Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: BTj6AWzIx2x96cgZDaAKtSphg7WHDfuqYY53c4LW/T8=
Subject key identifier: AF:45:CA:26:E3:1A:2C:E2:5C:57:5B:3B:24:86:F1:C0:4A:1E:71:C2
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 019F8FB557F1E620DDB042281D510EA6C8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 0F28
Signing time: Thu 23 Jul 2026 16:00:53 +0000
Manifest this update: Thu 23 Jul 2026 16:00:53 +0000
Manifest next update: Fri 24 Jul 2026 16:00:53 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: ysStTbqTs1MYxQaxMVNdJ5pP49gaZGOdxwCXLvmjrOs=)
2: i5wzAWhzD6thOzcjAU711zxCavE.roa (hash: P2AdWkb+9Icdy+0Iaf1HCIO0qMt8S3L75/lIYdAPN0w=)
3: p-kTlbQouPjMNiRixH1O0X2WaO4.roa (hash: HbkgtFGk5iSU61DgeSp5FYFokJuHWEnOUImsHeOoZNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:57:f1:e6:20:dd:b0:42:28:1d:51:0e:a6:c8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Jul 23 16:00:53 2026 GMT
Not After : Jul 24 16:00:53 2026 GMT
Subject: CN=af45ca26e31a2ce25c575b3b2486f1c04a1e71c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:90:94:fe:fd:34:d5:b4:a3:f5:00:9c:18:
fd:0e:13:b4:ed:e0:21:1f:2a:62:7d:5e:7f:54:1d:
56:19:6f:bd:a8:14:e6:ce:1f:93:8b:b5:2f:c9:5d:
49:ce:71:c3:db:af:5b:a2:91:ed:f9:9c:63:9f:a9:
83:11:dd:f2:d3:9d:f2:24:37:9e:dc:9e:85:12:e3:
b1:80:4a:55:26:a6:3a:e0:0a:81:b7:85:9b:0a:db:
dc:de:8c:21:62:83:b8:5c:37:73:0b:61:3e:29:e8:
c4:37:08:c2:86:2c:25:50:56:f5:51:15:50:a3:4d:
c7:e4:c8:ae:2d:83:ca:da:2c:c1:7b:a9:4e:67:c0:
4d:92:5a:5f:85:1f:b4:4b:2c:aa:b5:86:b6:cc:0a:
8f:9a:17:3f:8d:90:0f:7e:83:b7:49:78:a1:2d:37:
99:0c:4d:12:1d:d9:84:bd:eb:bb:25:46:48:15:03:
bd:81:ff:f9:e9:c2:bc:03:9b:36:07:28:96:2a:ab:
2c:80:e3:bf:39:2e:09:02:73:40:2b:8d:80:ce:21:
b9:1b:bf:60:d1:22:5a:97:d0:72:e9:65:b1:c5:7a:
87:f8:82:13:29:b9:04:26:eb:ef:7f:35:e6:8f:4b:
d1:58:8c:51:84:ac:f2:11:18:18:f2:ee:13:cf:57:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:45:CA:26:E3:1A:2C:E2:5C:57:5B:3B:24:86:F1:C0:4A:1E:71:C2
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:02:bd:0c:7c:2c:a0:99:52:b4:19:59:12:d1:5a:46:ac:84:
4a:bb:a7:8c:d2:74:50:ba:2b:e8:5c:68:11:1e:c9:03:92:c6:
77:ac:93:94:30:cb:a2:b7:21:ae:26:70:7f:6c:9a:5e:db:a8:
0d:52:71:74:a9:5c:20:27:fd:81:45:cf:a5:b5:ad:e1:3d:a1:
79:e9:59:8c:21:e1:f5:af:e3:2c:59:b5:c4:1e:d1:0c:09:88:
b8:41:d8:ed:15:bc:ff:88:8f:55:0d:36:ee:22:5f:ee:c6:5b:
64:9e:5c:91:d3:07:de:c9:9c:52:22:1d:eb:3f:0f:b6:0c:43:
45:c9:3d:41:46:4e:74:5d:6f:0e:be:47:f5:bf:a0:32:84:7b:
4e:09:2b:ca:7d:91:5a:2d:23:6d:7d:6e:63:50:c2:60:87:12:
b5:a8:fd:52:b8:ac:bf:14:f8:1d:e2:9d:8d:8c:ec:15:c5:96:
be:47:14:42:ef:c1:59:75:73:e6:05:14:de:04:70:bb:22:05:
b1:68:3e:ef:57:a6:39:73:58:ad:2a:ce:f7:27:a1:8f:78:1f:
65:b8:cc:33:3c:dc:a4:a0:35:e2:32:0e:eb:02:2c:ad:59:cb:
9a:ca:7b:ca:d7:59:6b:ad:d7:45:5c:05:50:38:66:15:39:39:
e1:f5:24:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtVfx5iDdsEIoHVEOpsiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U0OTI1NWY0MDZhNzI1NTkzYzYyZTFjNDA4Nzc5NTg2
ZDU2ZWYwHhcNMjYwNzIzMTYwMDUzWhcNMjYwNzI0MTYwMDUzWjAzMTEwLwYDVQQD
EyhhZjQ1Y2EyNmUzMWEyY2UyNWM1NzViM2IyNDg2ZjFjMDRhMWU3MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeCQlP79NNW0o/UAnBj9DhO07eAh
HypifV5/VB1WGW+9qBTmzh+Ti7UvyV1JznHD269bopHt+Zxjn6mDEd3y053yJDee
3J6FEuOxgEpVJqY64AqBt4WbCtvc3owhYoO4XDdzC2E+KejENwjChiwlUFb1URVQ
o03H5MiuLYPK2izBe6lOZ8BNklpfhR+0SyyqtYa2zAqPmhc/jZAPfoO3SXihLTeZ
DE0SHdmEveu7JUZIFQO9gf/56cK8A5s2ByiWKqssgOO/OS4JAnNAK42AziG5G79g
0SJal9By6WWxxXqH+IITKbkEJuvvfzXmj0vRWIxRhKzyERgY8u4Tz1d+jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9FyibjGiziXFdbOySG8cBKHnHCMB8GA1UdIwQY
MBaAFNbOSSVfQGpyVZPGLhxAh3lYbVbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmIt
NjcyNWQ5ODE5NmM2LzEvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmItNjcyNWQ5ODE5NmM2
LzEvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAK9DHws
oJlStBlZEtFaRqyESrunjNJ0ULor6FxoER7JA5LGd6yTlDDLorchriZwf2yaXtuo
DVJxdKlcICf9gUXPpbWt4T2heelZjCHh9a/jLFm1xB7RDAmIuEHY7RW8/4iPVQ02
7iJf7sZbZJ5ckdMH3smcUiId6z8PtgxDRck9QUZOdF1vDr5H9b+gMoR7Tgkryn2R
Wi0jbX1uY1DCYIcStaj9UrisvxT4HeKdjYzsFcWWvkcUQu/BWXVz5gUU3gRwuyIF
sWg+71emOXNYrSrO9yehj3gfZbjMMzzcpKA14jIO6wIsrVnLmsp7ytdZa63XRVwF
UDhmFTk54fUkow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:20 2026 by rpki-client