Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: omZ6s0j7Dxd7F8KFxP/KIJHG8OfZBxiYJAgQCEGi/6I=
Subject key identifier: 50:0C:A1:19:11:EB:29:95:39:27:20:B5:46:BB:7C:71:9C:B0:F3:50
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 01A0CFDB15575310437605FEE2D30C9B3E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: 054D
Signing time: Wed 23 Sep 2026 20:00:36 +0000
Manifest this update: Wed 23 Sep 2026 20:00:36 +0000
Manifest next update: Thu 24 Sep 2026 20:00:36 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: RbRVzrP3yoKqGoL8YuGusKVh97lQtIZ/RIC2kIcSMfg=)
2: 7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa (hash: MCVYToIwnCC1cCLBpzOqMu2Pvd8YhgVDSgwS714t8N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:15:57:53:10:43:76:05:fe:e2:d3:0c:9b:3e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Sep 23 20:00:36 2026 GMT
Not After : Sep 24 20:00:36 2026 GMT
Subject: CN=500ca11911eb2995392720b546bb7c719cb0f350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:0c:6f:04:9c:6e:e2:b3:28:1a:be:e6:ec:
bb:00:a0:7b:9d:c9:f7:64:d0:10:20:03:56:d2:41:
3b:92:61:2a:fc:44:43:23:e8:88:c0:c4:c6:a6:44:
c9:80:1c:9d:d5:bf:e2:38:ac:ec:25:4a:c2:92:48:
0e:e7:73:63:e3:3a:55:a0:51:3b:61:d4:a3:95:99:
aa:dd:a6:07:53:dd:50:04:b6:ab:5f:14:da:bf:38:
7b:44:b7:8d:c2:de:fd:5d:56:f6:ae:21:0f:ee:ce:
e0:17:9c:55:d9:17:8f:30:41:fc:52:26:99:91:4e:
18:d9:fa:4f:ee:fe:e1:e3:29:17:17:21:44:0d:9e:
82:71:4b:42:d4:2b:a7:b8:9d:97:23:7a:0c:7c:cf:
34:72:e6:cc:8e:70:c3:f1:27:94:d2:75:e4:0b:7a:
2a:27:3d:56:60:89:c2:9d:42:e8:ba:ed:ae:07:05:
07:01:69:34:47:27:48:8d:a1:74:e4:2f:fc:02:5c:
fe:44:05:b5:05:5b:b6:e9:55:8a:64:69:fb:05:26:
47:dc:e3:72:75:20:df:18:90:1e:6f:6a:0a:03:11:
9e:a2:27:30:88:1b:28:f7:ea:7a:34:e7:00:f3:be:
c4:2e:c6:19:60:df:46:6c:62:a8:5c:90:85:45:8f:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0C:A1:19:11:EB:29:95:39:27:20:B5:46:BB:7C:71:9C:B0:F3:50
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5d:58:c1:a3:d3:5a:2a:fc:f8:98:bf:2e:39:cb:5f:a2:ac:
95:9e:4e:e0:57:46:a0:a8:64:a6:38:15:43:96:d3:ce:42:b6:
e0:49:ba:d1:da:ac:3e:f4:a5:e7:c2:39:49:28:e1:21:68:08:
f1:71:a4:b4:26:a2:7a:d7:7a:d5:dd:c0:6b:0d:b1:84:8f:a6:
ee:9d:55:24:80:e0:94:8c:2c:66:6f:31:30:5d:bd:2b:96:32:
c4:5b:34:c2:5a:b0:14:44:c7:7a:22:57:24:9e:23:97:c0:ea:
f2:05:67:d2:f4:93:5a:81:c4:ca:64:b2:98:d9:06:a6:bc:e8:
c1:95:c9:e6:3f:57:62:71:29:37:a9:fd:95:a6:c7:2a:b0:88:
cd:79:7f:c0:0f:65:42:0f:2b:00:06:9d:53:fe:56:c0:8e:b2:
2c:c4:af:3d:79:ec:5c:62:f3:a6:fa:98:3e:da:4e:42:a0:42:
05:29:9c:ca:92:d7:35:4a:14:16:20:70:c5:73:e5:69:ba:dc:
e3:49:25:cb:3c:25:6c:e2:95:44:b0:cd:cb:ff:59:2b:9b:4c:
91:c3:85:33:3a:ce:77:46:c9:d9:69:9e:7f:84:f1:6f:be:9a:
4c:49:91:06:9e:4c:92:31:b0:2c:78:92:73:50:9c:7f:87:1c:
20:1a:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:14:41 2026 by rpki-client