
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: eaiwcEbvuzyrwQlRw5OoqOFc68jSRD+bwk1azjwivSI=
Subject key identifier: C8:1A:4F:E2:FD:13:C0:7E:AC:BA:D0:D9:80:8A:1F:07:8B:CD:01:3A
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 019E300573236DCAC1DF8ACABF9E6ACDB0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0D1D
Signing time: Sat 16 May 2026 09:02:03 +0000
Manifest this update: Sat 16 May 2026 09:02:03 +0000
Manifest next update: Sun 17 May 2026 09:02:03 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: b1biEj93B13GQkW8UMBvOAa1xIoFYda5/LdLeQizRNw=)
2: nPnN-mV_c2-YF1lYIozKulfXb-I.roa (hash: Vt2SDSHBDDSYSW6xQWsdmfz8p7B5Lt8QbmhuE6bmJeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:73:23:6d:ca:c1:df:8a:ca:bf:9e:6a:cd:b0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: May 16 09:02:03 2026 GMT
Not After : May 17 09:02:03 2026 GMT
Subject: CN=c81a4fe2fd13c07eacbad0d9808a1f078bcd013a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:48:81:26:a0:f4:d8:64:38:a4:cb:35:c0:
2d:73:f0:52:47:3c:a3:a9:4e:51:be:45:67:6d:f0:
54:01:4e:3e:16:6c:aa:f1:f0:e8:96:33:4f:e0:13:
57:8c:06:66:6f:7d:42:94:55:b2:76:d6:8d:c4:42:
e8:2a:c9:7f:9e:bf:0d:54:0e:a2:8b:d1:7a:2c:8a:
63:00:f1:be:b6:13:89:e5:b6:9e:11:5e:68:d4:b4:
cb:53:4d:e3:b0:fd:3a:50:4f:41:b5:ad:37:20:ec:
9e:07:a9:b3:5f:f1:10:57:a4:38:87:75:40:ae:fb:
ed:f1:45:1e:28:1b:7d:86:89:84:e9:b1:f6:73:c3:
be:f1:0f:7a:42:96:0a:e5:42:7a:7c:f0:52:65:8b:
81:f0:3f:2a:e6:ad:24:a2:5e:47:00:54:3a:f3:4a:
c1:00:21:22:58:e1:ea:85:8f:9f:9c:77:be:9c:ca:
cc:fe:b9:34:99:65:d3:23:d9:fc:26:c6:8a:00:64:
02:ac:47:79:40:77:fd:a8:d2:9d:5d:c2:74:62:d6:
2a:a8:fb:34:d3:c1:9b:ad:ce:f0:8e:c2:70:7e:19:
a4:dd:b6:b0:55:7e:7f:56:77:b1:35:f4:ae:07:c5:
e0:b1:99:c3:10:63:ed:b7:de:a8:b0:4a:d4:4b:c1:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:4F:E2:FD:13:C0:7E:AC:BA:D0:D9:80:8A:1F:07:8B:CD:01:3A
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:60:e9:cb:87:91:16:d1:5f:28:f0:28:a3:94:ef:f4:67:cc:
a0:4e:01:85:f7:14:06:ca:a9:e4:5a:e7:2c:2d:9d:e6:04:43:
a6:7b:2a:94:c8:36:07:1c:42:52:c2:6f:c7:a6:4f:d1:7d:16:
ed:bb:f0:4e:e6:37:23:9b:cf:c6:ed:0f:b3:28:6f:0b:e4:fb:
57:f7:df:d0:67:39:f6:21:ae:03:55:58:67:6d:7d:f5:44:14:
66:ce:6f:e3:3a:1e:73:77:d2:d3:94:3c:dc:5e:0c:b6:a2:73:
ed:20:02:26:51:87:36:7a:b8:12:ff:12:02:1e:6b:b3:8b:2e:
b1:d2:d5:81:99:6d:9d:27:9c:0e:1b:30:f1:18:d3:4d:94:6a:
58:ad:a1:c6:76:73:58:a5:b1:32:41:a5:7a:3a:e5:86:56:4e:
7a:21:70:e5:2c:03:fa:d6:7c:71:31:38:4a:7b:54:d6:3b:d6:
18:73:03:fd:ad:64:d0:cf:bf:92:21:9f:cb:6b:b7:61:a7:5a:
fa:56:26:96:6c:fb:27:7e:66:e2:be:17:6c:9e:87:64:7b:8c:
29:db:cb:86:7b:ab:0a:2c:9d:96:b6:6a:c2:c6:6f:90:5e:d8:
92:43:c9:a7:f0:13:4b:c6:b9:4f:bc:94:9d:73:e3:60:15:da:
0a:97:66:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBXMjbcrB34rKv55qzbCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDA1MTYxM2QzY2M2YjNlYjgxZDViYjQwMGFlMGQ0ZTI0
MTJjODAwHhcNMjYwNTE2MDkwMjAzWhcNMjYwNTE3MDkwMjAzWjAzMTEwLwYDVQQD
EyhjODFhNGZlMmZkMTNjMDdlYWNiYWQwZDk4MDhhMWYwNzhiY2QwMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLZIgSag9NhkOKTLNcAtc/BSRzyj
qU5RvkVnbfBUAU4+Fmyq8fDoljNP4BNXjAZmb31ClFWydtaNxELoKsl/nr8NVA6i
i9F6LIpjAPG+thOJ5baeEV5o1LTLU03jsP06UE9Bta03IOyeB6mzX/EQV6Q4h3VA
rvvt8UUeKBt9homE6bH2c8O+8Q96QpYK5UJ6fPBSZYuB8D8q5q0kol5HAFQ680rB
ACEiWOHqhY+fnHe+nMrM/rk0mWXTI9n8JsaKAGQCrEd5QHf9qNKdXcJ0YtYqqPs0
08Gbrc7wjsJwfhmk3bawVX5/VnexNfSuB8XgsZnDEGPtt96osErUS8EJtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgaT+L9E8B+rLrQ2YCKHweLzQE6MB8GA1UdIwQY
MBaAFNUAUWE9PMaz64HVu0AK4NTiQSyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTIt
MjI1ZDhhZGZlOGJiLzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81OWZjMjYtZjhkZC00ZjVlLWJjYTItMjI1ZDhhZGZlOGJi
LzEvMVFCUllUMDh4clByZ2RXN1FBcmcxT0pCTElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWDpy4eR
FtFfKPAoo5Tv9GfMoE4BhfcUBsqp5FrnLC2d5gRDpnsqlMg2BxxCUsJvx6ZP0X0W
7bvwTuY3I5vPxu0PsyhvC+T7V/ff0Gc59iGuA1VYZ2199UQUZs5v4zoec3fS05Q8
3F4MtqJz7SACJlGHNnq4Ev8SAh5rs4susdLVgZltnSecDhsw8RjTTZRqWK2hxnZz
WKWxMkGlejrlhlZOeiFw5SwD+tZ8cTE4SntU1jvWGHMD/a1k0M+/kiGfy2u3Yada
+lYmlmz7J35m4r4XbJ6HZHuMKdvLhnurCiydlrZqwsZvkF7YkkPJp/ATS8a5T7yU
nXPjYBXaCpdmjg==
-----END CERTIFICATE-----
Generated at Sat May 16 18:41:55 2026 by rpki-client