Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: d/M5Fbp3KoYTWl+ZmaOArh7Y1pghAAWSGnS52HJ9tQM=
Subject key identifier: D5:0B:35:E7:6F:56:FB:09:CA:B6:FF:A6:94:51:A5:79:C8:08:FF:FD
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 019E1FB610A0BECD6E0DA3BC99E2E8321F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 01D8
Signing time: Wed 13 May 2026 05:01:25 +0000
Manifest this update: Wed 13 May 2026 05:01:25 +0000
Manifest next update: Thu 14 May 2026 05:01:25 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: R0oeCU+xRs/6qOe4yx4xI24zCWV96MvpxdqZolTHmo8=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: mwCzzvweJkXnsuKQFU_XqrjgkuY.roa (hash: oIsIZ9PAHY73DINk0iQBEaX5PRlBNYPUighzgQGS/2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:10:a0:be:cd:6e:0d:a3:bc:99:e2:e8:32:1f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: May 13 05:01:25 2026 GMT
Not After : May 14 05:01:25 2026 GMT
Subject: CN=d50b35e76f56fb09cab6ffa69451a579c808fffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:81:c3:9c:c5:8d:44:c5:cf:b7:cf:a3:76:
3a:d7:fa:50:27:ee:1a:9b:1d:2a:6e:35:ba:37:83:
5b:96:cf:69:a1:5c:d5:a4:59:a3:6d:a9:2c:41:ad:
72:a9:54:c0:fc:76:19:0e:5c:24:36:60:cc:9a:92:
3a:d4:43:a3:85:87:5a:c8:3b:27:7a:39:6d:93:84:
99:9f:67:d2:f5:76:2e:c6:1b:0c:f1:02:12:14:5d:
a1:55:72:ee:f1:50:7d:ab:2b:da:30:5a:73:14:5d:
57:a5:e2:17:56:10:ef:d3:14:72:7d:77:57:e6:7c:
d4:9c:5a:ed:d3:e3:24:78:41:ab:cb:d0:1b:8b:ed:
dc:2c:17:3c:d9:5e:5a:07:34:4e:a1:f6:46:0c:9e:
05:da:09:f1:ed:86:85:87:02:a8:cb:1a:84:58:46:
c7:42:9f:fd:bf:b2:d6:ec:2f:cf:46:4e:5a:cc:1d:
2d:14:3e:2b:1c:17:3d:fa:41:17:a6:c5:28:a1:d1:
cb:5a:de:54:33:74:ea:f6:a7:3b:76:c4:98:39:91:
0a:e0:ff:48:95:07:9e:72:6f:42:10:fd:ad:81:83:
e3:7e:5e:f0:cc:f0:db:4c:79:a6:33:94:e2:93:b1:
4d:13:05:61:ce:94:31:02:b9:43:e1:fc:fc:9c:5e:
32:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0B:35:E7:6F:56:FB:09:CA:B6:FF:A6:94:51:A5:79:C8:08:FF:FD
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3a:0a:8d:88:44:b8:df:52:19:ba:63:ff:ab:8f:ea:98:28:
92:11:3c:49:4e:f9:cb:e8:65:57:0f:84:9d:32:8d:2f:af:52:
bb:53:2c:72:16:e9:a4:20:7c:3a:48:36:b1:23:ed:a9:77:b5:
32:2f:49:bb:be:fb:e7:9b:67:22:08:8b:c9:1f:28:71:51:c5:
56:8f:5d:b6:03:24:a5:e6:ef:4d:6f:00:8f:b4:cb:9a:76:3f:
69:10:c5:8b:a7:41:8a:29:85:ba:13:4e:2f:d7:97:d5:03:42:
36:95:be:aa:79:ce:75:bc:fc:15:72:e1:33:1b:2b:e4:ed:a0:
db:bb:54:c4:d8:b9:ca:91:b4:13:8d:24:f8:51:7b:cf:0a:e8:
a0:75:27:09:b2:2b:6b:01:e0:d4:a4:51:3a:bc:bd:c2:4a:72:
f9:bb:09:7f:e6:f4:37:d6:2a:77:4f:ea:25:be:53:f9:72:83:
99:b3:a3:8e:1c:02:41:0e:80:66:05:68:f5:98:f0:9b:77:c6:
94:2a:74:6d:48:dc:69:60:ab:c7:b5:57:39:92:76:01:67:b7:
31:f1:c6:4c:27:36:44:fc:6c:c9:8f:00:ec:e4:c6:ea:6b:ba:
36:98:d9:15:6b:99:93:27:c5:60:e5:68:91:1d:17:14:42:b3:
bc:2e:55:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fthCgvs1uDaO8meLoMh8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YTU1MzYxMmQ5NGIwOTFiMzY1OWIyMTIwYmM4ZWZiMjYw
ZTdkMzAwHhcNMjYwNTEzMDUwMTI1WhcNMjYwNTE0MDUwMTI1WjAzMTEwLwYDVQQD
EyhkNTBiMzVlNzZmNTZmYjA5Y2FiNmZmYTY5NDUxYTU3OWM4MDhmZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVqBw5zFjUTFz7fPo3Y61/pQJ+4a
mx0qbjW6N4Nbls9poVzVpFmjbaksQa1yqVTA/HYZDlwkNmDMmpI61EOjhYdayDsn
ejltk4SZn2fS9XYuxhsM8QISFF2hVXLu8VB9qyvaMFpzFF1XpeIXVhDv0xRyfXdX
5nzUnFrt0+MkeEGry9Abi+3cLBc82V5aBzROofZGDJ4F2gnx7YaFhwKoyxqEWEbH
Qp/9v7LW7C/PRk5azB0tFD4rHBc9+kEXpsUoodHLWt5UM3Tq9qc7dsSYOZEK4P9I
lQeecm9CEP2tgYPjfl7wzPDbTHmmM5Tik7FNEwVhzpQxArlD4fz8nF4yFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNULNedvVvsJyrb/ppRRpXnICP/9MB8GA1UdIwQY
MBaAFNalU2EtlLCRs2WbISC8jvsmDn0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQt
ZTA1OTA2Y2I2OTQ4LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xODhmY2QtZDY4OS00MzZkLWE2ODQtZTA1OTA2Y2I2OTQ4
LzEvMXFWVFlTMlVzSkd6WlpzaElMeU8teVlPZlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjoKjYhE
uN9SGbpj/6uP6pgokhE8SU75y+hlVw+EnTKNL69Su1MschbppCB8Okg2sSPtqXe1
Mi9Ju77755tnIgiLyR8ocVHFVo9dtgMkpebvTW8Aj7TLmnY/aRDFi6dBiimFuhNO
L9eX1QNCNpW+qnnOdbz8FXLhMxsr5O2g27tUxNi5ypG0E40k+FF7zwrooHUnCbIr
awHg1KRROry9wkpy+bsJf+b0N9Yqd0/qJb5T+XKDmbOjjhwCQQ6AZgVo9Zjwm3fG
lCp0bUjcaWCrx7VXOZJ2AWe3MfHGTCc2RPxsyY8A7OTG6mu6NpjZFWuZkyfFYOVo
kR0XFEKzvC5V1A==
-----END CERTIFICATE-----
Generated at Wed May 13 13:38:32 2026 by rpki-client