Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: SAg8kPeQWioLP5LKJhklKbaoZW6pc17LZ/EhXYiH8KY=
Subject key identifier: 1D:14:D0:31:31:5E:94:25:09:F5:0C:12:F9:E7:5C:DE:EB:32:C7:B9
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 019DCC73D9BC8C4A4FEFD3E247B8B4A8375F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 11F1
Signing time: Mon 27 Apr 2026 01:00:37 +0000
Manifest this update: Mon 27 Apr 2026 01:00:37 +0000
Manifest next update: Tue 28 Apr 2026 01:00:37 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: YFlRQXyHuGMLH5OBbDfXsysAwTDcYOWI+z/vxmZneYE=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:73:d9:bc:8c:4a:4f:ef:d3:e2:47:b8:b4:a8:37:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Apr 27 01:00:37 2026 GMT
Not After : Apr 28 01:00:37 2026 GMT
Subject: CN=1d14d031315e942509f50c12f9e75cdeeb32c7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:2c:32:eb:6a:a7:d1:ad:89:b8:05:4a:41:
67:e1:8c:d4:97:21:c2:d9:ce:d4:15:36:07:c9:58:
ab:7b:7d:c7:d6:08:e8:67:d9:19:50:bb:10:06:a0:
26:21:df:c6:9d:7f:ab:5b:29:2c:40:b4:45:ae:57:
6b:a8:77:d7:7f:cc:f2:2d:b7:19:4b:6e:8c:54:de:
6f:30:34:e3:89:48:28:cc:a2:f1:27:19:70:8e:0d:
c2:75:b4:94:a2:ee:73:b5:1f:19:cc:f7:85:f5:1b:
e7:55:bb:89:45:27:22:3a:9d:19:83:c9:ac:9e:da:
ff:67:4a:2e:2e:c0:21:da:65:05:40:8e:11:d2:62:
c3:15:70:ba:49:9d:05:b2:9a:1c:98:26:af:ae:ff:
93:bc:e1:69:4c:75:d5:73:73:47:79:8b:64:9e:c0:
3f:cc:b8:b5:a6:5d:6e:25:2a:aa:25:3c:ca:88:f6:
05:84:2e:3f:87:bc:e4:33:60:5f:4c:93:aa:8a:94:
d4:e5:b3:70:2b:dc:36:dd:a2:6d:63:62:3c:89:ca:
b9:00:16:87:8d:ed:4b:cf:91:27:bb:d6:7a:b1:bb:
a5:51:bb:7d:e5:c7:c7:9f:9a:cb:c1:4a:ec:a4:09:
11:58:f9:d6:c1:a9:d5:aa:ae:6d:75:a9:7d:81:9e:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:14:D0:31:31:5E:94:25:09:F5:0C:12:F9:E7:5C:DE:EB:32:C7:B9
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:96:90:35:c9:28:b4:eb:4e:c9:16:6e:d3:ea:24:e2:b9:7c:
c6:b8:ba:74:f6:f9:56:3b:e1:d1:7f:a5:42:5a:60:a7:3c:77:
3b:d6:75:19:cf:26:a1:d9:72:44:ac:03:6d:2c:e3:2f:08:0e:
54:b1:f6:2a:22:91:30:31:a7:e4:96:a6:3b:59:8e:8b:9a:5b:
27:dd:b7:bf:00:14:42:50:56:40:42:bc:2b:f6:20:80:d8:1d:
54:05:0d:85:58:b1:86:1c:b6:30:26:a7:19:dc:b3:38:58:55:
34:ff:51:1b:40:b9:23:42:e1:5e:1b:aa:af:2a:d4:3d:62:b8:
88:f0:eb:14:15:63:bf:e8:9c:3a:a9:a5:55:3c:60:c5:d5:99:
57:ea:d3:73:5f:d5:d6:9f:e5:96:81:a0:72:8b:e5:1c:7f:01:
98:1f:68:1d:9b:82:e5:0a:36:b0:b3:46:a4:87:63:6e:95:d2:
ea:13:f9:e2:c8:33:4d:56:db:b8:bb:95:02:df:b4:04:2f:05:
79:f4:63:e9:c5:07:5a:98:ab:bb:10:f0:46:f6:64:e6:8c:b2:
50:72:3e:c3:58:50:a6:2b:60:d0:b1:b6:c6:51:83:2a:4c:6c:
d5:03:63:80:81:64:9b:d6:71:cf:dd:70:b1:d8:15:34:79:99:
97:5f:ed:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Mc9m8jEpP79PiR7i0qDdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1
YzUwM2EwHhcNMjYwNDI3MDEwMDM3WhcNMjYwNDI4MDEwMDM3WjAzMTEwLwYDVQQD
EygxZDE0ZDAzMTMxNWU5NDI1MDlmNTBjMTJmOWU3NWNkZWViMzJjN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyQsMutqp9GtibgFSkFn4YzUlyHC
2c7UFTYHyVire33H1gjoZ9kZULsQBqAmId/GnX+rWyksQLRFrldrqHfXf8zyLbcZ
S26MVN5vMDTjiUgozKLxJxlwjg3CdbSUou5ztR8ZzPeF9RvnVbuJRSciOp0Zg8ms
ntr/Z0ouLsAh2mUFQI4R0mLDFXC6SZ0FspocmCavrv+TvOFpTHXVc3NHeYtknsA/
zLi1pl1uJSqqJTzKiPYFhC4/h7zkM2BfTJOqipTU5bNwK9w23aJtY2I8icq5ABaH
je1Lz5Enu9Z6sbulUbt95cfHn5rLwUrspAkRWPnWwanVqq5tdal9gZ5pUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0U0DExXpQlCfUMEvnnXN7rMse5MB8GA1UdIwQY
MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt
MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0
LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpaQNcko
tOtOyRZu0+ok4rl8xri6dPb5Vjvh0X+lQlpgpzx3O9Z1Gc8modlyRKwDbSzjLwgO
VLH2KiKRMDGn5JamO1mOi5pbJ923vwAUQlBWQEK8K/YggNgdVAUNhVixhhy2MCan
GdyzOFhVNP9RG0C5I0LhXhuqryrUPWK4iPDrFBVjv+icOqmlVTxgxdWZV+rTc1/V
1p/lloGgcovlHH8BmB9oHZuC5Qo2sLNGpIdjbpXS6hP54sgzTVbbuLuVAt+0BC8F
efRj6cUHWpiruxDwRvZk5oyyUHI+w1hQpitg0LG2xlGDKkxs1QNjgIFkm9Zxz91w
sdgVNHmZl1/tlQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:15:55 2026 by rpki-client