Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/1l5uE0QDErkapu7MVyHDTfDKxdM.mft
File: 1l5uE0QDErkapu7MVyHDTfDKxdM.mft (raw, json)
Hash identifier: BMsrfLtAUOZvhegYoYRurE9KSVPuOUZryIj1YVeUBCM=
Subject key identifier: 40:97:E5:21:8C:D8:B5:03:72:13:FF:1F:5C:7C:B0:92:45:FA:BF:8B
Authority key identifier: D6:5E:6E:13:44:03:12:B9:1A:A6:EE:CC:57:21:C3:4D:F0:CA:C5:D3
Certificate issuer: /CN=d65e6e13440312b91aa6eecc5721c34df0cac5d3
Certificate serial: 01A0D538E832ADFC76B5B5DF4705F9B86296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l5uE0QDErkapu7MVyHDTfDKxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/1l5uE0QDErkapu7MVyHDTfDKxdM.mft
Manifest number: 4B
Signing time: Thu 24 Sep 2026 21:01:11 +0000
Manifest this update: Thu 24 Sep 2026 21:01:11 +0000
Manifest next update: Fri 25 Sep 2026 21:01:11 +0000
Files and hashes: 1: 1l5uE0QDErkapu7MVyHDTfDKxdM.crl (hash: pFw2mQzqdR1JWo/Q2RVGzwuvBxGdCDDX8mzptSFQyTs=)
2: QrJnt7Nj3OmaHfyjq-PtVEJtyy0.roa (hash: E3QnNjp4V5cy2WTVSsSZqyhPRRSFQuH44knBl/3Gpgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/1l5uE0QDErkapu7MVyHDTfDKxdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/1l5uE0QDErkapu7MVyHDTfDKxdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l5uE0QDErkapu7MVyHDTfDKxdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:e8:32:ad:fc:76:b5:b5:df:47:05:f9:b8:62:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65e6e13440312b91aa6eecc5721c34df0cac5d3
Validity
Not Before: Sep 24 21:01:11 2026 GMT
Not After : Sep 25 21:01:11 2026 GMT
Subject: CN=4097e5218cd8b5037213ff1f5c7cb09245fabf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:93:87:3a:dd:4e:29:dc:19:10:de:ea:1f:
15:45:bb:4e:ba:dc:3b:40:a2:c1:7b:88:6e:54:99:
62:82:38:b3:e5:ad:0b:16:4f:a2:4d:b7:48:07:35:
e9:f1:0a:9a:5f:33:c1:4e:0d:d9:6b:21:1a:5b:83:
8f:4a:9b:c9:40:63:4a:37:01:df:32:44:4d:0f:8e:
b8:46:eb:17:2f:ae:90:ea:d2:66:79:d9:7a:f6:94:
7d:f2:ab:ec:94:40:ed:4c:93:9b:81:ac:9f:b5:f0:
80:30:74:5b:dc:2d:33:9f:be:49:6d:a4:3a:96:e4:
b5:ad:12:08:8b:d9:45:0d:85:ab:db:8e:30:fd:36:
4d:e3:93:1c:63:ec:fb:c2:4f:eb:8f:88:6c:6f:10:
26:6e:b2:d9:18:88:b1:fd:d9:55:64:b9:60:a6:18:
c2:4f:cc:0b:10:87:63:54:9a:57:17:ab:06:df:c4:
81:40:c6:1c:96:d5:61:c2:b5:25:25:bd:4b:e6:f1:
e8:20:45:2d:a3:9a:74:74:2e:cd:27:c7:e5:4f:1b:
3d:0d:ed:7f:fe:f1:5b:52:8d:d4:79:dc:3b:99:d0:
85:12:09:95:d3:8f:47:70:25:76:9e:85:0d:e6:2b:
40:90:a2:b7:a0:f0:63:48:d7:3b:5f:7d:09:db:4e:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:97:E5:21:8C:D8:B5:03:72:13:FF:1F:5C:7C:B0:92:45:FA:BF:8B
X509v3 Authority Key Identifier:
keyid:D6:5E:6E:13:44:03:12:B9:1A:A6:EE:CC:57:21:C3:4D:F0:CA:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l5uE0QDErkapu7MVyHDTfDKxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/1l5uE0QDErkapu7MVyHDTfDKxdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/1l5uE0QDErkapu7MVyHDTfDKxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c8:a3:7d:ad:65:be:f4:99:1b:12:d6:50:84:53:57:d1:ab:
8f:66:64:98:01:29:b5:74:f7:bc:20:13:46:99:8a:12:15:25:
3e:32:35:26:e7:21:f6:79:2e:4b:80:5f:78:f0:6a:b2:d1:c8:
58:59:58:e3:04:d3:8b:00:36:bc:25:0c:20:4c:79:90:74:93:
89:d3:19:aa:51:eb:c3:c3:a3:e7:8c:e1:fb:5f:49:c5:f0:6b:
5e:08:a5:0f:2b:cc:81:71:e8:00:72:d6:03:46:3d:c5:3a:f4:
8d:8e:07:2f:4d:cb:86:b1:34:a5:06:bf:a6:75:15:f5:dd:20:
8a:60:86:3d:75:51:a2:49:15:a6:cb:2e:2c:86:69:5b:45:3c:
22:7b:05:69:f0:47:89:41:c9:80:73:03:97:2d:92:c5:a9:4d:
3c:eb:70:b7:17:0f:7b:c9:cd:46:85:2e:a4:33:bd:96:6c:e0:
99:ff:a8:d2:53:29:9f:85:db:33:16:c6:25:12:81:5b:29:cd:
fa:ed:e9:89:3a:a0:33:88:bd:dc:60:0c:82:f5:f6:d8:90:e4:
76:b5:8d:fb:1b:e6:8b:51:a2:8f:31:0f:64:8a:66:0c:a5:08:
0c:0b:88:ab:1c:7f:5b:35:d9:50:f6:e2:aa:ac:26:16:e7:30:
6d:cb:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:30:04 2026 by rpki-client