Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: hmTpIaEVIMO6+PN6j81rsU+J89tGfySs0zGkdvukDnI=
Subject key identifier: 3E:A4:CA:91:61:DA:E0:86:F2:13:FA:E2:77:6C:B4:CE:83:E5:AE:61
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 01A17C9737174EED02CB75F11437A108A929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 1468
Signing time: Tue 27 Oct 2026 09:00:47 +0000
Manifest this update: Tue 27 Oct 2026 09:00:47 +0000
Manifest next update: Wed 28 Oct 2026 09:00:47 +0000
Files and hashes: 1: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: 5xZ2N1IXQu5bxJ87VZxZI4jZwTAdynecS6RPO6Adwj8=)
2: aIdT9TU8Mchvi1KT8xDqqF_aYww.roa (hash: L0SKCt/IF1f3xCcEQuDLjZD6COmk+1+SlyBXGktU14Q=)
3: qfbmdAxrKJhL7MuKfw49467oMe0.roa (hash: tAJCqrPUfCnpIMZF6i2OOK4HRvotFOEnPGbHmvdQqEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:37:17:4e:ed:02:cb:75:f1:14:37:a1:08:a9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Oct 27 09:00:47 2026 GMT
Not After : Oct 28 09:00:47 2026 GMT
Subject: CN=3ea4ca9161dae086f213fae2776cb4ce83e5ae61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ce:ad:4f:9e:bb:d6:a5:48:38:08:f4:3f:4f:
35:46:87:a2:b2:a1:fb:11:ea:cb:b1:79:fa:16:91:
bd:2c:54:50:08:dd:72:a0:50:10:61:15:71:5e:83:
e9:7c:f9:db:44:48:e3:cb:96:2f:21:d6:34:d6:e1:
62:72:d2:54:5b:c0:08:b9:b9:02:b0:75:ae:03:e9:
bd:7c:71:4f:b8:a5:5f:1d:97:71:4f:9b:9d:87:b0:
c1:73:71:cd:b3:82:2a:e7:94:ae:01:6a:7b:51:86:
ea:78:04:cc:a9:29:e2:02:56:0f:3d:06:04:de:f0:
0e:b3:c8:93:11:b7:d4:9f:a5:e3:61:fd:34:52:51:
54:eb:db:fb:a5:d9:40:ef:94:30:39:99:5b:5f:21:
eb:f6:6b:b2:e7:15:d7:f2:ab:78:c0:28:88:8d:cf:
c9:51:78:d2:1e:32:35:00:87:d9:65:0b:1c:65:83:
5b:49:d0:ee:7a:bb:e7:d8:8b:9c:9c:18:75:e8:81:
b1:6a:51:e5:7d:13:cf:a7:90:a6:4e:f2:81:37:71:
37:56:f4:38:62:a8:d7:e6:60:a5:cb:f8:4e:b0:36:
cb:a0:9a:ba:b4:1c:b2:f1:88:d1:5c:de:a4:ac:fa:
d1:ea:58:4a:63:75:98:21:83:30:14:b3:9d:ce:3b:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:CA:91:61:DA:E0:86:F2:13:FA:E2:77:6C:B4:CE:83:E5:AE:61
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:33:73:cf:87:ba:88:fa:ee:1f:72:c7:4e:60:a3:34:0c:92:
3b:45:63:e4:97:67:e8:b9:8a:6f:c5:48:4e:07:38:47:d6:46:
8f:a4:d0:c7:a8:2a:a5:0e:fd:1a:c0:94:28:c6:4c:c1:bf:ed:
c7:6c:ff:5a:ee:53:64:e6:1e:28:a8:8f:e7:33:f3:de:e0:44:
5e:af:2c:f0:fa:2c:e7:c2:11:79:6c:1b:49:b9:05:d4:a4:2d:
dd:17:b2:5a:15:af:2d:05:d5:e6:0f:59:f1:9d:ff:c1:08:41:
13:3d:c8:db:ec:36:23:36:0d:17:27:11:f1:ad:12:6b:b9:b5:
a3:20:25:e2:8e:b5:a7:08:8f:a5:62:5f:42:1b:d5:47:40:bf:
2d:f0:14:6b:9e:0d:32:56:b6:21:75:ea:2d:46:e8:e7:d3:51:
ba:a5:d2:e1:94:95:f9:97:9f:88:99:3a:a3:94:33:0a:d6:e7:
a2:b5:2b:88:ef:d9:bb:82:83:71:3c:46:64:6f:6c:dd:c0:15:
fe:07:c6:20:71:02:68:de:76:5c:43:8d:8e:88:c6:f1:84:63:
79:b3:b1:08:55:83:14:ab:7e:00:3e:ec:7c:c1:ee:79:91:ac:
ba:71:bc:c1:16:7a:84:a1:2e:3c:04:9d:dd:42:e7:69:65:7d:
29:ac:3f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8lzcXTu0Cy3XxFDehCKkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz
YjBmYjgwHhcNMjYxMDI3MDkwMDQ3WhcNMjYxMDI4MDkwMDQ3WjAzMTEwLwYDVQQD
EygzZWE0Y2E5MTYxZGFlMDg2ZjIxM2ZhZTI3NzZjYjRjZTgzZTVhZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA486tT5671qVIOAj0P081RoeisqH7
EerLsXn6FpG9LFRQCN1yoFAQYRVxXoPpfPnbREjjy5YvIdY01uFictJUW8AIubkC
sHWuA+m9fHFPuKVfHZdxT5udh7DBc3HNs4Iq55SuAWp7UYbqeATMqSniAlYPPQYE
3vAOs8iTEbfUn6XjYf00UlFU69v7pdlA75QwOZlbXyHr9muy5xXX8qt4wCiIjc/J
UXjSHjI1AIfZZQscZYNbSdDuervn2IucnBh16IGxalHlfRPPp5CmTvKBN3E3VvQ4
YqjX5mCly/hOsDbLoJq6tByy8YjRXN6krPrR6lhKY3WYIYMwFLOdzjtwEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6kypFh2uCG8hP64ndstM6D5a5hMB8GA1UdIwQY
MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt
ZmZiMmVmNGJmZTI1LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1
LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDNzz4e6
iPruH3LHTmCjNAySO0Vj5Jdn6LmKb8VITgc4R9ZGj6TQx6gqpQ79GsCUKMZMwb/t
x2z/Wu5TZOYeKKiP5zPz3uBEXq8s8Pos58IReWwbSbkF1KQt3ReyWhWvLQXV5g9Z
8Z3/wQhBEz3I2+w2IzYNFycR8a0Sa7m1oyAl4o61pwiPpWJfQhvVR0C/LfAUa54N
Mla2IXXqLUbo59NRuqXS4ZSV+ZefiJk6o5QzCtbnorUriO/Zu4KDcTxGZG9s3cAV
/gfGIHECaN52XEONjojG8YRjebOxCFWDFKt+AD7sfMHueZGsunG8wRZ6hKEuPASd
3ULnaWV9Kaw/5w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:28 2026 by rpki-client