Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier: KpUezBC9nL6N2yHcpBd/Vg8E/AHWU1C5eT/01EY5ytM=
Subject key identifier: 61:94:E3:A0:F8:3E:60:B9:66:E0:5F:EF:68:C5:A8:6E:CE:43:0D:11
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial: 019FA2CDC77AA77A05E434D3EF8735506034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number: 05D2
Signing time: Mon 27 Jul 2026 09:00:22 +0000
Manifest this update: Mon 27 Jul 2026 09:00:22 +0000
Manifest next update: Tue 28 Jul 2026 09:00:22 +0000
Files and hashes: 1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: tj/7UFed2uOMBsLDn5hYa8SizwTbEV4K4vzOdnK0aZU=)
2: Kcqh7YgMjXr3Su1lIN7jhAfcEIc.roa (hash: VypdL+t+Km3avCeeLRSu2LBHbDwKwpUGNeK6Kc08dJE=)
3: hI3e7uK5dcpU9lEziXhTJOX8ujo.roa (hash: jWqaOCgUgQhWBYlF8RKOY20G2OtGLon5g45aLhAiSTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:c7:7a:a7:7a:05:e4:34:d3:ef:87:35:50:60:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
Validity
Not Before: Jul 27 09:00:22 2026 GMT
Not After : Jul 28 09:00:22 2026 GMT
Subject: CN=6194e3a0f83e60b966e05fef68c5a86ece430d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:7d:94:29:eb:27:76:55:87:b3:fa:a6:56:
4d:a4:8e:0c:c8:fb:23:12:53:5d:a6:85:f2:f6:b7:
96:1d:dc:39:43:f2:6e:21:1a:8d:08:51:52:24:9c:
ed:65:be:a2:eb:c4:4f:46:19:69:da:d2:02:ab:10:
11:9c:f4:4d:73:a7:22:33:29:71:9d:bb:ee:26:e9:
80:70:28:1b:e0:bd:49:ac:09:50:75:8e:80:eb:64:
3b:c0:52:ea:1f:32:4a:18:5c:dd:f6:ab:9a:a6:42:
fc:dc:b8:c5:fb:b3:2c:3b:c1:5e:17:21:d1:c4:a5:
21:0b:74:c0:ed:e0:a0:5c:7a:ef:a4:76:a5:ea:04:
c2:e6:ae:a6:19:e1:6e:7d:15:78:29:d9:77:56:18:
c7:2f:ab:cf:49:5e:62:e0:6e:4d:8a:11:40:89:c2:
dc:6c:21:b0:7a:58:65:5e:18:f8:b3:0d:e3:8e:16:
c4:9b:aa:84:80:ba:1d:b0:dc:f1:75:0d:34:f9:5f:
93:d0:ae:e7:59:59:32:b8:54:7a:a8:05:7e:05:fa:
20:1b:6d:88:37:7d:39:bb:8f:4f:55:34:3c:c2:33:
84:b2:c9:58:31:b1:fa:bc:d2:15:0b:c6:89:5f:3f:
42:1e:81:8b:66:82:56:84:75:1f:4b:28:63:54:bf:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:E3:A0:F8:3E:60:B9:66:E0:5F:EF:68:C5:A8:6E:CE:43:0D:11
X509v3 Authority Key Identifier:
keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:07:54:3a:67:1f:e2:fc:41:1d:3c:99:6e:46:0f:aa:bf:d7:
ec:e0:57:3f:10:83:51:07:1d:cc:c8:3d:66:e7:81:82:33:d0:
1b:fe:76:28:75:e2:93:47:5e:13:80:d4:36:58:af:a3:11:65:
52:71:3f:f3:b0:a5:9d:40:09:9d:df:2c:90:f6:2f:82:8a:74:
09:a3:e2:dd:ec:85:87:da:40:92:8a:1b:60:f2:94:3d:e7:4b:
6e:05:58:db:2e:63:af:4c:bd:ef:56:4f:d4:e4:03:39:65:51:
0e:f6:81:1c:36:d3:65:b2:7e:f5:dc:a8:69:f7:03:12:1f:35:
3f:26:42:5b:b1:f0:46:8b:37:e4:f3:28:40:05:23:7c:13:a7:
c4:d4:ef:a3:e2:22:b0:0c:5c:47:6c:37:c2:06:62:38:2d:0c:
7a:a7:21:04:26:2f:e4:1c:77:84:fd:56:2a:74:d7:bc:84:39:
10:43:20:0a:a1:f7:b4:a2:38:5e:75:dd:dc:b5:dd:78:c9:01:
eb:31:37:a3:5d:e9:fa:21:b4:ce:f3:22:e6:8d:ad:99:b3:a6:
2f:7e:5d:f2:5f:0b:f7:cb:0d:02:db:cc:5c:ea:fe:06:8c:74:
db:5d:33:cf:54:0c:58:56:df:51:b5:c8:da:48:c7:cf:73:8f:
4c:45:97:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izcd6p3oF5DTT74c1UGA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDc0NzE0MTQyZjgzOTcwMTQ4ZmFiMGVjM2UyMTE3YzM5
M2M0OTEwHhcNMjYwNzI3MDkwMDIyWhcNMjYwNzI4MDkwMDIyWjAzMTEwLwYDVQQD
Eyg2MTk0ZTNhMGY4M2U2MGI5NjZlMDVmZWY2OGM1YTg2ZWNlNDMwZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tN9lCnrJ3ZVh7P6plZNpI4MyPsj
ElNdpoXy9reWHdw5Q/JuIRqNCFFSJJztZb6i68RPRhlp2tICqxARnPRNc6ciMylx
nbvuJumAcCgb4L1JrAlQdY6A62Q7wFLqHzJKGFzd9quapkL83LjF+7MsO8FeFyHR
xKUhC3TA7eCgXHrvpHal6gTC5q6mGeFufRV4Kdl3VhjHL6vPSV5i4G5NihFAicLc
bCGwelhlXhj4sw3jjhbEm6qEgLodsNzxdQ00+V+T0K7nWVkyuFR6qAV+BfogG22I
N305u49PVTQ8wjOEsslYMbH6vNIVC8aJXz9CHoGLZoJWhHUfSyhjVL93fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGU46D4PmC5ZuBf72jFqG7OQw0RMB8GA1UdIwQY
MBaAFNQHRxQUL4OXAUj6sOw+IRfDk8SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTkt
ZDc5Y2UyZGVlYTcwLzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTktZDc5Y2UyZGVlYTcw
LzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAdUOmcf
4vxBHTyZbkYPqr/X7OBXPxCDUQcdzMg9ZueBgjPQG/52KHXik0deE4DUNlivoxFl
UnE/87ClnUAJnd8skPYvgop0CaPi3eyFh9pAkoobYPKUPedLbgVY2y5jr0y971ZP
1OQDOWVRDvaBHDbTZbJ+9dyoafcDEh81PyZCW7HwRos35PMoQAUjfBOnxNTvo+Ii
sAxcR2w3wgZiOC0MeqchBCYv5Bx3hP1WKnTXvIQ5EEMgCqH3tKI4XnXd3LXdeMkB
6zE3o13p+iG0zvMi5o2tmbOmL35d8l8L98sNAtvMXOr+Box0210zz1QMWFbfUbXI
2kjHz3OPTEWXTA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:13:45 2026 by rpki-client