Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: H9BnRIjMcKv9fSSaoZFep6jhEC/tyfC2y14MUXoffvc=
Subject key identifier: 59:A6:1D:2F:E4:55:50:A9:C1:1D:12:4D:ED:AC:C0:23:4D:3C:74:AD
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 01A104DBB0BA9A649FFA480E847E0F4C5F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 15A9
Signing time: Sun 04 Oct 2026 03:01:08 +0000
Manifest this update: Sun 04 Oct 2026 03:01:08 +0000
Manifest next update: Mon 05 Oct 2026 03:01:08 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: CCDtg77Uqh8fkBuuD8Xoi58Gfd1svk77DbAlyepH5r8=)
2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:b0:ba:9a:64:9f:fa:48:0e:84:7e:0f:4c:5f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Oct 4 03:01:08 2026 GMT
Not After : Oct 5 03:01:08 2026 GMT
Subject: CN=59a61d2fe45550a9c11d124dedacc0234d3c74ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ed:0c:42:fe:e5:2a:a6:29:b0:4f:fb:31:53:
92:f4:94:ad:aa:d7:41:07:45:49:c0:41:ef:6e:14:
20:7c:52:a3:e1:8b:4b:8d:3b:05:d2:43:e3:a2:fe:
79:63:1e:e3:3c:db:bf:57:9a:40:c3:f9:2b:de:61:
ca:d5:5f:8c:87:bb:8a:2b:47:7e:97:40:b3:41:bc:
37:6a:ce:6f:a1:11:b5:46:28:18:0e:5d:e0:fe:1f:
6c:1e:24:f3:8e:9f:a2:5c:cc:8c:36:a3:5e:47:9a:
59:2e:38:d2:11:fb:bf:0c:bd:e8:12:fb:be:1f:09:
9b:27:d6:6d:19:44:fd:94:db:c3:e4:76:9a:ad:b3:
fd:97:d0:79:3b:7a:79:74:de:15:c4:c8:cb:77:6e:
8e:9d:1f:8a:4b:a3:d0:70:3c:51:9c:b4:1c:92:10:
d3:4c:22:68:2a:0d:0f:9a:14:7b:75:2e:af:87:d8:
52:10:b0:5a:a6:ca:e7:d7:9d:bc:1d:e2:76:95:b1:
ef:44:a6:af:42:68:cb:98:d4:b9:ac:5a:69:54:d0:
f3:5f:52:90:4b:66:17:35:2c:61:75:2b:21:ab:43:
8c:76:7e:74:c7:22:f2:e8:3a:d0:53:9b:9b:ae:6d:
f7:99:43:67:c1:bd:75:77:31:77:bc:4c:b3:f2:74:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:1D:2F:E4:55:50:A9:C1:1D:12:4D:ED:AC:C0:23:4D:3C:74:AD
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:72:0d:28:f6:ad:b1:f4:ef:42:82:c4:b6:ed:ca:da:5a:ee:
77:76:f8:ec:ee:6a:67:3d:04:4a:bc:42:40:0d:6e:63:30:fc:
58:fa:3b:d0:69:e9:c9:df:00:6c:56:6e:bd:e1:75:cc:1e:37:
ef:a3:5e:65:10:4b:08:c9:0a:a2:10:01:96:5f:df:88:6e:3c:
1e:f3:7c:3e:a1:62:e5:de:cd:c2:50:bc:7c:90:d1:6a:96:a4:
5c:8e:51:0a:f5:7d:90:32:ab:12:32:08:d7:7d:89:ec:03:36:
18:2b:86:55:f8:55:3b:43:cb:17:10:4a:11:03:dc:f9:34:81:
84:19:9a:b1:11:bd:26:a8:f4:bd:39:09:da:cc:c3:4e:ad:42:
17:04:0e:83:0e:60:6b:18:1a:b3:e3:4d:20:eb:6e:22:4b:69:
dd:98:f7:80:58:3d:9a:ef:25:08:0c:48:fa:b8:7d:bd:35:86:
4d:1e:5f:bb:4e:fc:b9:75:70:6f:b3:8e:93:07:5d:cb:79:5b:
48:e6:fa:09:a5:d4:29:fc:22:0f:18:6b:df:54:d5:00:66:aa:
16:5f:ae:c5:da:77:29:3e:b5:58:97:91:28:5f:c0:77:dd:02:
fe:bc:18:eb:79:43:b1:0c:5e:9b:a1:4e:72:80:26:1a:62:2c:
77:56:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:39 2026 by rpki-client