Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: JKljNRcJ8DjzJLsgsTtyNXfnBQisLJpVUITNVERjDrw=
Subject key identifier: 9C:EA:C9:11:4B:98:B3:02:8E:89:97:3C:82:32:BB:C9:82:75:AB:F7
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 01A0CE241395D65A4BDE3A233BDA8A7A8269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 0E97
Signing time: Wed 23 Sep 2026 12:01:05 +0000
Manifest this update: Wed 23 Sep 2026 12:01:05 +0000
Manifest next update: Thu 24 Sep 2026 12:01:05 +0000
Files and hashes: 1: 1-ZxJKDFY_5zEIrEwX3VUy-JWPSA.roa (hash: GNsBEOF1St9pG7LTdw9A6w4OoqaTcb1Ixn98EplE4uQ=)
2: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: tsF5TjwGt3+QrXCp1oGQ1lxQlPm46Zhybr/QRELD43U=)
3: IAE8GGEet8vnOy86a4Pl0t2IxIY.roa (hash: lB8GOpaeZj6cYWMehbLSIz/zXRuF4JutqhvwkMmG1eM=)
4: is55BrXiUjEY_w75gay3Xb4D5SQ.roa (hash: QUfa5r3yyLD0pccqcwV34ch7edYey1CHveIQqVa6Gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:13:95:d6:5a:4b:de:3a:23:3b:da:8a:7a:82:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Sep 23 12:01:05 2026 GMT
Not After : Sep 24 12:01:05 2026 GMT
Subject: CN=9ceac9114b98b3028e89973c8232bbc98275abf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:36:e8:bd:13:72:c0:11:49:44:56:4d:e1:
e3:b9:ff:c8:b8:3e:64:70:41:df:47:05:a4:33:1a:
3f:ff:bc:79:95:86:45:1c:20:3f:c3:4d:49:0e:24:
70:a5:7f:f5:be:cd:99:38:dd:53:01:9a:ea:0a:18:
2c:dd:a7:82:77:73:c3:51:1c:c9:5d:43:74:47:c6:
47:af:a3:9a:36:64:25:b0:d5:0a:40:a1:f2:67:cf:
ce:27:04:51:c6:e1:c3:e5:c6:4b:b0:21:ce:40:c7:
60:91:69:dc:2b:60:75:7c:a7:3c:53:0a:4e:13:e4:
fc:3d:a6:b8:e4:d9:c2:86:c4:9e:f1:d1:b0:ff:79:
5b:d2:5d:c1:74:10:2f:3d:61:8e:8d:e6:10:45:82:
8c:dd:42:79:06:21:a1:75:fa:11:7d:1f:e4:67:96:
18:fe:8c:42:67:f3:2a:b0:17:5a:a4:49:f4:44:fe:
ee:42:01:7d:cc:96:e9:ae:10:ad:20:b8:c4:67:61:
a1:81:f9:e1:57:19:55:9a:84:71:ea:8d:9c:9e:cf:
59:4e:5b:30:52:e7:06:19:ee:af:6c:6d:7e:e6:ba:
c2:ab:c7:a3:25:99:f4:aa:24:c3:ce:f4:21:b6:53:
9a:52:38:cf:30:89:a8:96:f9:cd:cf:9d:6c:2b:a7:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:C9:11:4B:98:B3:02:8E:89:97:3C:82:32:BB:C9:82:75:AB:F7
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4e:5f:28:5e:ef:93:d5:31:90:fe:a6:86:6d:80:15:dc:79:
b2:d9:8f:9d:c6:84:ef:ba:75:41:4c:5b:14:b2:7f:d0:b6:b2:
e5:8b:4f:80:42:96:25:d6:bc:3c:a7:ed:ee:18:d2:6d:cc:24:
70:f6:e1:5a:66:a9:ae:49:fc:4f:e2:4c:fd:fe:ce:bc:84:5a:
66:a3:ac:db:2b:77:f4:63:fa:d7:6b:1a:77:c7:94:fd:eb:31:
dd:b8:d2:9b:14:01:66:65:6a:85:fc:0d:a9:03:d0:41:73:83:
bc:ec:b5:a3:52:62:6d:34:07:70:e5:b1:41:93:ea:e9:b6:74:
fa:44:32:10:a2:a0:82:b0:5b:09:73:1e:71:e7:e4:1a:f6:fb:
6c:c2:30:c8:40:95:6c:6d:bb:aa:1e:ec:c4:dd:d4:af:92:7c:
34:d1:cc:b7:92:8e:ad:f6:dd:f3:54:fa:72:5b:d1:f3:b8:77:
3d:93:6f:10:8f:04:ba:fc:bc:83:1e:87:a8:33:52:69:ca:88:
ed:20:c8:8f:89:3d:fe:ff:48:72:0a:a7:d9:97:9d:1c:41:ac:
fe:08:cc:08:71:2e:b5:73:51:14:3d:e1:8b:76:a6:47:91:68:
4e:ea:b0:44:69:61:8b:8e:e2:8a:19:dc:8f:9e:23:94:af:87:
07:0a:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:08:08 2026 by rpki-client