Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: CJUqzmivRmQ6M671KdSzH1fO3uTjh5M9g5B/NQuSVC8=
Subject key identifier: 5A:7C:06:D5:32:71:9C:6A:5D:CA:00:D8:C2:79:59:2E:38:6F:99:FC
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 01A1CB202F3D7D82E9E5ABE3AD736BCC1688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 159F
Signing time: Wed 11 Nov 2026 15:00:46 +0000
Manifest this update: Wed 11 Nov 2026 15:00:46 +0000
Manifest next update: Thu 12 Nov 2026 15:00:46 +0000
Files and hashes: 1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: ZM4CXMwdFt9OGCAOO+pzeSI6herbqYHt7KgvqT8r8gQ=)
2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:20:2f:3d:7d:82:e9:e5:ab:e3:ad:73:6b:cc:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Nov 11 15:00:46 2026 GMT
Not After : Nov 12 15:00:46 2026 GMT
Subject: CN=5a7c06d532719c6a5dca00d8c279592e386f99fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:72:2c:b0:15:95:0e:67:da:cb:b3:b1:38:
e0:89:b2:f1:3a:aa:c8:65:05:36:64:6f:c0:c5:65:
31:4c:d8:8c:23:f1:3c:79:bb:40:21:0e:7b:f2:e3:
65:50:7e:62:97:32:cb:96:2f:77:c9:fe:e2:bf:70:
9f:07:79:57:92:3f:0d:01:18:ae:6b:b1:13:c0:f9:
f2:80:bc:74:6c:dd:1c:f6:8e:ff:1f:8a:db:35:88:
1b:bc:c3:5a:98:69:27:c4:a9:f5:be:52:d9:aa:88:
52:84:eb:1a:0c:cc:87:ba:27:3c:9d:46:34:cd:d5:
65:fa:31:16:59:88:db:8b:0a:8a:e6:fa:2c:5a:29:
e9:00:38:af:4f:22:c6:4d:78:34:5c:f5:ed:a0:94:
0f:6e:7d:c1:05:aa:66:fb:2b:1c:3a:e7:3b:eb:e6:
32:a1:8c:63:9c:f6:53:68:a9:e7:4a:db:66:75:8f:
de:59:2b:c5:9b:02:55:33:79:f8:e3:1c:04:3e:65:
9f:e0:d1:e4:5e:c6:70:41:b5:a7:6b:2b:a1:42:6a:
bb:c0:02:f5:b9:c4:67:15:f1:98:e5:db:4e:31:06:
90:8c:ca:81:4f:7e:c8:ec:80:a2:84:49:17:d6:2b:
7c:f2:c2:19:ea:2f:ce:e8:00:6b:43:ad:70:43:d0:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:06:D5:32:71:9C:6A:5D:CA:00:D8:C2:79:59:2E:38:6F:99:FC
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c6:ea:0a:5c:05:66:ec:f4:da:06:3b:d4:7e:1e:ea:3d:e0:
ed:0d:bb:0e:59:53:ac:75:57:3f:eb:2b:e0:24:60:60:53:4f:
a1:d3:c4:df:48:9c:df:cc:99:84:f7:ea:09:42:98:b7:ad:63:
ad:3d:e6:6d:03:3b:76:f8:05:f3:03:ae:d6:3e:f3:4e:24:da:
74:b5:88:67:8d:f3:d2:00:48:12:4b:78:1d:ba:2c:87:3c:b4:
b5:6e:08:ac:fc:b6:36:09:7b:f1:19:a9:4c:e6:55:3f:11:71:
6b:15:61:fb:79:6b:ae:b0:3a:b0:d2:c5:7c:49:6c:92:98:13:
e0:3d:fa:8f:b4:d5:8a:aa:21:0d:6f:92:bb:3c:37:73:7d:3f:
40:73:1d:20:97:9c:0e:4e:52:01:90:51:b8:5e:42:9c:99:49:
9e:4e:99:c4:0c:f7:60:d5:79:94:9a:c0:14:78:67:dc:97:8f:
23:79:f2:42:73:61:f8:c2:b8:2f:a8:22:58:c2:fd:b4:1a:92:
8f:75:94:6a:d9:9a:c6:29:40:1e:44:5e:5e:35:3e:0a:05:d2:
00:a5:c3:b8:3b:b4:d2:6b:52:ff:77:b7:78:f9:df:07:c3:2b:
da:88:ce:ea:4c:78:dc:04:e7:07:32:81:c2:f7:5e:42:b7:5b:
5c:97:f3:65
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHLIC89fYLp5avjrXNrzBaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MWE4MjIzMDAyZTMxMjRlNWJiMDZlODJkNGY2MGEzNzli
OTNkY2QwHhcNMjYxMTExMTUwMDQ2WhcNMjYxMTEyMTUwMDQ2WjAzMTEwLwYDVQQD
Eyg1YTdjMDZkNTMyNzE5YzZhNWRjYTAwZDhjMjc5NTkyZTM4NmY5OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4dyLLAVlQ5n2suzsTjgibLxOqrI
ZQU2ZG/AxWUxTNiMI/E8ebtAIQ578uNlUH5ilzLLli93yf7iv3CfB3lXkj8NARiu
a7ETwPnygLx0bN0c9o7/H4rbNYgbvMNamGknxKn1vlLZqohShOsaDMyHuic8nUY0
zdVl+jEWWYjbiwqK5vosWinpADivTyLGTXg0XPXtoJQPbn3BBapm+yscOuc76+Yy
oYxjnPZTaKnnSttmdY/eWSvFmwJVM3n44xwEPmWf4NHkXsZwQbWnayuhQmq7wAL1
ucRnFfGY5dtOMQaQjMqBT37I7ICihEkX1it88sIZ6i/O6ABrQ61wQ9C2vQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFp8BtUycZxqXcoA2MJ5WS44b5n8MB8GA1UdIwQY
MBaAFPkagiMALjEk5bsG6C1PYKN5uT3NMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ScUNJd0F1TVNUbHV3Ym9MVTlnbzNtNVBjMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTQzNzMyLTk2MjEtNGE0Mi04N2Rh
LWIyZGUzZWJmM2U3ZS8xLzEtUnFDSXdBdU1TVGx1d2JvTFU5Z28zbTVQYzAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE4Lzk0MzczMi05NjIxLTRhNDItODdkYS1iMmRlM2ViZjNl
N2UvMS8xLVJxQ0l3QXVNU1RsdXdib0xVOWdvM201UGMwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcbq
ClwFZuz02gY71H4e6j3g7Q27DllTrHVXP+sr4CRgYFNPodPE30ic38yZhPfqCUKY
t61jrT3mbQM7dvgF8wOu1j7zTiTadLWIZ43z0gBIEkt4Hboshzy0tW4IrPy2Ngl7
8RmpTOZVPxFxaxVh+3lrrrA6sNLFfElskpgT4D36j7TViqohDW+Suzw3c30/QHMd
IJecDk5SAZBRuF5CnJlJnk6ZxAz3YNV5lJrAFHhn3JePI3nyQnNh+MK4L6giWML9
tBqSj3WUatmaxilAHkReXjU+CgXSAKXDuDu00mtS/3e3ePnfB8Mr2ojO6kx43ATn
BzKBwvdeQrdbXJfzZQ==
-----END CERTIFICATE-----
Generated at Thu Nov 12 01:00:29 2026 by rpki-client