Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: BeUHZ900wukwwEgTOiJgbeOZnkENFTVdzmMi//K7bzM=
Subject key identifier: DF:55:A6:9F:ED:0B:5D:3C:0D:E4:C6:81:90:D0:34:F1:71:FB:80:75
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 019D273B36B79BDB9A4A27E8E1A7A4DD4017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 0DE4
Signing time: Wed 25 Mar 2026 23:01:25 +0000
Manifest this update: Wed 25 Mar 2026 23:01:25 +0000
Manifest next update: Thu 26 Mar 2026 23:01:25 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: phrR55HjOBPb5tXHKVfPg08+VyubqHqzHdeh5+4DrhU=)
2: 9k5FkeN_fWmrpsWfMXq1owb9sA8.roa (hash: a4c0BaAc3yyNgPTpyNMZf5cnp0vSbewJvrUCORbkA94=)
3: i5wzAWhzD6thOzcjAU711zxCavE.roa (hash: P2AdWkb+9Icdy+0Iaf1HCIO0qMt8S3L75/lIYdAPN0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:36:b7:9b:db:9a:4a:27:e8:e1:a7:a4:dd:40:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Mar 25 23:01:25 2026 GMT
Not After : Mar 26 23:01:25 2026 GMT
Subject: CN=df55a69fed0b5d3c0de4c68190d034f171fb8075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:89:e1:3a:b1:46:62:90:87:61:de:82:af:b6:
5b:f1:8a:01:78:54:9f:64:f4:b2:75:6b:1a:7a:9c:
e4:c6:ef:49:c9:55:52:d6:37:46:b4:7b:d9:4e:c3:
01:f4:85:c6:37:51:92:7c:cb:df:dd:bb:44:7a:14:
a3:69:73:d2:b4:ed:45:cb:71:9a:c5:ee:6a:35:43:
46:18:27:99:73:35:51:db:27:1d:76:c8:b4:87:a9:
79:a9:91:f2:9b:95:fd:b3:af:0d:47:80:a2:f0:d6:
25:42:d3:2e:23:4a:98:90:b9:f2:65:ac:51:33:94:
63:d6:d6:29:96:2e:eb:bc:8c:b6:71:9a:1d:af:1f:
93:ec:10:77:c0:26:52:a2:f5:4a:40:66:a3:2d:d8:
e5:e7:6e:35:c8:64:8c:17:10:de:fa:ed:6b:8c:81:
ee:b2:ef:77:35:42:2b:74:42:30:12:1a:53:4a:1e:
95:eb:aa:1e:63:50:4e:01:45:2f:d9:15:d5:d6:1a:
81:1d:a7:34:7a:9e:42:26:ba:74:73:0d:c4:76:dc:
17:3a:75:57:67:0f:20:dd:0c:ee:27:b1:30:90:db:
71:e8:1b:15:2c:42:83:4a:5a:f9:6a:00:01:0d:e8:
d0:98:fc:44:9f:a2:96:f4:86:5d:89:a0:22:4b:2f:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:A6:9F:ED:0B:5D:3C:0D:E4:C6:81:90:D0:34:F1:71:FB:80:75
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:73:4f:44:c5:cb:2b:19:05:22:ef:55:be:29:ab:6d:e5:c0:
7b:f2:87:48:c8:ae:08:47:67:38:0a:86:fb:ce:d2:e7:13:17:
ab:ce:e2:03:5a:4e:4b:8b:50:e8:c2:c6:63:ca:71:ea:b6:38:
f4:cd:aa:93:fa:38:b2:74:e2:ec:2d:f1:ec:50:ca:91:2f:e7:
d4:82:60:66:3b:9e:34:6d:c1:b6:bc:45:c3:ea:a6:d7:89:88:
8d:fa:c4:2a:cb:fb:ff:97:6a:41:d4:e8:63:c9:c4:e9:9d:90:
59:3c:3e:5f:be:23:db:b8:9f:21:fb:2a:26:52:72:13:92:3f:
b5:c6:08:b8:7f:30:43:99:21:84:6c:ea:23:e6:8a:e0:e8:38:
1c:78:4b:d4:09:2b:ee:f1:18:84:19:22:70:60:66:29:15:f2:
3f:b5:14:85:5d:a6:82:eb:e0:ef:55:3f:64:1b:75:6f:88:be:
84:e3:29:07:5d:8c:fa:a8:aa:2b:55:87:a9:9d:38:c9:99:2c:
75:8c:76:f1:66:af:9c:79:4c:c1:85:71:ef:98:e3:47:0e:18:
c5:29:f4:59:c7:dd:66:63:ad:68:e0:95:34:5e:e0:84:a0:8e:
a7:7e:05:06:d8:ce:4a:55:d5:89:3e:c7:37:39:5f:6d:3c:1c:
79:9a:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:34 2026 by rpki-client