Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: WxuDDCzTt3TlmYRuKWoL4/drjX1E+Wfi2MPgxF/rf2Q=
Subject key identifier: 7F:40:5F:51:AD:46:40:1C:C3:10:6B:3B:3D:BE:F6:11:03:5C:5C:20
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 01A0D8042C7E5607C591EFF60F23702F97C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 0FD2
Signing time: Fri 25 Sep 2026 10:02:27 +0000
Manifest this update: Fri 25 Sep 2026 10:02:27 +0000
Manifest next update: Sat 26 Sep 2026 10:02:27 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: PNQrdqFOw80P2KitIwjvWkU7Bk442+iL3KAXzK6wEq4=)
2: i5wzAWhzD6thOzcjAU711zxCavE.roa (hash: P2AdWkb+9Icdy+0Iaf1HCIO0qMt8S3L75/lIYdAPN0w=)
3: p-kTlbQouPjMNiRixH1O0X2WaO4.roa (hash: HbkgtFGk5iSU61DgeSp5FYFokJuHWEnOUImsHeOoZNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 10:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:2c:7e:56:07:c5:91:ef:f6:0f:23:70:2f:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Sep 25 10:02:27 2026 GMT
Not After : Sep 26 10:02:27 2026 GMT
Subject: CN=7f405f51ad46401cc3106b3b3dbef611035c5c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:c9:68:9d:86:01:76:06:96:08:e5:83:fd:
49:cf:8f:20:72:38:91:58:20:33:66:41:62:24:9b:
6c:35:00:8b:52:b4:31:86:f0:25:63:c1:c1:69:65:
4a:77:2f:5e:57:19:45:1c:7d:98:eb:23:f9:c3:40:
ac:52:b4:0d:2e:0b:f8:bb:5a:48:e2:9a:a8:09:06:
98:a1:72:5e:df:58:af:e5:9f:fe:d0:46:e7:f0:93:
15:3d:eb:19:0a:a6:1a:14:13:54:cc:cf:58:31:0c:
71:12:b9:8d:f4:b2:b8:11:d2:2d:73:55:1d:d5:0c:
15:52:95:56:1d:3d:8d:7f:b7:3f:86:27:21:89:97:
10:c1:a3:47:78:9d:4a:2e:e9:fc:8f:cf:bd:d5:03:
c9:4e:33:f6:1a:33:64:04:41:93:92:d6:30:f6:df:
db:f4:3a:25:2a:9c:e8:9f:5b:41:20:ea:95:ce:1e:
89:65:b0:40:36:2a:83:6c:27:dc:c6:3e:9b:8f:03:
f3:50:ed:eb:92:be:bf:0f:8a:7a:f0:cb:7d:7b:c2:
45:86:98:86:26:7f:ce:4d:48:d1:4c:41:b8:11:95:
31:85:bc:c6:af:28:27:05:0e:7b:60:00:2e:5b:85:
7f:c4:c5:55:43:17:ac:5f:9d:62:4c:03:f1:02:c4:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:40:5F:51:AD:46:40:1C:C3:10:6B:3B:3D:BE:F6:11:03:5C:5C:20
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:76:cc:cf:a7:81:68:6c:fc:e0:5b:a7:dd:4b:27:a1:11:c6:
95:c4:9d:f9:07:5e:94:77:b1:c1:f3:95:4f:b5:c9:c4:0e:9c:
ce:17:30:14:b8:6f:1c:ff:ba:9d:ad:9e:d4:5e:77:38:31:fc:
74:f5:0c:6a:5e:b0:4b:a9:a4:a5:0e:9e:2e:1a:6d:db:44:ce:
a2:a2:52:dc:a9:48:57:82:45:7e:39:13:a3:9a:d2:57:0c:b4:
6c:c4:19:2b:7d:58:2b:7c:4d:e6:69:da:c2:b9:5f:32:bc:8c:
3c:d7:e2:98:ae:ea:fb:07:a6:9d:73:e9:ad:c6:cb:ac:04:a9:
56:e8:98:2b:c5:60:34:e0:43:19:5f:87:f0:94:dd:97:30:3b:
64:ec:a6:3a:2c:c9:8b:5e:d9:85:11:c5:1c:5c:32:d1:01:d7:
2d:33:70:8e:16:71:ac:6d:95:a6:98:dd:b7:44:03:46:11:cc:
0f:04:ba:5a:6e:b1:28:d8:06:d6:39:ec:07:eb:15:74:bc:85:
86:5f:0c:30:31:3a:45:f0:32:7c:11:69:3e:94:22:83:3f:95:
ed:47:ea:16:7a:6f:9f:85:e7:53:f3:dd:06:34:24:66:92:f0:
ee:d9:f6:62:56:6b:cf:95:87:87:7f:51:8d:ec:47:8c:38:ad:
e9:3d:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:06:24 2026 by rpki-client