Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
File: _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json)
Hash identifier: ll1fSpGTVpaOgjReqx6+/Zr47/7UTFiSxfLpxWaU52I=
Subject key identifier: 3B:33:FF:2C:18:A1:14:72:02:B4:43:E8:BC:FF:01:75:72:9A:1E:86
Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
Certificate issuer: /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Certificate serial: 019E5448ACA511BB6EF59D4220F162C46B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
Manifest number: 0127
Signing time: Sat 23 May 2026 10:01:49 +0000
Manifest this update: Sat 23 May 2026 10:01:49 +0000
Manifest next update: Sun 24 May 2026 10:01:49 +0000
Files and hashes: 1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=)
2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: mbNJeYwKil98uUpQSVIFOwt85maBm16Ici0jgysP0zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:54:48:ac:a5:11:bb:6e:f5:9d:42:20:f1:62:c4:6b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Validity
Not Before: May 23 10:01:49 2026 GMT
Not After : May 24 10:01:49 2026 GMT
Subject: CN=3b33ff2c18a1147202b443e8bcff0175729a1e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:81:cf:0f:08:30:8a:8b:2e:92:d4:f8:6f:
2f:6a:ba:21:c3:d9:3d:29:ff:73:46:1c:2b:50:49:
32:6d:96:0d:8a:c6:65:93:ee:8b:0f:77:29:4f:80:
59:70:d0:2a:c9:f4:ec:c3:2f:d9:0d:19:84:76:6e:
6c:6d:2e:c4:77:5a:4f:a1:78:ae:a4:e3:8a:01:37:
9d:87:2b:4a:20:a2:38:0d:1b:fd:3f:86:11:f9:65:
ae:e4:9e:c9:c8:87:81:cc:5d:0c:e8:80:48:f7:81:
f0:15:36:ef:5e:2d:d7:1f:b2:50:d4:69:75:6a:35:
21:0c:a8:88:02:93:fd:99:9d:6a:92:71:fa:f4:df:
6f:2e:19:39:16:8a:52:86:d1:63:64:dd:25:ef:e4:
de:73:44:66:73:aa:b6:29:47:69:8b:e3:96:37:00:
c2:e9:f1:67:23:6f:7d:5c:ce:82:61:42:f6:f7:25:
97:03:d2:f3:6a:ae:fb:f2:06:e9:b9:2d:04:ad:81:
fb:da:da:68:04:37:31:8b:2b:1c:a0:96:ce:aa:4f:
5a:41:25:91:04:40:75:70:04:26:6f:dc:ca:aa:a9:
b9:9e:8d:b3:78:f6:18:81:64:bf:48:9d:59:54:26:
7b:ce:db:b3:d4:8e:d8:19:98:27:36:77:bd:4d:47:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:33:FF:2C:18:A1:14:72:02:B4:43:E8:BC:FF:01:75:72:9A:1E:86
X509v3 Authority Key Identifier:
keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1e:22:e9:dd:d4:06:b3:65:52:9f:1b:b5:60:9a:fc:8a:d3:
a5:44:da:8a:e4:fe:1e:eb:fc:8c:ab:32:20:38:86:22:12:8e:
96:13:f5:17:dc:cd:51:47:11:b4:9f:f1:ac:74:70:9b:54:78:
bb:12:91:49:9f:13:57:b3:7f:ac:35:d9:be:99:1a:f9:a8:fc:
f5:2b:67:c2:b7:40:7b:6b:7f:2d:ea:4c:69:5b:79:04:9a:6a:
91:61:9a:c9:70:6a:48:ca:49:a2:b7:c2:8c:29:5f:92:48:84:
23:5d:07:54:de:e7:1e:91:a1:d1:13:23:8c:2a:46:c0:be:83:
6a:3e:71:59:7f:3a:24:24:51:56:4f:45:5b:d2:4d:f5:5c:a9:
cc:c4:ae:5d:e2:eb:25:17:a2:5a:b6:cb:c5:39:26:64:bf:ea:
0c:c0:42:e8:28:12:6b:b5:f4:ed:2e:3d:9c:49:b1:a2:dc:3a:
5e:e1:c6:04:6f:9a:26:59:e9:7d:b1:03:a4:1f:4c:24:ce:b7:
2c:97:7f:a8:11:2a:82:22:88:f4:df:fd:7e:c4:b4:2c:f2:93:
5f:11:0a:23:9f:d7:77:a0:63:5e:a3:90:1f:f2:ae:88:8c:0e:
a1:84:79:c2:a2:16:ea:36:51:a6:22:23:66:fd:0a:46:96:9a:
34:6b:22:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5USKylEbtu9Z1CIPFixGubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYjlhNWYzMjhjYzMwNjUyN2NjNGM0NzRiZGM0YjEzYTc0
NmExYTgwHhcNMjYwNTIzMTAwMTQ5WhcNMjYwNTI0MTAwMTQ5WjAzMTEwLwYDVQQD
EygzYjMzZmYyYzE4YTExNDcyMDJiNDQzZThiY2ZmMDE3NTcyOWExZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3mBzw8IMIqLLpLU+G8varohw9k9
Kf9zRhwrUEkybZYNisZlk+6LD3cpT4BZcNAqyfTswy/ZDRmEdm5sbS7Ed1pPoXiu
pOOKATedhytKIKI4DRv9P4YR+WWu5J7JyIeBzF0M6IBI94HwFTbvXi3XH7JQ1Gl1
ajUhDKiIApP9mZ1qknH69N9vLhk5FopShtFjZN0l7+Tec0Rmc6q2KUdpi+OWNwDC
6fFnI299XM6CYUL29yWXA9Lzaq778gbpuS0ErYH72tpoBDcxiyscoJbOqk9aQSWR
BEB1cAQmb9zKqqm5no2zePYYgWS/SJ1ZVCZ7ztuz1I7YGZgnNne9TUeGowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsz/ywYoRRyArRD6Lz/AXVymh6GMB8GA1UdIwQY
MBaAFP+5pfMozDBlJ8xMR0vcSxOnRqGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzdtbDh5ak1NR1VuekV4SFM5eExFNmRHb2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZmZlZmYtNmIwYi00MGM4LTg3ZWMt
MWYxNjQyNTA3MTkzLzEvXzdtbDh5ak1NR1VuekV4SFM5eExFNmRHb2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yZmZlZmYtNmIwYi00MGM4LTg3ZWMtMWYxNjQyNTA3MTkz
LzEvXzdtbDh5ak1NR1VuekV4SFM5eExFNmRHb2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaR4i6d3U
BrNlUp8btWCa/IrTpUTaiuT+Huv8jKsyIDiGIhKOlhP1F9zNUUcRtJ/xrHRwm1R4
uxKRSZ8TV7N/rDXZvpka+aj89StnwrdAe2t/LepMaVt5BJpqkWGayXBqSMpJorfC
jClfkkiEI10HVN7nHpGh0RMjjCpGwL6Daj5xWX86JCRRVk9FW9JN9VypzMSuXeLr
JReiWrbLxTkmZL/qDMBC6CgSa7X07S49nEmxotw6XuHGBG+aJlnpfbEDpB9MJM63
LJd/qBEqgiKI9N/9fsS0LPKTXxEKI5/Xd6BjXqOQH/KuiIwOoYR5wqIW6jZRpiIj
Zv0KRpaaNGsifw==
-----END CERTIFICATE-----
Generated at Sat May 23 18:48:14 2026 by rpki-client