Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: DH+Qkn/LbaYWiKJenB+8vw2JkeSIRX3FPbFeSHH5th8=
Subject key identifier: DB:20:8F:07:51:FE:EE:52:28:CB:CC:21:AA:10:61:7A:44:D8:84:79
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 019D25981BD305C0B167CE004935C0B374A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 0CB2
Signing time: Wed 25 Mar 2026 15:23:38 +0000
Manifest this update: Wed 25 Mar 2026 15:23:38 +0000
Manifest next update: Thu 26 Mar 2026 15:23:38 +0000
Files and hashes: 1: 1-ZxJKDFY_5zEIrEwX3VUy-JWPSA.roa (hash: GNsBEOF1St9pG7LTdw9A6w4OoqaTcb1Ixn98EplE4uQ=)
2: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: 4rf/nreDJ7iCuNZqX6qizV+j/NEYlWqTlFEK290KzvQ=)
3: IAE8GGEet8vnOy86a4Pl0t2IxIY.roa (hash: lB8GOpaeZj6cYWMehbLSIz/zXRuF4JutqhvwkMmG1eM=)
4: is55BrXiUjEY_w75gay3Xb4D5SQ.roa (hash: QUfa5r3yyLD0pccqcwV34ch7edYey1CHveIQqVa6Gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:98:1b:d3:05:c0:b1:67:ce:00:49:35:c0:b3:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Mar 25 15:23:38 2026 GMT
Not After : Mar 26 15:23:38 2026 GMT
Subject: CN=db208f0751feee5228cbcc21aa10617a44d88479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:19:29:c5:ff:2d:c8:2c:8f:21:94:aa:7e:
ac:4f:2c:3b:91:d9:a0:06:f5:9b:34:a7:05:1d:ec:
b1:c3:55:27:ba:78:2f:b6:e1:3c:1d:36:bc:8d:c0:
2c:c0:8d:8d:00:01:d8:79:bd:61:12:8b:b7:e4:fe:
81:19:43:47:79:3e:6d:ec:84:ec:03:06:37:86:ad:
25:c3:3e:85:a3:78:9d:58:63:9f:a3:0a:a4:67:21:
b2:ce:7d:45:99:76:a3:d0:7f:e3:5d:5d:a8:39:1b:
27:82:fc:3a:d9:35:21:8e:e2:4c:2c:df:3a:20:ef:
68:9e:34:ea:67:8d:f3:9b:dc:4d:48:9d:09:a0:a1:
58:cb:b9:5b:43:fc:1f:aa:0a:ed:40:81:0d:76:b5:
a4:c8:ba:89:b1:33:3c:29:b3:58:97:c1:56:54:bb:
67:bc:9e:68:94:29:d1:66:00:89:ee:5e:41:12:ce:
e6:b1:50:69:c0:68:1a:51:d8:e9:e7:1f:2f:cf:aa:
a9:f7:59:5c:93:51:0a:53:70:15:35:52:d4:8e:16:
4a:1b:8e:cd:81:97:5e:04:43:05:43:1c:ec:10:d4:
b0:4a:6b:25:4a:49:48:18:a0:e4:9e:2c:fb:09:2f:
ab:0a:a0:66:d7:4a:f0:e6:b3:60:42:4f:51:b5:02:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:8F:07:51:FE:EE:52:28:CB:CC:21:AA:10:61:7A:44:D8:84:79
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fe:34:d5:bf:cb:fc:19:38:f1:6e:fa:26:c8:12:d7:a9:fe:
dd:51:4c:82:0b:ca:dd:fd:58:cd:c9:79:2b:49:88:1a:dc:9c:
0e:7f:22:3c:96:c2:2d:a7:2e:57:06:74:de:b4:90:5b:c4:47:
2c:a5:b5:0b:de:76:7c:3e:f5:c9:36:f7:f5:cf:7b:3f:3c:e3:
38:7c:38:80:5b:7f:99:6d:41:da:26:8b:dc:94:c1:51:55:2c:
7d:a0:f5:ce:b2:b5:e6:07:21:75:38:ba:91:40:9f:d1:ae:c9:
c1:fa:bf:2b:9b:c9:94:e2:8a:12:8f:39:68:fd:8d:e1:e4:2d:
e9:77:bd:66:db:c9:b2:05:b6:b2:0c:7f:cb:af:ef:7e:d3:e1:
52:6b:c7:61:94:2a:f6:1f:d5:5f:93:d9:7e:a7:05:fb:ea:4d:
a0:9f:e7:3a:c1:04:fe:6d:11:1e:68:7f:da:4a:98:07:30:35:
59:a7:e0:b9:96:d0:a9:1c:06:96:bf:63:30:25:68:8d:cf:c6:
7f:9f:4b:62:4f:e6:70:fe:4f:83:2b:79:ea:07:52:99:b8:17:
dc:3b:e0:7b:52:06:4b:6b:92:df:7b:9f:31:86:4c:79:64:f5:
03:c9:91:6d:04:54:fa:40:a8:13:2c:2e:59:a3:9f:5b:94:7d:
95:76:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:34 2026 by rpki-client