Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: y/kkHcS070w37eJF1ZecqBNkjSormqWlTmhc+nURJVA=
Subject key identifier: 04:F7:3B:F7:B9:E2:47:F1:D1:42:A9:2F:C4:39:6A:14:85:A5:29:C5
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 01A043BDB1AEDE30FCA5C278A8199A332082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1A28
Signing time: Thu 27 Aug 2026 15:01:39 +0000
Manifest this update: Thu 27 Aug 2026 15:01:39 +0000
Manifest next update: Fri 28 Aug 2026 15:01:39 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: +PcTiD7+notjZW+x+l3sE+CBmRAlYqKvT3cFxKnQUqA=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:bd:b1:ae:de:30:fc:a5:c2:78:a8:19:9a:33:20:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Aug 27 15:01:39 2026 GMT
Not After : Aug 28 15:01:39 2026 GMT
Subject: CN=04f73bf7b9e247f1d142a92fc4396a1485a529c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:40:c0:54:e1:e7:1a:bf:57:1b:58:53:ff:
ff:d3:f7:3d:e9:12:bf:49:74:3d:6b:bd:5e:42:c6:
49:eb:05:c4:c1:68:34:92:db:d9:0d:0e:65:a1:44:
fc:e9:a6:18:43:43:d6:6f:17:bc:5e:aa:63:f4:c9:
ba:d0:39:21:59:75:00:43:5c:44:62:97:3a:2d:5f:
7a:78:10:a1:4f:79:90:56:de:3a:3e:b0:cc:98:87:
c8:75:24:ff:15:b4:65:90:08:ce:11:a0:27:f9:53:
e4:7b:32:c5:6b:29:dd:b6:f8:92:f2:cd:77:c3:de:
a2:29:5e:ed:2a:c2:49:29:26:c0:3a:33:a4:08:8d:
b5:d8:1d:af:be:ea:d7:73:36:75:0f:99:ef:ee:b4:
1c:51:74:0e:8a:20:cb:59:14:55:80:a8:d3:55:dc:
eb:e6:99:46:a8:27:94:e2:76:9c:50:1b:a7:6c:b9:
1d:88:89:d2:e5:eb:fb:cc:d9:b3:12:78:ba:ac:49:
07:94:a8:6d:c2:89:8e:f3:b4:88:9e:74:3e:4e:78:
42:b9:97:23:c7:9d:29:30:a9:27:0e:d4:2f:09:b2:
e8:5c:b7:a1:53:1b:68:b2:0d:77:a7:8a:da:c2:69:
83:13:86:70:73:c5:45:21:68:61:37:c7:7d:54:5b:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F7:3B:F7:B9:E2:47:F1:D1:42:A9:2F:C4:39:6A:14:85:A5:29:C5
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:f1:95:8d:55:de:5c:5b:2a:12:fe:c0:91:63:17:db:45:
d7:31:6d:96:4f:8d:b6:a2:5f:e1:75:0e:64:49:44:10:c5:b3:
28:bf:ff:e0:f2:d1:53:d7:02:30:cc:a3:72:60:22:44:e9:f2:
1d:a8:9e:f7:ed:56:81:98:85:1b:5e:d0:73:6a:5e:3b:56:de:
9b:8d:44:13:cc:31:c7:03:c5:b9:f3:c0:98:b8:c4:41:2a:70:
87:05:fd:f1:9d:8e:a8:cf:eb:e3:1d:9e:ce:e6:1d:ff:0c:db:
b2:9b:3f:65:40:3d:46:58:4f:6e:3b:81:27:7d:5f:b7:b3:53:
ee:1d:b4:d4:d2:16:76:8c:41:76:4c:f7:26:0b:1a:21:1c:8c:
47:b9:52:94:5d:77:4a:17:78:0b:40:68:ac:b4:f1:1f:de:ca:
4f:06:fc:39:d8:36:76:75:1e:1b:c6:e9:83:e1:33:be:79:72:
63:57:84:67:b7:3a:99:29:d9:c9:e0:d8:b8:8d:d5:69:63:20:
26:2f:a0:b0:26:50:3e:17:28:91:83:49:52:b4:ee:de:3a:27:
0d:b0:cd:89:0e:1c:4f:ce:06:ba:94:c4:0e:69:ba:81:a7:40:
17:49:e0:5c:b7:91:8a:97:13:af:72:c1:72:ea:c0:01:6a:95:
8c:5c:13:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBDvbGu3jD8pcJ4qBmaMyCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTQ0MzZlZDMyNDJiZGRiOTZmZGYxMzlhMTI1M2RlYjk4
NmRmZDAwHhcNMjYwODI3MTUwMTM5WhcNMjYwODI4MTUwMTM5WjAzMTEwLwYDVQQD
EygwNGY3M2JmN2I5ZTI0N2YxZDE0MmE5MmZjNDM5NmExNDg1YTUyOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qxAwFTh5xq/VxtYU///0/c96RK/
SXQ9a71eQsZJ6wXEwWg0ktvZDQ5loUT86aYYQ0PWbxe8Xqpj9Mm60DkhWXUAQ1xE
Ypc6LV96eBChT3mQVt46PrDMmIfIdST/FbRlkAjOEaAn+VPkezLFayndtviS8s13
w96iKV7tKsJJKSbAOjOkCI212B2vvurXczZ1D5nv7rQcUXQOiiDLWRRVgKjTVdzr
5plGqCeU4nacUBunbLkdiInS5ev7zNmzEni6rEkHlKhtwomO87SInnQ+TnhCuZcj
x50pMKknDtQvCbLoXLehUxtosg13p4rawmmDE4Zwc8VFIWhhN8d9VFvKZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT3O/e54kfx0UKpL8Q5ahSFpSnFMB8GA1UdIwQY
MBaAFNZUQ27TJCvduW/fE5oSU965ht/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUt
YTE0MjA4N2NlODkwLzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUtYTE0MjA4N2NlODkw
LzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8TxlY1V
3lxbKhL+wJFjF9tF1zFtlk+NtqJf4XUOZElEEMWzKL//4PLRU9cCMMyjcmAiROny
Haie9+1WgZiFG17Qc2peO1bem41EE8wxxwPFufPAmLjEQSpwhwX98Z2OqM/r4x2e
zuYd/wzbsps/ZUA9RlhPbjuBJ31ft7NT7h201NIWdoxBdkz3JgsaIRyMR7lSlF13
Shd4C0BorLTxH97KTwb8Odg2dnUeG8bpg+EzvnlyY1eEZ7c6mSnZyeDYuI3VaWMg
Ji+gsCZQPhcokYNJUrTu3jonDbDNiQ4cT84GupTEDmm6gadAF0ngXLeRipcTr3LB
curAAWqVjFwTIA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 20:03:25 2026 by rpki-client