Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier: 7YIbaMXILpPDa+k0juV+g1ANNXNZAScd0ONJxMgjsQE=
Subject key identifier: AD:A7:D2:7F:82:69:E3:E6:F4:BA:BC:C3:C8:B8:70:01:E6:37:15:8D
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial: 019DCFE396440D5890C74A3D6044448B2A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number: 0185
Signing time: Mon 27 Apr 2026 17:01:32 +0000
Manifest this update: Mon 27 Apr 2026 17:01:32 +0000
Manifest next update: Tue 28 Apr 2026 17:01:32 +0000
Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: 9pxrHqVpncEr/W2laZMlWqhS8mnmupU2ECX7YehtVVA=)
2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:96:44:0d:58:90:c7:4a:3d:60:44:44:8b:2a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
Validity
Not Before: Apr 27 17:01:32 2026 GMT
Not After : Apr 28 17:01:32 2026 GMT
Subject: CN=ada7d27f8269e3e6f4babcc3c8b87001e637158d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:5d:29:cc:b0:8f:f8:be:e0:da:d6:9a:d2:
ae:9a:a5:ec:41:f5:6d:e5:e0:97:28:f2:62:8d:eb:
d0:c1:66:5b:5a:4c:e6:b9:8e:ab:31:fc:a9:32:51:
52:2d:e9:a7:97:ee:a1:cf:67:61:56:9d:7f:24:57:
b4:cd:ed:49:75:53:73:a5:80:31:30:b5:7b:86:c8:
7a:8c:18:5a:3e:1b:10:2c:dd:d9:17:0f:33:4a:fa:
12:cf:4f:9d:e5:6d:7b:90:6f:e3:e1:ba:04:9b:2c:
0b:de:a3:ae:b5:75:bf:2c:0f:69:e0:a9:a2:25:8d:
52:d4:76:81:44:5b:45:4e:92:6d:60:3a:0f:b9:af:
65:59:70:da:b7:fb:6d:ab:f3:c0:9d:ba:9c:1f:30:
eb:79:82:eb:99:22:8f:cc:82:59:19:2d:4e:f2:a7:
b1:8a:a1:d4:3b:1d:ec:e7:8d:18:22:4a:b6:98:fc:
30:c9:3c:a7:23:d3:38:b2:16:d6:d6:d5:b4:0e:cc:
4c:c4:47:b8:54:16:b4:b0:84:39:66:94:61:17:93:
26:a7:b2:0a:8e:7f:42:9f:3e:fe:b0:21:2d:aa:b5:
08:a1:76:46:a7:7b:c4:86:b1:ae:aa:7f:8e:a8:19:
79:a0:3f:1a:46:3c:26:c9:98:70:7e:06:c3:07:bb:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A7:D2:7F:82:69:E3:E6:F4:BA:BC:C3:C8:B8:70:01:E6:37:15:8D
X509v3 Authority Key Identifier:
keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ee:b3:2b:97:47:87:16:8c:b9:f3:5c:e4:ba:c1:ed:32:0d:
bd:98:07:04:b7:73:a0:f4:40:14:7d:60:98:cc:07:55:63:52:
8d:f3:fa:8b:e8:11:d2:23:e0:1f:d8:cc:11:9d:8e:c1:a2:fc:
7e:01:7c:8d:80:04:c9:db:9f:02:80:5d:1d:ae:4f:75:1f:ce:
da:7a:c6:a7:74:e0:80:62:6c:7c:f7:27:e6:d4:b9:9e:ee:28:
b9:67:de:2d:fa:36:ac:f4:60:3c:32:31:8d:bb:87:71:a0:b9:
51:41:33:e9:a3:48:80:e9:f9:04:53:11:4b:e8:2a:7f:62:a3:
19:cc:0e:3f:a8:29:e3:c0:a7:59:1f:b2:e3:e2:f0:11:30:8b:
ef:92:64:58:26:9e:9a:fa:7a:7a:d1:b3:bf:fe:00:8b:86:96:
45:25:a3:ef:f6:fe:56:99:65:61:f1:ab:94:0a:55:7b:5c:7f:
2f:29:30:75:71:47:fe:f6:5c:26:06:68:18:8b:42:c5:ac:60:
08:3e:f5:5a:8b:14:f7:be:da:0a:69:ad:a6:d4:1a:f6:db:ba:
5c:64:03:10:0f:60:61:79:af:76:2e:a2:b1:a9:5c:26:06:45:
25:43:c2:7c:fc:4f:1c:ba:5e:80:8f:e9:2e:80:8b:09:0b:3a:
d8:fc:a4:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P45ZEDViQx0o9YEREiyobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWE3MjkwZWMyOThjMWI2NGQ5ODYzMDZmMWIyNGQzZDMz
NjY5ODYwHhcNMjYwNDI3MTcwMTMyWhcNMjYwNDI4MTcwMTMyWjAzMTEwLwYDVQQD
EyhhZGE3ZDI3ZjgyNjllM2U2ZjRiYWJjYzNjOGI4NzAwMWU2MzcxNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlixdKcywj/i+4NrWmtKumqXsQfVt
5eCXKPJijevQwWZbWkzmuY6rMfypMlFSLemnl+6hz2dhVp1/JFe0ze1JdVNzpYAx
MLV7hsh6jBhaPhsQLN3ZFw8zSvoSz0+d5W17kG/j4boEmywL3qOutXW/LA9p4Kmi
JY1S1HaBRFtFTpJtYDoPua9lWXDat/ttq/PAnbqcHzDreYLrmSKPzIJZGS1O8qex
iqHUOx3s540YIkq2mPwwyTynI9M4shbW1tW0DsxMxEe4VBa0sIQ5ZpRhF5Mmp7IK
jn9Cnz7+sCEtqrUIoXZGp3vEhrGuqn+OqBl5oD8aRjwmyZhwfgbDB7sXIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2n0n+CaePm9Lq8w8i4cAHmNxWNMB8GA1UdIwQY
MBaAFBdacpDsKYwbZNmGMG8bJNPTNmmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzkt
N2VhZmY2YjBmOGNkLzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzktN2VhZmY2YjBmOGNk
LzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAne6zK5dH
hxaMufNc5LrB7TINvZgHBLdzoPRAFH1gmMwHVWNSjfP6i+gR0iPgH9jMEZ2OwaL8
fgF8jYAEydufAoBdHa5PdR/O2nrGp3TggGJsfPcn5tS5nu4ouWfeLfo2rPRgPDIx
jbuHcaC5UUEz6aNIgOn5BFMRS+gqf2KjGcwOP6gp48CnWR+y4+LwETCL75JkWCae
mvp6etGzv/4Ai4aWRSWj7/b+VpllYfGrlApVe1x/LykwdXFH/vZcJgZoGItCxaxg
CD71WosU977aCmmtptQa9tu6XGQDEA9gYXmvdi6isalcJgZFJUPCfPxPHLpegI/p
LoCLCQs62Pyk0g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:46:33 2026 by rpki-client