Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: 57QNGQfcE9lyN0hjqWAyz0vUNPTD0cZZL4EhjFA2enU=
Subject key identifier: 49:9E:01:FA:6D:57:5E:BE:34:89:53:95:82:C2:F3:0F:CB:FC:EA:09
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 019D39777154EDFE790BF215B05621ECFB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 1233
Signing time: Sun 29 Mar 2026 12:00:22 +0000
Manifest this update: Sun 29 Mar 2026 12:00:22 +0000
Manifest next update: Mon 30 Mar 2026 12:00:22 +0000
Files and hashes: 1: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: OshfQj5BR4xut+a39kOVQY3J/revEMjSkfLHzmmuM2s=)
2: aIdT9TU8Mchvi1KT8xDqqF_aYww.roa (hash: L0SKCt/IF1f3xCcEQuDLjZD6COmk+1+SlyBXGktU14Q=)
3: qfbmdAxrKJhL7MuKfw49467oMe0.roa (hash: tAJCqrPUfCnpIMZF6i2OOK4HRvotFOEnPGbHmvdQqEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:71:54:ed:fe:79:0b:f2:15:b0:56:21:ec:fb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Mar 29 12:00:22 2026 GMT
Not After : Mar 30 12:00:22 2026 GMT
Subject: CN=499e01fa6d575ebe3489539582c2f30fcbfcea09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:8f:7c:47:5a:73:04:60:53:f2:63:d8:e4:
92:16:84:be:6c:e5:51:ff:d0:be:e1:2e:63:47:d9:
7e:da:e1:0a:3f:0d:00:1b:49:20:cc:d8:c8:b9:6b:
78:57:bf:0b:ca:aa:d1:b6:55:45:3b:31:55:9b:07:
0e:5a:9c:df:4f:2f:2c:70:c7:08:03:0b:d2:57:81:
03:ab:06:29:e9:88:ef:1c:5e:cd:6a:91:49:e7:53:
47:50:fd:6c:14:2e:4d:64:54:6c:bb:a7:99:de:82:
a0:89:ae:8b:91:a5:39:e7:8c:a8:16:6e:40:23:c3:
4c:97:e2:5a:df:6d:0d:c9:57:ee:60:a9:b6:51:57:
32:b8:5f:bc:67:1c:71:30:96:1d:68:fd:a6:a1:f2:
5b:e3:33:c1:9e:17:e1:0d:b4:32:ac:a5:dc:e0:e6:
fb:d2:33:c7:06:f0:85:0f:4d:56:6a:ba:af:0c:f4:
05:6e:bc:36:9b:76:41:10:d6:af:14:fa:ae:69:fd:
7c:db:ce:84:92:3f:f8:ba:67:05:a9:66:00:2e:20:
2e:3c:e8:4e:b3:0e:19:ba:25:37:ed:5e:27:1a:08:
c8:96:97:9c:a9:4e:d7:54:5b:25:2f:a0:65:ec:7d:
2b:3e:52:87:f1:ee:61:09:03:72:55:b1:ce:75:77:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9E:01:FA:6D:57:5E:BE:34:89:53:95:82:C2:F3:0F:CB:FC:EA:09
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ab:43:f9:03:58:2f:03:3b:ae:54:58:6b:df:43:ca:84:78:
0d:be:09:51:fa:51:48:6b:82:4f:c6:33:e9:9d:0c:36:e6:dd:
6b:5f:42:fb:e8:1a:d8:d2:fa:94:9a:25:90:8e:e3:99:92:bb:
b2:62:b6:85:ab:25:07:f3:17:fb:16:16:d2:63:91:9b:c5:e4:
ba:dd:42:db:7c:12:8f:4a:1e:0e:75:e3:5b:1c:b6:2d:d9:4d:
eb:cb:b9:37:46:34:0c:77:fb:33:b5:a1:3c:c7:a6:b0:b4:89:
11:96:bd:83:ca:ac:ec:64:7a:62:c3:32:21:42:d1:22:47:ea:
d5:50:33:0e:bf:d0:fe:02:ba:c7:3f:d0:fc:da:02:bc:95:ec:
7a:18:68:96:8d:49:52:1f:04:d9:f8:60:73:cb:9d:99:f0:8f:
a1:bd:4e:4f:fc:41:bc:d1:f2:de:5f:a8:d4:42:e7:94:d6:9b:
3f:bd:bf:01:87:01:fe:d8:d1:1b:ec:1d:6b:59:21:a0:5b:d3:
f3:dd:f2:1f:84:df:92:f8:c9:c3:e9:fe:8c:99:c8:d4:91:42:
af:eb:c8:cb:40:00:fd:ff:98:0a:1d:be:b7:f0:b8:d2:ff:cb:
88:2a:eb:47:b8:d9:d2:4d:94:34:c3:a4:77:1f:34:dc:41:46:
60:21:32:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d3FU7f55C/IVsFYh7PufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz
YjBmYjgwHhcNMjYwMzI5MTIwMDIyWhcNMjYwMzMwMTIwMDIyWjAzMTEwLwYDVQQD
Eyg0OTllMDFmYTZkNTc1ZWJlMzQ4OTUzOTU4MmMyZjMwZmNiZmNlYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MCPfEdacwRgU/Jj2OSSFoS+bOVR
/9C+4S5jR9l+2uEKPw0AG0kgzNjIuWt4V78LyqrRtlVFOzFVmwcOWpzfTy8scMcI
AwvSV4EDqwYp6YjvHF7NapFJ51NHUP1sFC5NZFRsu6eZ3oKgia6LkaU554yoFm5A
I8NMl+Ja320NyVfuYKm2UVcyuF+8ZxxxMJYdaP2mofJb4zPBnhfhDbQyrKXc4Ob7
0jPHBvCFD01WarqvDPQFbrw2m3ZBENavFPquaf18286Ekj/4umcFqWYALiAuPOhO
sw4ZuiU37V4nGgjIlpecqU7XVFslL6Bl7H0rPlKH8e5hCQNyVbHOdXelbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmeAfptV16+NIlTlYLC8w/L/OoJMB8GA1UdIwQY
MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt
ZmZiMmVmNGJmZTI1LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1
LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqtD+QNY
LwM7rlRYa99DyoR4Db4JUfpRSGuCT8Yz6Z0MNubda19C++ga2NL6lJolkI7jmZK7
smK2haslB/MX+xYW0mORm8Xkut1C23wSj0oeDnXjWxy2LdlN68u5N0Y0DHf7M7Wh
PMemsLSJEZa9g8qs7GR6YsMyIULRIkfq1VAzDr/Q/gK6xz/Q/NoCvJXsehholo1J
Uh8E2fhgc8udmfCPob1OT/xBvNHy3l+o1ELnlNabP72/AYcB/tjRG+wda1khoFvT
893yH4TfkvjJw+n+jJnI1JFCr+vIy0AA/f+YCh2+t/C40v/LiCrrR7jZ0k2UNMOk
dx803EFGYCEydA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:33 2026 by rpki-client