Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: 1aJsas0BVBH8IfYdKgODA5kRV51v29+zlbUb0K7PytU=
Subject key identifier: 52:13:01:31:EE:38:D2:01:AA:39:4C:E7:1C:C4:B5:9F:F6:0C:A5:70
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 019DCDF593D45F8595BDE49320E0E72B89EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 066E
Signing time: Mon 27 Apr 2026 08:01:56 +0000
Manifest this update: Mon 27 Apr 2026 08:01:56 +0000
Manifest next update: Tue 28 Apr 2026 08:01:56 +0000
Files and hashes: 1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: DOBh9f5YD/pkEBUdkMUWiiyJC2BrVvVbMOsN231M74g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:93:d4:5f:85:95:bd:e4:93:20:e0:e7:2b:89:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Apr 27 08:01:56 2026 GMT
Not After : Apr 28 08:01:56 2026 GMT
Subject: CN=52130131ee38d201aa394ce71cc4b59ff60ca570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:20:98:09:3f:56:90:dc:71:35:70:6c:61:
10:24:18:3d:33:eb:35:28:eb:74:49:00:ed:b3:73:
e5:88:3d:13:cd:c6:df:e0:7d:c0:54:da:a5:6e:e4:
c6:97:70:44:a1:e5:16:da:e7:aa:c9:ba:a0:23:be:
36:7b:37:9e:52:56:c2:0c:fb:05:fc:b0:bf:18:a9:
36:a8:e0:af:6f:3d:b6:9b:5b:19:11:d9:da:d8:4a:
b2:76:2e:75:15:6e:29:2c:a1:92:12:5b:8e:c5:8d:
bc:a1:ea:1a:97:b7:f0:28:58:ef:4c:59:b1:84:fe:
4c:fc:d8:c9:fa:59:97:3e:3a:6c:a9:ac:fa:cb:28:
5c:c8:dc:c4:db:9c:d6:bc:2d:88:7d:26:7d:ff:72:
ce:1b:39:25:fb:eb:d3:11:64:e4:3e:bc:92:83:fc:
30:0e:a8:13:97:5e:2d:8d:85:71:10:01:17:0e:9b:
b5:b6:00:6e:3e:76:c1:3b:40:c7:e5:23:79:84:a7:
7e:86:cc:4a:3e:e1:62:f0:75:4d:27:31:e1:85:47:
58:bd:6e:74:68:97:be:7c:61:69:8d:46:b0:4a:b3:
e3:22:a7:f6:6e:fa:59:6e:92:d6:6d:90:ea:e3:18:
7a:d6:23:a4:74:4d:3f:3d:a1:43:0a:2d:b2:b8:8a:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:01:31:EE:38:D2:01:AA:39:4C:E7:1C:C4:B5:9F:F6:0C:A5:70
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2e:80:c5:d7:5e:6e:14:6c:d5:89:90:da:be:ef:e4:10:27:
b8:62:60:1d:0c:39:a5:38:67:e7:1b:f0:25:05:e8:6c:77:cf:
b1:0c:68:1e:30:b0:4f:c5:dc:b9:52:7c:b2:4b:0c:e4:e6:b4:
31:f9:de:5a:5b:61:76:e9:64:b9:5a:48:97:c5:e1:6d:c4:96:
d8:4d:22:6a:3d:2f:11:68:e3:3d:e0:49:5e:a8:ff:63:05:54:
65:a2:38:37:fb:14:32:af:96:af:da:a6:ac:1a:87:79:b3:4f:
cf:a3:1a:3b:0e:06:1c:bb:1e:6a:f4:5b:ef:20:c1:0b:53:b5:
31:a9:1b:6c:a0:97:d2:4e:af:48:bd:e2:6d:f7:d1:37:47:26:
92:00:1d:4c:22:9b:c4:ad:1d:40:94:e7:46:d3:b2:ff:7b:1e:
4b:53:1a:d0:1e:1f:bb:6a:23:45:6f:fd:57:c8:cd:2d:19:a6:
c5:bd:5e:22:59:cd:2b:e3:a2:bc:a8:2b:09:23:30:0f:14:bb:
94:df:2b:d3:40:20:38:5c:94:82:10:c8:ee:4d:05:27:e7:e4:
13:08:57:a1:c9:84:66:78:d8:16:98:99:7f:28:3a:de:12:a0:
80:5a:1c:4f:30:ee:e6:60:63:38:12:f5:76:3b:6f:2e:28:f5:
54:0b:df:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9ZPUX4WVveSTIODnK4nuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm
YTlkNmMwHhcNMjYwNDI3MDgwMTU2WhcNMjYwNDI4MDgwMTU2WjAzMTEwLwYDVQQD
Eyg1MjEzMDEzMWVlMzhkMjAxYWEzOTRjZTcxY2M0YjU5ZmY2MGNhNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLggmAk/VpDccTVwbGEQJBg9M+s1
KOt0SQDts3PliD0Tzcbf4H3AVNqlbuTGl3BEoeUW2ueqybqgI742ezeeUlbCDPsF
/LC/GKk2qOCvbz22m1sZEdna2Eqydi51FW4pLKGSEluOxY28oeoal7fwKFjvTFmx
hP5M/NjJ+lmXPjpsqaz6yyhcyNzE25zWvC2IfSZ9/3LOGzkl++vTEWTkPrySg/ww
DqgTl14tjYVxEAEXDpu1tgBuPnbBO0DH5SN5hKd+hsxKPuFi8HVNJzHhhUdYvW50
aJe+fGFpjUawSrPjIqf2bvpZbpLWbZDq4xh61iOkdE0/PaFDCi2yuIq6CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFITATHuONIBqjlM5xzEtZ/2DKVwMB8GA1UdIwQY
MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt
Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5
LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS6Axdde
bhRs1YmQ2r7v5BAnuGJgHQw5pThn5xvwJQXobHfPsQxoHjCwT8XcuVJ8sksM5Oa0
MfneWlthdulkuVpIl8XhbcSW2E0iaj0vEWjjPeBJXqj/YwVUZaI4N/sUMq+Wr9qm
rBqHebNPz6MaOw4GHLseavRb7yDBC1O1MakbbKCX0k6vSL3ibffRN0cmkgAdTCKb
xK0dQJTnRtOy/3seS1Ma0B4fu2ojRW/9V8jNLRmmxb1eIlnNK+OivKgrCSMwDxS7
lN8r00AgOFyUghDI7k0FJ+fkEwhXocmEZnjYFpiZfyg63hKggFocTzDu5mBjOBL1
djtvLij1VAvfJA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:38 2026 by rpki-client