Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: B26prIe4GQmcKzY011IctbWhgqVlARK3X1z7h+Ot48s=
Subject key identifier: AF:DD:42:EE:E2:38:62:39:50:91:02:E2:98:EC:D7:9C:47:6B:16:34
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 019E2AA7E2999B179D2D29243A765640A141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 079C
Signing time: Fri 15 May 2026 08:01:46 +0000
Manifest this update: Fri 15 May 2026 08:01:46 +0000
Manifest next update: Sat 16 May 2026 08:01:46 +0000
Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: LE1U5UEfyJLfYndvboTSZZ+dFfLz+yNDBqY/cGKl+nE=)
3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:e2:99:9b:17:9d:2d:29:24:3a:76:56:40:a1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: May 15 08:01:46 2026 GMT
Not After : May 16 08:01:46 2026 GMT
Subject: CN=afdd42eee2386239509102e298ecd79c476b1634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:2a:64:6d:ff:06:99:fb:c4:7a:6a:4f:bb:
58:6c:be:3a:9f:7b:9d:03:dd:d4:08:0b:bf:c3:4a:
5b:02:49:82:5f:55:a2:d4:ec:2e:58:6a:d3:b7:b6:
ff:f3:53:3d:b0:81:18:7e:d6:09:72:9e:6a:8d:7c:
8f:d4:34:9a:7a:00:9e:af:e5:a7:cf:ca:8d:d5:53:
e4:ac:9c:bb:7b:37:d9:48:66:8a:1f:25:da:0f:8b:
14:09:ce:38:df:01:de:f6:d3:a8:63:f2:e0:8b:83:
82:0a:f2:1c:dd:50:ca:14:b8:22:54:41:66:97:45:
05:e0:2b:c2:0b:d9:4d:11:29:dd:80:6b:28:3d:85:
0c:58:ad:52:ad:6d:84:5f:bf:e0:4e:04:22:31:df:
c7:26:10:d9:5c:5c:89:35:de:ae:6a:0b:5a:dd:11:
d4:19:70:61:1d:e1:cd:fc:e1:a5:af:2d:9d:63:76:
6d:7e:68:5b:1e:f2:90:52:db:fc:62:94:9e:ed:32:
69:b7:f5:aa:43:25:be:e7:9c:be:0f:dc:af:8b:36:
b0:6c:65:4c:dc:8b:f8:f9:8c:90:64:7b:f9:94:4e:
69:c7:c5:e0:54:44:39:f9:6f:15:3c:f1:a9:94:4b:
10:8e:de:71:63:a9:a5:d2:a6:24:0c:40:f5:23:ff:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:42:EE:E2:38:62:39:50:91:02:E2:98:EC:D7:9C:47:6B:16:34
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:af:17:30:e8:d1:ac:2a:a2:85:c6:4b:7f:05:68:38:1d:7d:
7f:e1:62:6c:b6:75:bd:01:a4:40:e1:aa:c3:7c:6c:72:b5:8c:
03:39:9e:9e:54:62:d7:73:4c:eb:4e:a3:a1:f9:00:91:6a:d3:
7b:d9:52:a8:7b:08:b1:d9:24:5f:ee:80:84:07:1b:08:95:f0:
11:c0:b6:40:50:61:80:a0:bd:4c:32:20:81:e5:60:47:fc:4b:
00:fa:b9:db:76:3b:d1:f5:5f:59:c9:fd:41:ea:0b:99:ef:96:
99:d2:19:63:1e:dc:bd:d0:87:52:55:b8:fb:80:2a:b5:09:47:
37:b0:35:bc:0c:ed:5b:68:ce:de:f4:a1:48:c4:e4:7a:77:df:
85:01:1e:e8:9b:00:02:ac:c1:0f:bb:6a:39:d8:e5:ea:13:43:
1e:ea:fa:02:16:69:7b:71:6a:62:f6:60:70:df:05:8a:64:7d:
62:9b:a5:ad:ab:77:52:7c:bc:8e:b2:71:d6:b8:04:67:ea:30:
a5:65:2c:7b:a4:46:a9:57:a8:f0:ed:2b:32:29:60:c8:03:16:
b0:96:b1:d1:c0:dd:4f:76:e1:1b:ad:28:e6:b4:c0:40:ae:05:
34:58:4a:98:0d:48:fa:e4:3a:1e:52:30:6c:d6:cc:30:9a:46:
8e:a8:f4:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qp+KZmxedLSkkOnZWQKFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ODZiNGEwOGFjZTYwZTY3MGVkY2Q4OWZhZGIyNTQwMTE1
NjJmNTMwHhcNMjYwNTE1MDgwMTQ2WhcNMjYwNTE2MDgwMTQ2WjAzMTEwLwYDVQQD
EyhhZmRkNDJlZWUyMzg2MjM5NTA5MTAyZTI5OGVjZDc5YzQ3NmIxNjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB4qZG3/Bpn7xHpqT7tYbL46n3ud
A93UCAu/w0pbAkmCX1Wi1OwuWGrTt7b/81M9sIEYftYJcp5qjXyP1DSaegCer+Wn
z8qN1VPkrJy7ezfZSGaKHyXaD4sUCc443wHe9tOoY/Lgi4OCCvIc3VDKFLgiVEFm
l0UF4CvCC9lNESndgGsoPYUMWK1SrW2EX7/gTgQiMd/HJhDZXFyJNd6uagta3RHU
GXBhHeHN/OGlry2dY3ZtfmhbHvKQUtv8YpSe7TJpt/WqQyW+55y+D9yvizawbGVM
3Iv4+YyQZHv5lE5px8XgVEQ5+W8VPPGplEsQjt5xY6ml0qYkDED1I/+fyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/dQu7iOGI5UJEC4pjs15xHaxY0MB8GA1UdIwQY
MBaAFBSGtKCKzmDmcO3NifrbJUARVi9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUt
ZTgxODdmMzQ0YzgwLzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUtZTgxODdmMzQ0Yzgw
LzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjK8XMOjR
rCqihcZLfwVoOB19f+FibLZ1vQGkQOGqw3xscrWMAzmenlRi13NM606jofkAkWrT
e9lSqHsIsdkkX+6AhAcbCJXwEcC2QFBhgKC9TDIggeVgR/xLAPq523Y70fVfWcn9
QeoLme+WmdIZYx7cvdCHUlW4+4AqtQlHN7A1vAztW2jO3vShSMTkenffhQEe6JsA
AqzBD7tqOdjl6hNDHur6AhZpe3FqYvZgcN8FimR9Ypulrat3Uny8jrJx1rgEZ+ow
pWUse6RGqVeo8O0rMilgyAMWsJax0cDdT3bhG60o5rTAQK4FNFhKmA1I+uQ6HlIw
bNbMMJpGjqj0lg==
-----END CERTIFICATE-----
Generated at Fri May 15 15:04:47 2026 by rpki-client