Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
File: 1s5ZxWscobYwJswpw-etzzQUZjw.mft (raw, json)
Hash identifier: hcEyi8ZRUMUCMX19zur0qoNybpJeD+z0AbaRRm3wyG8=
Subject key identifier: FE:29:B6:37:C3:02:E8:39:7A:12:7F:90:AD:F5:7A:B0:6A:ED:AD:87
Authority key identifier: D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
Certificate issuer: /CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Certificate serial: 01A0D34B26133F4579E256836730C489049F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
Manifest number: 0193
Signing time: Thu 24 Sep 2026 12:01:52 +0000
Manifest this update: Thu 24 Sep 2026 12:01:52 +0000
Manifest next update: Fri 25 Sep 2026 12:01:52 +0000
Files and hashes: 1: 1s5ZxWscobYwJswpw-etzzQUZjw.crl (hash: Z5C/3rqPwdo8oNcFQcHqIX9gMVSO/lw8Ru3NtiiklKQ=)
2: N9FFxQDjdWSsDqKRotEMiDNfWM0.roa (hash: JYJSVQnx65soskv06MhEawaexOLV3MdaQKd5cWOTtiM=)
3: qcXXlS_rHE9ouJsEbCmmlq5R8Ug.roa (hash: 1unAuaM5VTHoo8Otio/wEUldD3aBxQgm3lHyPoQMCYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:26:13:3f:45:79:e2:56:83:67:30:c4:89:04:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Validity
Not Before: Sep 24 12:01:52 2026 GMT
Not After : Sep 25 12:01:52 2026 GMT
Subject: CN=fe29b637c302e8397a127f90adf57ab06aedad87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:46:e0:7d:bb:be:fc:aa:cc:2a:67:73:42:
71:e6:fc:16:18:a0:9d:48:c0:23:64:fe:d4:da:09:
96:25:6c:38:f4:72:5f:c4:45:b2:15:65:2e:9d:e5:
7b:dd:f7:0e:58:bc:13:0f:e6:39:a2:03:06:42:fb:
f1:47:90:61:97:02:07:39:4f:c7:dc:03:8c:47:fa:
a3:8c:f7:ae:12:2b:03:3d:a1:2a:b9:b8:9e:be:8d:
dd:c3:f9:d5:bc:11:cc:d3:bc:65:f0:66:b7:4a:7a:
44:38:1f:f3:34:c7:63:30:3c:5d:be:eb:8a:4b:72:
9c:0e:ac:0d:b4:0c:e7:af:42:d6:01:01:7b:9f:e5:
f2:bf:3f:eb:69:81:9f:20:79:4a:45:2f:14:ec:29:
2b:88:3c:ec:9b:89:a1:a6:1e:cc:5c:14:91:06:18:
00:7f:59:23:e0:30:85:82:c1:a6:03:6f:19:aa:ab:
cc:96:6b:26:10:c7:8a:b1:5a:92:eb:97:9c:ad:f6:
20:73:6d:04:ce:70:f5:b6:5c:73:c2:d3:f7:e3:e1:
27:5f:1a:66:40:eb:d7:25:01:53:a6:f9:a1:cb:e7:
b4:44:fe:a3:52:6b:08:7d:71:43:da:ea:7d:7c:05:
e2:c8:d5:d1:a8:da:ef:51:07:97:9a:61:ee:21:cd:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:29:B6:37:C3:02:E8:39:7A:12:7F:90:AD:F5:7A:B0:6A:ED:AD:87
X509v3 Authority Key Identifier:
keyid:D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7e:f0:1e:58:01:66:b7:b6:35:4a:a1:a2:77:2d:d6:f3:46:
3d:8c:f6:e1:48:1f:cd:e0:c9:a8:0f:23:d1:e2:e3:11:41:09:
22:27:84:a7:22:b7:f7:cf:37:e3:b5:14:ee:05:1a:ad:f0:43:
6d:91:21:e0:d2:19:64:88:bc:20:de:40:a8:84:45:2d:5b:27:
a6:0c:62:32:63:01:a6:b2:5f:8f:a6:3b:ee:56:dd:1a:b5:e0:
95:70:09:e4:2d:e0:94:b7:34:0f:f3:02:cd:69:cf:ed:37:15:
f7:77:f6:c9:fd:c9:ec:47:f1:1d:2f:9b:ef:84:81:29:8a:63:
39:fa:ed:6f:a6:ea:ba:23:a4:2a:c8:69:6b:e4:1a:cc:6c:8e:
91:5d:b5:7f:f7:e6:75:fb:24:94:29:f8:c6:40:74:62:b2:30:
b7:3a:b9:87:ef:e7:9c:9d:1d:f5:22:8d:ce:98:19:f9:ba:4c:
53:b7:59:f8:be:94:d2:31:10:94:f3:81:d1:b5:bf:37:d2:02:
fd:8a:14:e1:b1:77:0a:db:a7:2d:37:3d:f4:a4:b0:a4:b4:46:
d4:f1:0f:03:3a:1d:7f:97:29:ee:f5:c3:8f:3c:4a:1c:bc:e6:
95:52:50:e6:70:85:5d:f9:cc:0c:35:5f:67:85:10:75:65:4a:
fd:34:fa:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSyYTP0V54laDZzDEiQSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U1OWM1NmIxY2ExYjYzMDI2Y2MyOWMzZTdhZGNmMzQx
NDY2M2MwHhcNMjYwOTI0MTIwMTUyWhcNMjYwOTI1MTIwMTUyWjAzMTEwLwYDVQQD
EyhmZTI5YjYzN2MzMDJlODM5N2ExMjdmOTBhZGY1N2FiMDZhZWRhZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoupG4H27vvyqzCpnc0Jx5vwWGKCd
SMAjZP7U2gmWJWw49HJfxEWyFWUuneV73fcOWLwTD+Y5ogMGQvvxR5BhlwIHOU/H
3AOMR/qjjPeuEisDPaEqubievo3dw/nVvBHM07xl8Ga3SnpEOB/zNMdjMDxdvuuK
S3KcDqwNtAznr0LWAQF7n+Xyvz/raYGfIHlKRS8U7CkriDzsm4mhph7MXBSRBhgA
f1kj4DCFgsGmA28ZqqvMlmsmEMeKsVqS65ecrfYgc20EznD1tlxzwtP34+EnXxpm
QOvXJQFTpvmhy+e0RP6jUmsIfXFD2up9fAXiyNXRqNrvUQeXmmHuIc3/EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4ptjfDAug5ehJ/kK31erBq7a2HMB8GA1UdIwQY
MBaAFNbOWcVrHKG2MCbMKcPnrc80FGY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1WnhXc2NvYll3SnN3cHctZXR6elFVWmp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jZWI1NzgtNzFkOC00NDllLWEyYzkt
Yzg1OTYzYzcxOGZiLzEvMXM1WnhXc2NvYll3SnN3cHctZXR6elFVWmp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jZWI1NzgtNzFkOC00NDllLWEyYzktYzg1OTYzYzcxOGZi
LzEvMXM1WnhXc2NvYll3SnN3cHctZXR6elFVWmp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE37wHlgB
Zre2NUqhonct1vNGPYz24UgfzeDJqA8j0eLjEUEJIieEpyK3988347UU7gUarfBD
bZEh4NIZZIi8IN5AqIRFLVsnpgxiMmMBprJfj6Y77lbdGrXglXAJ5C3glLc0D/MC
zWnP7TcV93f2yf3J7EfxHS+b74SBKYpjOfrtb6bquiOkKshpa+QazGyOkV21f/fm
dfsklCn4xkB0YrIwtzq5h+/nnJ0d9SKNzpgZ+bpMU7dZ+L6U0jEQlPOB0bW/N9IC
/YoU4bF3CtunLTc99KSwpLRG1PEPAzodf5cp7vXDjzxKHLzmlVJQ5nCFXfnMDDVf
Z4UQdWVK/TT6lQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:30:54 2026 by rpki-client