Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
File: 1JoJgE9Klx2oYCD-wxt3ts54WlA.mft (raw, json)
Hash identifier: IjzH+iwwAbwt9ZrDbKEKZC9GA0WdXBTnNsZKXF8Cvnk=
Subject key identifier: 1A:B2:51:A8:F3:14:50:13:A8:7C:15:58:F8:5D:53:1F:79:28:6B:C7
Authority key identifier: D4:9A:09:80:4F:4A:97:1D:A8:60:20:FE:C3:1B:77:B6:CE:78:5A:50
Certificate issuer: /CN=d49a09804f4a971da86020fec31b77b6ce785a50
Certificate serial: 01A0D012A279B5249CDEE34C7D5B9C74C8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:17 +0000
Manifest this update: Wed 23 Sep 2026 21:01:17 +0000
Manifest next update: Thu 24 Sep 2026 21:01:17 +0000
Files and hashes: 1: 1JoJgE9Klx2oYCD-wxt3ts54WlA.crl (hash: KpmeHg7fi+FmQKeKOK3X5kRmIjsRLBhVMIYldW0jQwo=)
2: NwwaWXozHy71mbpAU3P6llyB78Q.roa (hash: NiQ4zMwsxxv5Pd5CC5l/iVQxZM/r14qUwT9CwKCLn7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:a2:79:b5:24:9c:de:e3:4c:7d:5b:9c:74:c8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49a09804f4a971da86020fec31b77b6ce785a50
Validity
Not Before: Sep 23 21:01:17 2026 GMT
Not After : Sep 24 21:01:17 2026 GMT
Subject: CN=1ab251a8f3145013a87c1558f85d531f79286bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:87:13:e3:41:b4:35:82:b9:f8:8a:11:8a:
e1:a8:7b:5c:fb:4c:b8:6a:b1:ca:9a:ac:d3:70:8d:
75:c7:11:83:cb:c1:25:06:ff:6e:6c:03:1a:65:17:
50:30:c0:73:0e:60:78:89:2d:8b:fe:62:f3:3d:bc:
c3:e0:29:47:dc:e8:5f:7e:b7:b1:6a:8b:7f:e5:c0:
fa:69:32:b6:82:37:9a:95:32:2c:5e:88:d4:94:1d:
64:13:9a:a7:28:f7:0d:3f:59:17:95:5d:ad:f6:fb:
51:79:6b:07:6e:01:e2:85:f4:c4:f4:73:9c:c6:ff:
fe:4b:a3:8d:8f:dc:74:9a:c5:19:1b:6a:e5:21:02:
f6:07:23:39:66:e4:51:ca:ba:5a:6b:d5:80:f7:cd:
c0:b2:54:13:a1:91:56:b3:7f:dd:98:e9:64:bd:d8:
4c:f6:72:f0:e2:69:38:e8:0e:3b:e3:8a:e9:14:89:
bf:1a:1f:87:7b:da:9b:af:ac:35:82:ac:4a:38:de:
42:83:bf:46:2e:57:29:03:08:16:91:06:25:c3:ea:
88:a8:e6:aa:17:b2:90:1d:3a:91:50:64:c0:ad:f9:
f6:f5:28:84:45:2c:3e:58:92:5d:16:50:2e:60:41:
41:ae:98:b3:ac:8c:38:93:e2:51:bb:2d:01:c3:8d:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:51:A8:F3:14:50:13:A8:7C:15:58:F8:5D:53:1F:79:28:6B:C7
X509v3 Authority Key Identifier:
keyid:D4:9A:09:80:4F:4A:97:1D:A8:60:20:FE:C3:1B:77:B6:CE:78:5A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1JoJgE9Klx2oYCD-wxt3ts54WlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/1JoJgE9Klx2oYCD-wxt3ts54WlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cc:20:79:b7:0b:0e:b6:78:f4:aa:ae:c2:1a:50:d1:cc:8e:
45:5c:76:94:38:7f:e7:c0:65:9a:d4:43:63:4a:a2:c7:6e:9f:
9b:1d:66:b4:3c:6d:c6:39:9c:fb:60:b6:c0:dc:b6:7c:89:10:
84:09:ab:21:bd:b1:38:97:8a:18:37:9c:09:14:e3:80:43:63:
27:dd:2b:95:c1:bc:49:33:45:db:5f:82:f0:70:10:27:29:8a:
d1:21:63:da:56:2a:f3:ee:2c:d6:50:6c:d5:ef:9b:28:8f:2e:
22:9f:02:b9:a3:64:d7:fb:02:bd:96:2f:0f:fb:39:11:27:0e:
8f:ae:7b:62:be:e0:3b:0e:89:b5:cf:7d:73:df:2c:d8:d7:fb:
da:a5:de:93:a7:b0:2b:26:cf:88:da:8b:76:c0:b3:8b:0f:e1:
33:39:9d:97:b6:b5:ff:da:b0:05:56:2a:f2:22:bc:69:c5:e6:
d6:00:5d:fa:67:67:8d:de:2c:87:2b:15:73:72:00:9b:32:0d:
9f:3d:23:14:d2:47:3b:44:d4:7d:6a:eb:de:cb:71:70:6c:d6:
da:88:21:85:63:02:f1:f9:42:23:cc:f0:1e:a7:0a:61:f0:0a:
c3:d5:1a:a5:db:6b:4f:60:28:cf:f6:bd:9d:16:95:31:71:56:
1d:4a:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:31:19 2026 by rpki-client