Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: ywhr+e9fB8WbwyCeC8NXG9821eHVw4t8LJ9ma+2TdWg=
Subject key identifier: BE:3F:D0:0B:C8:DC:44:74:2C:2B:45:37:91:B2:43:8C:B3:67:7B:56
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 019EBF5A95CC7F5425D9664CDF2425E96BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0D99
Signing time: Sat 13 Jun 2026 05:00:45 +0000
Manifest this update: Sat 13 Jun 2026 05:00:45 +0000
Manifest next update: Sun 14 Jun 2026 05:00:45 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: 1pfvzEOcLowl1b4yyDVdyRHV+bg/MadZWGoY+lRpM/0=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:95:cc:7f:54:25:d9:66:4c:df:24:25:e9:6b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Jun 13 05:00:45 2026 GMT
Not After : Jun 14 05:00:45 2026 GMT
Subject: CN=be3fd00bc8dc44742c2b453791b2438cb3677b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:5e:f3:ca:72:af:94:f1:4b:63:89:20:76:
37:3e:69:92:c4:f1:42:08:4a:01:85:13:51:89:7d:
01:c9:d2:f5:4e:20:8b:bb:73:8d:68:f5:c5:6b:f7:
b9:d3:46:e5:46:cd:41:7a:5d:7f:f2:92:cf:69:87:
4c:23:f7:91:80:fd:99:d2:9e:2b:cc:73:aa:85:78:
bc:85:5e:3e:16:e1:eb:dc:15:2c:1a:22:6e:ce:33:
c9:e3:4a:24:52:3f:e7:71:2e:4f:4a:57:2d:1f:f9:
ed:6d:3e:98:2e:1c:63:2a:0d:f3:2e:3e:03:7a:d4:
9b:15:91:23:76:03:14:eb:98:7e:4e:ea:f0:d0:08:
1e:65:4f:a0:19:de:55:5f:4b:9b:31:7c:7e:cd:ef:
50:17:e6:0b:bd:3c:23:7d:b0:ee:f0:c3:64:9a:20:
a6:f1:28:c8:11:10:e2:0a:86:ec:18:76:07:95:af:
9f:6e:65:b5:2b:d4:2a:f4:e7:b0:55:ef:48:7b:db:
a4:5b:ac:4b:54:e8:fc:d1:85:fe:fe:50:60:7d:e8:
52:d4:8b:45:de:45:a5:0f:e8:d5:80:96:30:b6:e7:
5b:c8:54:b9:82:a7:01:1e:02:57:9c:7d:a6:5d:c6:
76:d4:1e:83:c6:32:da:28:0d:80:6f:79:78:6c:c5:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:D0:0B:C8:DC:44:74:2C:2B:45:37:91:B2:43:8C:B3:67:7B:56
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f5:b6:f1:f1:98:fd:3e:8f:06:b0:6d:63:5c:1f:1d:a9:52:
ae:45:1d:17:07:a5:50:2e:c1:dd:12:af:df:73:b1:7d:af:c8:
4e:4f:b0:0a:92:95:d2:6a:32:4e:af:a1:b4:7a:7a:9f:3d:6a:
71:d2:a9:2c:8c:be:da:4e:35:a0:8a:bd:48:b0:d1:49:7c:9d:
d7:2f:95:15:7d:85:9b:d6:6c:29:7d:b3:c9:7f:1e:5d:3c:54:
f4:a8:74:ca:2c:6a:43:8e:a4:b2:1b:b8:21:8a:c8:30:90:df:
b2:3d:6e:66:b4:36:81:6f:9d:e9:4f:98:9a:18:b4:4d:e1:e4:
1c:5b:9b:a4:0c:9a:cf:a1:71:3e:83:61:ad:7a:a0:40:02:8b:
a3:14:de:d0:ab:69:e2:e7:b0:c1:3e:7b:74:1b:bb:ca:b6:7b:
d6:5b:ee:1d:b7:bc:a6:87:b9:e2:2c:07:ab:70:b0:24:fb:7e:
59:e7:9f:66:70:38:bf:1b:5e:98:11:d6:c2:b0:5d:f2:4c:f2:
af:28:c8:6a:ee:93:ec:09:43:23:db:37:c8:50:8c:0f:11:1c:
4a:99:dd:d3:6b:1b:a2:01:9e:5d:9d:85:dc:18:37:53:c1:c0:
f3:bd:c3:f8:18:f9:e9:a6:ed:d1:f2:c4:07:57:f1:cf:31:a5:
1e:40:44:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WpXMf1Ql2WZM3yQl6WvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWYyMGMwMjZkZTEwNGQ5NmYxN2FjYmFmNGU3ODdlZjlk
MzAyMDYwHhcNMjYwNjEzMDUwMDQ1WhcNMjYwNjE0MDUwMDQ1WjAzMTEwLwYDVQQD
EyhiZTNmZDAwYmM4ZGM0NDc0MmMyYjQ1Mzc5MWIyNDM4Y2IzNjc3YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/he88pyr5TxS2OJIHY3PmmSxPFC
CEoBhRNRiX0BydL1TiCLu3ONaPXFa/e500blRs1Bel1/8pLPaYdMI/eRgP2Z0p4r
zHOqhXi8hV4+FuHr3BUsGiJuzjPJ40okUj/ncS5PSlctH/ntbT6YLhxjKg3zLj4D
etSbFZEjdgMU65h+Turw0AgeZU+gGd5VX0ubMXx+ze9QF+YLvTwjfbDu8MNkmiCm
8SjIERDiCobsGHYHla+fbmW1K9Qq9OewVe9Ie9ukW6xLVOj80YX+/lBgfehS1ItF
3kWlD+jVgJYwtudbyFS5gqcBHgJXnH2mXcZ21B6DxjLaKA2Ab3l4bMV2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4/0AvI3ER0LCtFN5GyQ4yzZ3tWMB8GA1UdIwQY
MBaAFNWvIMAm3hBNlvF6y69OeH750wIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMt
ODlmMTgxNWQ0YzE5LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMtODlmMTgxNWQ0YzE5
LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfW28fGY
/T6PBrBtY1wfHalSrkUdFwelUC7B3RKv33Oxfa/ITk+wCpKV0moyTq+htHp6nz1q
cdKpLIy+2k41oIq9SLDRSXyd1y+VFX2Fm9ZsKX2zyX8eXTxU9Kh0yixqQ46kshu4
IYrIMJDfsj1uZrQ2gW+d6U+Ymhi0TeHkHFubpAyaz6FxPoNhrXqgQAKLoxTe0Ktp
4uewwT57dBu7yrZ71lvuHbe8poe54iwHq3CwJPt+WeefZnA4vxtemBHWwrBd8kzy
ryjIau6T7AlDI9s3yFCMDxEcSpnd02sbogGeXZ2F3Bg3U8HA873D+Bj56abt0fLE
B1fxzzGlHkBERQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:00 2026 by rpki-client