Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: Br3PABMIix4HlLYC+PD5bhECH7QMzooP/j1QYXk7vT8=
Subject key identifier: 17:C2:8B:AA:C8:71:01:A9:FE:ED:AC:FB:20:BA:A7:89:B1:50:0B:80
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 01A0CF35C9ECEC96911FFB20FFB1DDD6EBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 19FE
Signing time: Wed 23 Sep 2026 17:00:03 +0000
Manifest this update: Wed 23 Sep 2026 17:00:03 +0000
Manifest next update: Thu 24 Sep 2026 17:00:03 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: 4gtjl2O/7gVy9lc1Zrh3AePEwdT4w7ri0c4gzv0mKWo=)
2: xmPDT0qXzI-WfyPj03f5LiDX-UE.roa (hash: bKQt5YSuFEZd8wxQPDeL7WmtwFEyplerjSwRLOQ9NRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:c9:ec:ec:96:91:1f:fb:20:ff:b1:dd:d6:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Sep 23 17:00:03 2026 GMT
Not After : Sep 24 17:00:03 2026 GMT
Subject: CN=17c28baac87101a9feedacfb20baa789b1500b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:26:cf:95:50:f9:e9:be:d5:ea:45:a2:0c:
93:4a:bf:30:ad:7e:c0:d7:06:f9:bc:b5:fc:ec:e2:
ca:ca:d5:c3:f9:0b:d9:f0:9f:6f:51:98:41:62:17:
2a:ac:5e:8d:16:6f:f4:ac:06:33:30:37:22:69:40:
50:01:49:9c:aa:ae:67:d2:c4:3f:18:25:e8:88:be:
1b:b9:66:56:b0:e9:00:c7:ec:c0:57:c2:44:e6:17:
cb:c3:e3:fa:dc:5e:ec:78:c7:eb:fb:4b:f1:89:a6:
14:31:d2:62:34:12:93:1d:5d:72:f0:6b:64:48:10:
c2:23:5b:db:41:46:59:8c:8e:f6:6a:c8:60:c9:c8:
34:61:e7:01:13:ae:f9:15:19:05:fb:78:07:f1:60:
fb:6b:60:49:79:4d:03:bd:40:9f:43:92:6b:28:48:
83:46:be:64:44:bb:b3:fc:12:5d:1f:46:2e:0c:d9:
00:be:2c:0f:45:d8:49:68:73:83:7b:84:13:37:7a:
29:61:7f:77:85:b6:2f:c3:cc:6b:7a:2b:fd:40:d5:
2c:44:a6:7e:d8:43:6a:e6:ff:4e:75:97:0f:97:c4:
56:7d:73:93:1f:69:6c:ed:c4:8a:a4:69:bc:eb:ae:
06:51:46:13:f1:43:28:be:96:30:77:2b:62:67:4f:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:8B:AA:C8:71:01:A9:FE:ED:AC:FB:20:BA:A7:89:B1:50:0B:80
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1c:71:9b:0d:39:65:43:a5:6a:f3:3c:42:ce:3d:03:ff:cb:
ae:52:79:41:00:e3:e2:a1:d1:31:d0:ef:c7:5d:94:32:4e:73:
ef:4f:e0:04:79:dc:a4:24:d4:80:15:f8:3b:e6:11:dd:db:a6:
bc:2e:e7:22:57:f4:89:44:39:a5:05:71:06:96:a4:2e:c5:07:
64:a9:92:61:59:bb:9d:e4:54:b1:d0:f8:e8:aa:99:f5:5c:ed:
f6:7a:68:4c:cf:7e:ba:17:ba:ed:65:75:5b:6f:c3:f9:70:50:
12:31:82:71:ee:a3:3d:f0:cb:db:a6:fd:66:fd:c5:bf:e6:e2:
04:de:66:74:cb:03:fc:dd:bb:cd:4f:c2:ff:46:2d:61:75:f5:
a5:31:4b:4a:a0:67:ea:6a:01:fc:fa:cc:12:b9:49:9d:25:ad:
47:eb:4a:94:33:a3:e6:fc:f1:06:43:c5:e1:7e:72:e8:95:8b:
93:35:1e:a8:7e:ff:86:60:96:de:e1:ba:a3:1c:45:e7:29:ab:
4d:47:11:e9:60:51:6e:af:7c:99:5d:3e:b7:3c:60:ba:0e:c5:
a7:a7:8b:15:04:90:f3:3d:6b:e8:42:a5:6a:1a:f7:a4:ed:ec:
8b:6d:a1:c8:6b:2f:26:5f:65:7c:5b:ff:49:3b:bb:47:61:ea:
b3:92:88:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNcns7JaRH/sg/7Hd1uu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTAzOWFlZWU2MjEwM2IyODhjNmM4Yjk2OTJjZjU4MDg3
NDNlMjEwHhcNMjYwOTIzMTcwMDAzWhcNMjYwOTI0MTcwMDAzWjAzMTEwLwYDVQQD
EygxN2MyOGJhYWM4NzEwMWE5ZmVlZGFjZmIyMGJhYTc4OWIxNTAwYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30omz5VQ+em+1epFogyTSr8wrX7A
1wb5vLX87OLKytXD+QvZ8J9vUZhBYhcqrF6NFm/0rAYzMDciaUBQAUmcqq5n0sQ/
GCXoiL4buWZWsOkAx+zAV8JE5hfLw+P63F7seMfr+0vxiaYUMdJiNBKTHV1y8Gtk
SBDCI1vbQUZZjI72ashgycg0YecBE675FRkF+3gH8WD7a2BJeU0DvUCfQ5JrKEiD
Rr5kRLuz/BJdH0YuDNkAviwPRdhJaHODe4QTN3opYX93hbYvw8xreiv9QNUsRKZ+
2ENq5v9OdZcPl8RWfXOTH2ls7cSKpGm8664GUUYT8UMovpYwdytiZ09FKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfCi6rIcQGp/u2s+yC6p4mxUAuAMB8GA1UdIwQY
MBaAFNSgOa7uYhA7KIxsi5aSz1gIdD4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzkt
NjJjZTg0ZjcwNzVlLzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzktNjJjZTg0ZjcwNzVl
LzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxxxmw05
ZUOlavM8Qs49A//LrlJ5QQDj4qHRMdDvx12UMk5z70/gBHncpCTUgBX4O+YR3dum
vC7nIlf0iUQ5pQVxBpakLsUHZKmSYVm7neRUsdD46KqZ9Vzt9npoTM9+uhe67WV1
W2/D+XBQEjGCce6jPfDL26b9Zv3Fv+biBN5mdMsD/N27zU/C/0YtYXX1pTFLSqBn
6moB/PrMErlJnSWtR+tKlDOj5vzxBkPF4X5y6JWLkzUeqH7/hmCW3uG6oxxF5ymr
TUcR6WBRbq98mV0+tzxgug7Fp6eLFQSQ8z1r6EKlahr3pO3si22hyGsvJl9lfFv/
STu7R2Hqs5KIQA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:15:11 2026 by rpki-client