Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: z2oLNcKOhM1A9JrVGGRH2rA1vpDSl1AevleWlEIRCQw=
Subject key identifier: 77:51:D8:28:3D:42:95:EF:B6:01:D8:43:14:7E:CD:F3:AC:BE:5F:CB
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 019E1DC72B6DC1F8A0CD6AF05C63B5C5F8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 0E68
Signing time: Tue 12 May 2026 20:00:52 +0000
Manifest this update: Tue 12 May 2026 20:00:52 +0000
Manifest next update: Wed 13 May 2026 20:00:52 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: G3a08GlWJEqSSNm0Ff95FyepX4TIv8bom7zA3TnK0JE=)
2: D3__OvIBGApa8onqNSwlT658eg0.roa (hash: 0tU4/Kkdd15wrdx9/EY0cBP3SmIyMEk3e7LRoeAsp7g=)
3: i5wzAWhzD6thOzcjAU711zxCavE.roa (hash: P2AdWkb+9Icdy+0Iaf1HCIO0qMt8S3L75/lIYdAPN0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:2b:6d:c1:f8:a0:cd:6a:f0:5c:63:b5:c5:f8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: May 12 20:00:52 2026 GMT
Not After : May 13 20:00:52 2026 GMT
Subject: CN=7751d8283d4295efb601d843147ecdf3acbe5fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:1a:bb:f0:e6:28:fb:3f:e0:6c:38:49:9a:
8f:26:2f:2e:28:e6:e3:88:6e:6d:56:a9:16:be:ca:
ea:bd:9d:af:87:70:df:86:01:99:f1:2b:ed:e2:e6:
98:db:d5:14:ed:19:c0:3a:e1:f7:76:85:d2:8b:57:
0a:80:7b:31:c9:17:21:8b:26:d5:bb:12:49:57:00:
8b:dc:1d:5e:23:03:da:23:15:bb:13:5b:86:23:8b:
8f:e5:ba:d6:35:b5:7c:89:28:e6:ad:be:29:93:a0:
87:de:8d:cf:ef:e7:28:97:60:4c:6c:fc:e2:9b:68:
87:31:ab:5f:bc:45:0f:94:0d:6c:a9:a6:6c:e9:34:
35:df:92:70:5d:0e:51:88:2c:c0:38:e7:82:44:a3:
60:9a:c8:78:40:67:5a:36:b7:42:ba:39:22:97:54:
7d:30:2b:01:17:05:d9:cd:d8:33:0d:b8:51:a1:9c:
f3:45:5c:ac:a9:85:22:10:45:a3:32:c2:28:de:2d:
df:11:d6:92:c3:00:fc:f9:59:3b:cf:6d:47:f4:9f:
11:e4:f6:33:78:ef:3f:ac:5f:a0:01:1f:11:2f:98:
8c:c3:11:11:a3:21:b8:33:12:30:02:b5:5a:8f:ce:
cc:f4:0b:11:05:8f:96:ba:6b:e9:8d:ab:5c:f0:d1:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:51:D8:28:3D:42:95:EF:B6:01:D8:43:14:7E:CD:F3:AC:BE:5F:CB
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8f:fc:dc:6f:e3:51:b9:05:b6:10:0b:a9:8c:4c:c1:e4:b7:
be:18:eb:80:ab:d2:0c:2b:6c:2d:92:93:b9:2b:31:9c:4b:85:
1a:5c:54:04:ea:6f:55:32:e4:c2:8c:7c:d0:36:45:ca:66:59:
f4:af:dc:aa:e7:a9:61:b6:90:76:00:dc:48:c8:58:53:52:37:
fa:24:cb:0b:f7:65:45:40:87:d2:7d:76:65:d7:86:74:a8:09:
54:41:21:bb:b9:a0:0c:9b:93:0d:5d:a5:c7:13:a5:87:76:d3:
1e:69:ed:c1:f0:21:e3:43:4f:63:74:6d:db:ba:75:69:4a:bf:
6d:59:da:87:eb:69:37:1c:18:50:8a:8b:73:6f:14:08:a4:cc:
5e:71:e0:da:9a:1c:f9:29:6b:24:cd:4f:2b:49:a6:ba:eb:90:
4a:e4:5a:b5:1a:24:d1:17:3d:46:72:9b:1a:ca:42:6e:1f:79:
16:52:42:86:35:85:dc:d8:f8:e5:94:59:78:58:c0:da:c3:85:
63:23:65:a1:00:88:c9:c2:4e:57:04:bc:64:61:9a:d9:ef:60:
11:b6:cd:9b:74:8d:3b:8a:d4:6c:70:d5:11:49:1d:cb:40:73:
44:35:ea:f0:b3:6e:0f:9c:39:72:65:46:97:dd:c9:bd:d6:e2:
a6:f0:99:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:19 2026 by rpki-client