Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: h+is0xmxQtjsNCfij1w7KqBwZndvCjlVeHEER9rE7VI=
Subject key identifier: 60:5C:EF:5D:1F:21:5A:82:6C:0B:91:8C:0E:EA:68:DA:DE:EF:43:F5
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019F12D345E7605D26588873C667BF680BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 10:01:03 +0000
Manifest this update: Mon 29 Jun 2026 10:01:03 +0000
Manifest next update: Tue 30 Jun 2026 10:01:03 +0000
Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: 2RiTwgad9FRnUn/+oEKXBemRxfrhmU0DRlMvBhgkuyU=)
3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:45:e7:60:5d:26:58:88:73:c6:67:bf:68:0b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jun 29 10:01:03 2026 GMT
Not After : Jun 30 10:01:03 2026 GMT
Subject: CN=605cef5d1f215a826c0b918c0eea68dadeef43f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:da:8c:ba:92:a1:3d:8b:19:17:4e:ec:96:
77:b1:1e:30:0e:5e:d9:45:cd:27:b7:22:10:d6:eb:
87:80:18:b8:5d:52:46:99:6c:b7:40:b2:15:51:cd:
8f:16:9d:b9:6e:63:c9:6b:10:60:28:54:a0:c6:08:
ce:db:6c:e7:0a:09:53:9d:54:5f:09:1f:2f:a7:d7:
75:88:61:68:f9:a8:af:81:b3:d7:3d:84:1e:80:9f:
cf:ab:30:a5:03:39:2d:64:d7:a3:30:87:20:5b:a0:
62:d9:f9:fd:5c:fb:57:52:43:34:62:2a:77:db:9c:
22:3e:a9:f1:cd:33:d5:7c:e8:67:91:c5:70:48:f5:
b7:9e:64:de:2d:a8:23:0d:e2:36:de:cb:f9:ba:80:
4c:54:f2:16:0d:cd:46:f7:7c:96:2a:9d:f3:52:7e:
fe:48:11:9e:43:18:19:a6:e3:25:86:ed:2c:08:59:
88:db:fb:2d:fd:99:97:45:3f:46:08:49:42:8d:da:
be:f6:52:8f:eb:e9:40:c2:73:9e:61:a7:45:f1:81:
b6:85:1c:b2:6c:b8:72:09:00:88:03:9d:dc:1f:a2:
4d:a3:6c:f5:ff:02:76:08:b5:2b:3f:93:0d:cf:41:
69:cc:09:da:bd:bb:7f:6f:fe:2d:07:e6:3c:1b:9e:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:EF:5D:1F:21:5A:82:6C:0B:91:8C:0E:EA:68:DA:DE:EF:43:F5
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:59:04:43:07:07:3c:0d:2e:3e:11:f2:fd:00:0d:92:f2:59:
95:53:04:45:8d:32:35:73:c3:ec:b2:46:c6:b3:04:3a:39:78:
22:e5:cb:36:f5:fd:3d:d9:2a:e3:40:f2:cc:8c:b6:2d:52:e0:
bf:35:f6:de:68:4e:f3:5c:b2:a7:c1:7d:65:87:52:c5:c9:6a:
53:79:cb:8a:e5:8e:80:c2:98:04:67:59:96:34:a1:eb:95:67:
d4:e0:f2:12:b1:bc:e9:f4:e8:1c:70:80:6e:0a:df:ea:aa:c9:
dc:53:8f:de:08:07:27:e6:13:8a:0d:81:8a:c5:f8:aa:44:f6:
24:ae:d0:11:91:0d:a2:a9:4a:03:74:ff:43:68:a7:61:f7:00:
91:6b:db:5d:2f:a8:47:91:98:c2:11:4a:6d:34:62:0d:7e:9c:
d3:41:34:a9:66:4d:c1:4f:00:00:7b:ff:19:75:dc:05:01:a7:
77:53:93:e8:31:c6:2f:54:58:96:d2:be:67:e2:6a:76:65:31:
62:6f:c6:32:e8:4d:83:43:14:1e:fc:c4:c2:dd:fa:0c:a9:09:
b2:84:28:1d:ad:e7:f4:2d:09:be:e2:8c:51:1c:5b:42:6b:c8:
7c:c8:df:bd:ac:97:c8:ea:f5:0c:0e:e5:51:71:63:60:e4:46:
fc:fb:7f:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8S00XnYF0mWIhzxme/aAvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1
MjE3NDYwHhcNMjYwNjI5MTAwMTAzWhcNMjYwNjMwMTAwMTAzWjAzMTEwLwYDVQQD
Eyg2MDVjZWY1ZDFmMjE1YTgyNmMwYjkxOGMwZWVhNjhkYWRlZWY0M2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14najLqSoT2LGRdO7JZ3sR4wDl7Z
Rc0ntyIQ1uuHgBi4XVJGmWy3QLIVUc2PFp25bmPJaxBgKFSgxgjO22znCglTnVRf
CR8vp9d1iGFo+aivgbPXPYQegJ/PqzClAzktZNejMIcgW6Bi2fn9XPtXUkM0Yip3
25wiPqnxzTPVfOhnkcVwSPW3nmTeLagjDeI23sv5uoBMVPIWDc1G93yWKp3zUn7+
SBGeQxgZpuMlhu0sCFmI2/st/ZmXRT9GCElCjdq+9lKP6+lAwnOeYadF8YG2hRyy
bLhyCQCIA53cH6JNo2z1/wJ2CLUrP5MNz0FpzAnavbt/b/4tB+Y8G55EtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBc710fIVqCbAuRjA7qaNre70P1MB8GA1UdIwQY
MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt
NTBmYzRkNTU3ZDA4LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4
LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1kEQwcH
PA0uPhHy/QANkvJZlVMERY0yNXPD7LJGxrMEOjl4IuXLNvX9Pdkq40DyzIy2LVLg
vzX23mhO81yyp8F9ZYdSxclqU3nLiuWOgMKYBGdZljSh65Vn1ODyErG86fToHHCA
bgrf6qrJ3FOP3ggHJ+YTig2BisX4qkT2JK7QEZENoqlKA3T/Q2inYfcAkWvbXS+o
R5GYwhFKbTRiDX6c00E0qWZNwU8AAHv/GXXcBQGnd1OT6DHGL1RYltK+Z+JqdmUx
Ym/GMuhNg0MUHvzEwt36DKkJsoQoHa3n9C0JvuKMURxbQmvIfMjfvayXyOr1DA7l
UXFjYORG/Pt//A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:35:14 2026 by rpki-client