Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
File: 1-ItEPpksZlZYlC5okNKY1ozeZCU.mft (raw, json)
Hash identifier: 1oHxbhx0jLYWK6YCUivtseuKcm9D3shzzh85Uh+F4jA=
Subject key identifier: F6:9F:8D:EE:CB:BF:54:F4:D0:4E:5C:88:8C:F8:71:4B:CF:1E:8B:AE
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Certificate issuer: /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial: 019EC1EE2550B5CE047D49B6E2AFB44B81EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
Manifest number: 0108
Signing time: Sat 13 Jun 2026 17:01:10 +0000
Manifest this update: Sat 13 Jun 2026 17:01:10 +0000
Manifest next update: Sun 14 Jun 2026 17:01:10 +0000
Files and hashes: 1: 1-ItEPpksZlZYlC5okNKY1ozeZCU.crl (hash: UY1s+kP7SILOxldQFfbJOUMNSX2M6zkKwmMBsvrosh0=)
2: 560UvqVud9DEuhQPr1x60Rz_4no.asa (hash: R22iZnCp/y6i8IZet00/Fkh5m7KFKy8c2ikVMY1ramc=)
3: Kf9QvVgVrtl0XM8frEpJ_fd4yfM.roa (hash: fg4f8lm5urIblTtWM6P0oF5ZkLFnBYAOFc4g9paZJZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:25:50:b5:ce:04:7d:49:b6:e2:af:b4:4b:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
Validity
Not Before: Jun 13 17:01:10 2026 GMT
Not After : Jun 14 17:01:10 2026 GMT
Subject: CN=f69f8deecbbf54f4d04e5c888cf8714bcf1e8bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3e:05:50:ae:9e:67:f6:ef:ef:f6:0f:cf:14:
c0:7e:ac:c0:87:8b:96:0e:0c:d4:1d:8a:83:ff:bc:
b5:31:14:4e:e5:20:6d:6d:6f:ad:7f:2c:72:b0:8c:
2a:81:8c:67:07:e1:f2:70:72:08:35:ab:2a:fa:b9:
a5:a9:62:3b:0b:9a:5d:e6:1e:70:03:5e:5d:af:30:
67:13:b5:00:9e:68:a6:c0:7b:7e:6d:3d:5a:43:52:
d3:d6:42:00:a6:6f:ba:4c:51:67:d4:98:f5:4f:b9:
20:9e:78:bb:bf:fb:ae:e2:be:23:52:f3:c5:89:dc:
48:a6:9c:e1:97:b5:7d:cc:5a:ee:2a:a6:fa:56:aa:
41:39:ec:69:cf:97:49:22:3d:a7:e0:d6:6e:1a:bf:
e9:01:a9:e4:2b:6a:0f:96:8c:91:35:94:7d:83:ff:
42:c0:91:43:8a:35:71:2d:a8:d1:05:5d:80:9b:38:
67:68:6e:3d:6e:49:99:11:f4:05:56:24:92:3a:af:
8c:ca:83:27:b4:8f:89:a2:ea:e9:7d:f1:83:bc:5e:
af:3b:92:71:15:ca:44:40:35:51:0a:eb:9d:c8:cd:
4f:10:95:3d:39:3b:ce:83:ef:38:9b:dd:e8:ae:2f:
1b:aa:11:82:cd:00:09:c9:f9:2f:84:08:46:04:85:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9F:8D:EE:CB:BF:54:F4:D0:4E:5C:88:8C:F8:71:4B:CF:1E:8B:AE
X509v3 Authority Key Identifier:
keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:aa:a9:70:cd:85:4d:47:8b:d0:72:c7:0b:a6:fb:0b:19:85:
60:33:c1:80:88:05:a9:3b:d6:ae:c0:ee:a8:95:a8:35:24:cf:
8f:79:cb:a0:40:e8:14:d3:1c:44:1d:a8:51:b9:ec:48:f4:f2:
bf:01:e2:e1:fa:aa:bb:7b:0c:35:e3:d6:3a:c0:6e:f5:d3:ad:
8c:63:be:6a:89:dd:98:57:fd:59:78:07:f3:bf:82:1e:9a:a2:
de:3e:2b:9d:1e:6a:ac:47:96:c6:5b:e0:a3:80:e9:3f:64:4b:
35:ca:58:46:5b:43:7e:ec:a4:94:e9:1a:b9:cf:67:ed:03:19:
ca:38:51:76:bc:85:d6:9f:9f:b7:fc:fa:eb:90:1c:96:08:d9:
e3:14:84:4a:29:73:66:be:11:61:0e:da:e8:1b:70:88:f4:d1:
47:c1:a3:20:6b:9b:99:53:e3:28:08:97:6d:30:9e:2a:ea:69:
63:e9:46:14:e0:29:4c:87:65:21:b9:ab:a6:9d:73:d8:0e:df:
f0:fd:b1:cf:e1:e5:fd:5c:94:d2:d4:16:ed:ea:67:67:2a:45:
98:85:57:91:eb:4c:07:f8:70:db:d3:a1:e7:0a:48:ee:f5:fa:
0a:70:6e:05:2c:40:ea:e3:c1:a4:10:3d:8a:3e:a9:b3:ff:b0:
c4:05:70:b3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ7B7iVQtc4EfUm24q+0S4HvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OGI0NDNlOTkyYzY2NTY1ODk0MmU2ODkwZDI5OGQ2OGNk
ZTY0MjUwHhcNMjYwNjEzMTcwMTEwWhcNMjYwNjE0MTcwMTEwWjAzMTEwLwYDVQQD
EyhmNjlmOGRlZWNiYmY1NGY0ZDA0ZTVjODg4Y2Y4NzE0YmNmMWU4YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D4FUK6eZ/bv7/YPzxTAfqzAh4uW
DgzUHYqD/7y1MRRO5SBtbW+tfyxysIwqgYxnB+HycHIINasq+rmlqWI7C5pd5h5w
A15drzBnE7UAnmimwHt+bT1aQ1LT1kIApm+6TFFn1Jj1T7kgnni7v/uu4r4jUvPF
idxIppzhl7V9zFruKqb6VqpBOexpz5dJIj2n4NZuGr/pAankK2oPloyRNZR9g/9C
wJFDijVxLajRBV2AmzhnaG49bkmZEfQFViSSOq+MyoMntI+JourpffGDvF6vO5Jx
FcpEQDVRCuudyM1PEJU9OTvOg+84m93ori8bqhGCzQAJyfkvhAhGBIXHBQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPafje7Lv1T00E5ciIz4cUvPHouuMB8GA1UdIwQY
MBaAFPiLRD6ZLGZWWJQuaJDSmNaM3mQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JdEVQcGtzWmxaWWxDNW9rTktZMW96ZVpDVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvYmZiNTQyLTRmNjctNDZjNS05NzEw
LTY5NDI1MmYwMjlmMS8xLzEtSXRFUHBrc1psWllsQzVva05LWTFvemVaQ1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzViL2JmYjU0Mi00ZjY3LTQ2YzUtOTcxMC02OTQyNTJmMDI5
ZjEvMS8xLUl0RVBwa3NabFpZbEM1b2tOS1kxb3plWkNVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaqp
cM2FTUeL0HLHC6b7CxmFYDPBgIgFqTvWrsDuqJWoNSTPj3nLoEDoFNMcRB2oUbns
SPTyvwHi4fqqu3sMNePWOsBu9dOtjGO+aondmFf9WXgH87+CHpqi3j4rnR5qrEeW
xlvgo4DpP2RLNcpYRltDfuyklOkauc9n7QMZyjhRdryF1p+ft/z665AclgjZ4xSE
SilzZr4RYQ7a6BtwiPTRR8GjIGubmVPjKAiXbTCeKuppY+lGFOApTIdlIbmrpp1z
2A7f8P2xz+Hl/VyU0tQW7epnZypFmIVXketMB/hw29Oh5wpI7vX6CnBuBSxA6uPB
pBA9ij6ps/+wxAVwsw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:07:44 2026 by rpki-client