtMcA41rALNDuH/
a1m/RJr3Ho9KpmRsb0QJlUAzW9SvFJP67Dm2MSsi7jKOlv45tj35YKo9LF1tDOhi
iXcPw+MrPCuHPxuqpW873aZ0Yv1tpFjrVDOq600+5EF72iCmtSwNDFE4G/0BypXr
jZW7LOWdgfsNwg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:19:16 2026 by rpki-client