Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
File: 1s5ZxWscobYwJswpw-etzzQUZjw.mft (raw, json)
Hash identifier: fI5v56uVGcxVJ2l9nDicnBDsuas1MOQE+gYM54sy/c8=
Subject key identifier: 30:C0:AC:F8:C1:56:EE:ED:1A:C4:81:48:C9:8E:D6:B2:76:3E:0F:97
Authority key identifier: D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
Certificate issuer: /CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Certificate serial: 019E1C0FC6D215AFFE43F95E251E5685A548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
Manifest number: 2B
Signing time: Tue 12 May 2026 12:00:56 +0000
Manifest this update: Tue 12 May 2026 12:00:56 +0000
Manifest next update: Wed 13 May 2026 12:00:56 +0000
Files and hashes: 1: 1s5ZxWscobYwJswpw-etzzQUZjw.crl (hash: tWYdoA/o8bVzgruhOp62eTbC1N+o3wvbln6ZuD5Ig/U=)
2: N9FFxQDjdWSsDqKRotEMiDNfWM0.roa (hash: JYJSVQnx65soskv06MhEawaexOLV3MdaQKd5cWOTtiM=)
3: qcXXlS_rHE9ouJsEbCmmlq5R8Ug.roa (hash: 1unAuaM5VTHoo8Otio/wEUldD3aBxQgm3lHyPoQMCYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:c6:d2:15:af:fe:43:f9:5e:25:1e:56:85:a5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Validity
Not Before: May 12 12:00:56 2026 GMT
Not After : May 13 12:00:56 2026 GMT
Subject: CN=30c0acf8c156eeed1ac48148c98ed6b2763e0f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:aa:ea:89:e6:e0:1c:84:af:84:42:16:1d:
c5:5b:28:60:bb:67:6b:f8:6c:36:96:0f:7c:8a:8e:
f9:c4:82:b0:59:9c:8d:49:10:a0:b9:30:95:a2:1e:
dc:b8:13:17:c1:74:aa:f5:81:31:28:46:29:76:f4:
77:f1:c8:d3:4c:2d:11:a6:8b:b2:fc:1f:34:49:54:
64:5a:6a:c2:7c:bc:49:38:91:a2:36:39:cd:9d:dc:
5c:8a:ad:0f:9f:18:6c:c7:c0:81:20:5c:64:aa:c2:
8c:d0:ba:d0:2f:dc:7c:28:b5:60:49:4a:27:f7:f0:
ff:56:a7:24:9d:d9:7d:4f:92:9e:b0:9e:28:20:29:
a2:9f:7e:c4:2d:58:dc:a9:8c:65:26:dc:a5:69:c4:
bb:40:94:a4:dc:cc:4e:92:fd:58:e6:df:b6:b6:78:
13:2c:f6:cb:c8:4d:a9:d4:a1:29:82:12:80:70:93:
56:d0:f4:f4:15:11:20:b7:c6:a0:6d:12:1a:23:b8:
b9:33:2c:4e:24:cb:d6:25:4d:65:91:6e:07:5b:5e:
2d:d7:4f:ba:46:c4:de:aa:bf:08:c8:58:87:c5:28:
03:71:0c:f1:d3:46:1c:11:6a:53:15:0d:6c:02:69:
34:e3:ce:e0:39:58:d2:37:35:80:d1:85:a2:2d:98:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C0:AC:F8:C1:56:EE:ED:1A:C4:81:48:C9:8E:D6:B2:76:3E:0F:97
X509v3 Authority Key Identifier:
keyid:D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1d:a2:b3:7f:4c:2c:48:ff:c9:4c:3c:68:ea:bb:82:c1:67:
7d:f3:b4:bb:a0:ff:6c:2b:45:4d:7d:9f:5b:fb:6f:09:06:b1:
dc:4f:43:73:90:66:cd:bc:f8:34:2c:38:db:41:a2:45:9e:0d:
89:94:9f:41:1c:5b:7e:47:49:90:e5:b6:72:59:5e:e5:97:0e:
b0:60:a8:92:70:96:b1:36:d1:f5:97:a2:27:21:8d:7c:6b:74:
02:66:12:60:22:f3:f2:ad:04:a7:e2:c2:be:6f:c6:23:91:c7:
4c:6f:fb:33:3a:f6:dd:ed:af:f4:11:ff:38:4f:af:c2:14:cd:
1d:8d:ef:96:9e:e4:6f:42:d4:0f:5c:aa:b2:83:fe:66:aa:45:
88:cb:14:21:af:b3:27:b6:7e:ac:77:d8:eb:e0:ec:0f:e9:6a:
e6:80:ce:9b:d2:19:24:19:75:71:e7:e3:ff:16:a5:c9:5b:82:
3b:ef:8d:52:c6:6f:91:c6:6f:01:8d:31:a4:8c:e6:0f:35:4d:
bc:72:1b:4e:a2:2c:e2:f3:eb:7f:21:8a:88:dd:1e:b7:f3:29:
05:14:c2:d8:6e:6e:d2:1a:06:b2:55:6e:0f:55:62:88:ef:a7:
00:8f:4b:28:32:6d:e2:70:f7:0d:16:46:0a:fa:c2:c3:f6:97:
ce:52:9d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD8bSFa/+Q/leJR5WhaVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U1OWM1NmIxY2ExYjYzMDI2Y2MyOWMzZTdhZGNmMzQx
NDY2M2MwHhcNMjYwNTEyMTIwMDU2WhcNMjYwNTEzMTIwMDU2WjAzMTEwLwYDVQQD
EygzMGMwYWNmOGMxNTZlZWVkMWFjNDgxNDhjOThlZDZiMjc2M2UwZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslSq6onm4ByEr4RCFh3FWyhgu2dr
+Gw2lg98io75xIKwWZyNSRCguTCVoh7cuBMXwXSq9YExKEYpdvR38cjTTC0Rpouy
/B80SVRkWmrCfLxJOJGiNjnNndxciq0Pnxhsx8CBIFxkqsKM0LrQL9x8KLVgSUon
9/D/Vqckndl9T5KesJ4oICmin37ELVjcqYxlJtylacS7QJSk3MxOkv1Y5t+2tngT
LPbLyE2p1KEpghKAcJNW0PT0FREgt8agbRIaI7i5MyxOJMvWJU1lkW4HW14t10+6
RsTeqr8IyFiHxSgDcQzx00YcEWpTFQ1sAmk0487gOVjSNzWA0YWiLZikTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDArPjBVu7tGsSBSMmO1rJ2Pg+XMB8GA1UdIwQY
MBaAFNbOWcVrHKG2MCbMKcPnrc80FGY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1WnhXc2NvYll3SnN3cHctZXR6elFVWmp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jZWI1NzgtNzFkOC00NDllLWEyYzkt
Yzg1OTYzYzcxOGZiLzEvMXM1WnhXc2NvYll3SnN3cHctZXR6elFVWmp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jZWI1NzgtNzFkOC00NDllLWEyYzktYzg1OTYzYzcxOGZi
LzEvMXM1WnhXc2NvYll3SnN3cHctZXR6elFVWmp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADh2is39M
LEj/yUw8aOq7gsFnffO0u6D/bCtFTX2fW/tvCQax3E9Dc5Bmzbz4NCw420GiRZ4N
iZSfQRxbfkdJkOW2clle5ZcOsGCoknCWsTbR9ZeiJyGNfGt0AmYSYCLz8q0Ep+LC
vm/GI5HHTG/7Mzr23e2v9BH/OE+vwhTNHY3vlp7kb0LUD1yqsoP+ZqpFiMsUIa+z
J7Z+rHfY6+DsD+lq5oDOm9IZJBl1cefj/xalyVuCO++NUsZvkcZvAY0xpIzmDzVN
vHIbTqIs4vPrfyGKiN0et/MpBRTC2G5u0hoGslVuD1ViiO+nAI9LKDJt4nD3DRZG
CvrCw/aXzlKdPw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:08:20 2026 by rpki-client