Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft
File: 1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft (raw, json)
Hash identifier: qhSWhQWrGIeeeDnkCwYhCrlLksXHJ7UClIuGLYyKVHw=
Subject key identifier: 57:A6:80:59:C2:14:0C:10:20:B6:86:1B:CB:A7:73:34:F9:31:AD:A1
Authority key identifier: D5:B0:A5:EE:AB:3E:2C:73:C6:8F:0F:F3:E6:20:AC:4B:14:BE:34:C8
Certificate issuer: /CN=d5b0a5eeab3e2c73c68f0ff3e620ac4b14be34c8
Certificate serial: 01A0D01282E29FF6738A1A77F909A52AF961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bCl7qs-LHPGjw_z5iCsSxS-NMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:09 +0000
Manifest this update: Wed 23 Sep 2026 21:01:09 +0000
Manifest next update: Thu 24 Sep 2026 21:01:09 +0000
Files and hashes: 1: 1bCl7qs-LHPGjw_z5iCsSxS-NMg.crl (hash: A38MelylrEPagba7obZB9F62EHEk5LM83h7+6wqhY+8=)
2: R0EcMBcCy6V-hFGWWa5yTokStQc.roa (hash: cLy7/dVcrDgQdBAd54oTe6onNv46S6Goh4UjbfZ2W8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bCl7qs-LHPGjw_z5iCsSxS-NMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:82:e2:9f:f6:73:8a:1a:77:f9:09:a5:2a:f9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b0a5eeab3e2c73c68f0ff3e620ac4b14be34c8
Validity
Not Before: Sep 23 21:01:09 2026 GMT
Not After : Sep 24 21:01:09 2026 GMT
Subject: CN=57a68059c2140c1020b6861bcba77334f931ada1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:c9:55:e0:8e:73:90:f0:6b:a4:ba:05:7a:
8f:38:c2:a4:16:cc:db:d0:9c:88:b0:cb:41:94:af:
70:1d:5a:7a:43:96:fb:12:e9:9d:66:98:b0:e8:58:
14:6d:07:da:9c:56:bd:ee:0c:22:3f:d2:5c:8f:5a:
17:ef:c0:03:75:b1:3a:e7:fe:a4:10:09:5c:77:b9:
0b:85:a2:06:08:90:10:65:ea:5f:f9:b3:83:c5:b5:
3c:dd:db:73:5e:d6:bb:da:06:4a:c8:40:a7:44:7c:
52:03:63:e7:10:27:80:e3:51:e5:d7:b5:f5:e9:0d:
71:a3:f9:f2:bd:31:cd:94:e2:1f:2a:57:84:eb:49:
75:03:23:ae:85:b8:1a:69:31:b8:90:12:92:fb:36:
ce:2c:a0:9e:c2:d6:6c:1e:06:a1:d1:55:aa:d9:5a:
1f:34:ad:c8:40:62:a1:9f:29:d7:92:39:da:6e:8c:
0d:84:48:73:55:a5:1a:53:cf:dc:c8:e1:01:6b:b8:
55:a3:a6:8f:31:b6:90:29:94:ba:d7:78:8a:e8:e2:
82:b3:27:cc:29:98:20:f6:5a:14:7f:03:32:dd:57:
b8:08:62:48:fb:7c:dc:85:2e:98:cd:3a:d2:c1:e2:
de:d2:49:78:00:f0:c3:18:09:73:c1:02:39:4a:13:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:80:59:C2:14:0C:10:20:B6:86:1B:CB:A7:73:34:F9:31:AD:A1
X509v3 Authority Key Identifier:
keyid:D5:B0:A5:EE:AB:3E:2C:73:C6:8F:0F:F3:E6:20:AC:4B:14:BE:34:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bCl7qs-LHPGjw_z5iCsSxS-NMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/80b835-6e1e-4c04-973c-1898007d59de/1/1bCl7qs-LHPGjw_z5iCsSxS-NMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0c:42:d3:2c:0d:59:52:68:6e:0b:f5:c8:77:66:f1:7c:17:
1c:e4:83:7f:d7:2d:57:ef:7f:78:d8:4a:41:36:4e:81:1c:9c:
fc:a9:84:e6:cf:09:1d:38:12:69:ec:48:83:cf:c8:78:25:1e:
ae:7a:38:db:b7:44:10:15:a0:15:89:a2:39:e1:3b:c2:5b:bd:
c4:f1:c4:19:f2:42:00:4a:38:97:46:6a:dc:80:5e:00:6b:8f:
a7:18:50:bf:68:f5:0d:22:13:66:22:21:61:1d:92:a5:25:93:
ee:0f:da:54:d1:49:67:b4:37:0f:81:99:f0:95:06:76:70:d9:
57:b7:6e:86:df:5c:d8:14:ab:6f:31:7c:64:d9:e5:70:8e:13:
30:6d:89:97:78:40:33:d8:34:90:2f:ab:f9:2f:f6:c5:ad:f6:
cd:ba:69:e3:c0:b5:7c:fa:96:69:c1:5d:6b:bf:15:90:77:75:
bf:73:73:83:ac:7e:8c:95:93:46:a7:84:d9:55:bd:32:de:e5:
55:73:64:36:eb:e5:3d:8b:bf:a8:07:d9:41:a9:6b:29:6b:c3:
61:bb:22:6e:4d:82:38:9b:a9:76:76:12:67:c4:5e:1a:37:b6:
1d:a8:d0:c9:e6:42:ab:d6:1e:d5:46:58:75:22:8a:c8:6b:a7:
5a:cc:5e:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEoLin/Zzihp3+QmlKvlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjBhNWVlYWIzZTJjNzNjNjhmMGZmM2U2MjBhYzRiMTRi
ZTM0YzgwHhcNMjYwOTIzMjEwMTA5WhcNMjYwOTI0MjEwMTA5WjAzMTEwLwYDVQQD
Eyg1N2E2ODA1OWMyMTQwYzEwMjBiNjg2MWJjYmE3NzMzNGY5MzFhZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocjJVeCOc5Dwa6S6BXqPOMKkFszb
0JyIsMtBlK9wHVp6Q5b7EumdZpiw6FgUbQfanFa97gwiP9Jcj1oX78ADdbE65/6k
EAlcd7kLhaIGCJAQZepf+bODxbU83dtzXta72gZKyECnRHxSA2PnECeA41Hl17X1
6Q1xo/nyvTHNlOIfKleE60l1AyOuhbgaaTG4kBKS+zbOLKCewtZsHgah0VWq2Vof
NK3IQGKhnynXkjnabowNhEhzVaUaU8/cyOEBa7hVo6aPMbaQKZS613iK6OKCsyfM
KZgg9loUfwMy3Ve4CGJI+3zchS6YzTrSweLe0kl4APDDGAlzwQI5ShOg4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFemgFnCFAwQILaGG8unczT5Ma2hMB8GA1UdIwQY
MBaAFNWwpe6rPixzxo8P8+YgrEsUvjTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJDbDdxcy1MSFBHandfejVpQ3NTeFMtTk1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MGI4MzUtNmUxZS00YzA0LTk3M2Mt
MTg5ODAwN2Q1OWRlLzEvMWJDbDdxcy1MSFBHandfejVpQ3NTeFMtTk1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84MGI4MzUtNmUxZS00YzA0LTk3M2MtMTg5ODAwN2Q1OWRl
LzEvMWJDbDdxcy1MSFBHandfejVpQ3NTeFMtTk1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgxC0ywN
WVJobgv1yHdm8XwXHOSDf9ctV+9/eNhKQTZOgRyc/KmE5s8JHTgSaexIg8/IeCUe
rno427dEEBWgFYmiOeE7wlu9xPHEGfJCAEo4l0Zq3IBeAGuPpxhQv2j1DSITZiIh
YR2SpSWT7g/aVNFJZ7Q3D4GZ8JUGdnDZV7duht9c2BSrbzF8ZNnlcI4TMG2Jl3hA
M9g0kC+r+S/2xa32zbpp48C1fPqWacFda78VkHd1v3Nzg6x+jJWTRqeE2VW9Mt7l
VXNkNuvlPYu/qAfZQalrKWvDYbsibk2COJupdnYSZ8ReGje2HajQyeZCq9Ye1UZY
dSKKyGunWsxeXQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:19:27 2026 by rpki-client