Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File: E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier: m5LnPJbRlrrLKqzfBoCApudZZyzQdGWDvkEJBpp0Vz0=
Subject key identifier: E5:F0:8C:84:BF:9C:A2:1D:F6:DB:75:07:CF:CB:12:49:ED:22:6A:FC
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer: /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial: 01A0D5A6D1D17FAE5C8F873A4DDD2E32AD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number: 1A00
Signing time: Thu 24 Sep 2026 23:01:14 +0000
Manifest this update: Thu 24 Sep 2026 23:01:14 +0000
Manifest next update: Fri 25 Sep 2026 23:01:14 +0000
Files and hashes: 1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: Qe/hUiyOY2EdmiaHtiC//cUce5FYaV3+rMaWC9bqtBI=)
2: lTILXF_5UJEPBougJpxtW4AUOSc.roa (hash: rxyPJTpQ/gl87k+22vSPyFPaWDffDg7c8Gqk+kLh1/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:d1:d1:7f:ae:5c:8f:87:3a:4d:dd:2e:32:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Validity
Not Before: Sep 24 23:01:14 2026 GMT
Not After : Sep 25 23:01:14 2026 GMT
Subject: CN=e5f08c84bf9ca21df6db7507cfcb1249ed226afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:19:a7:b9:6e:2d:a6:8e:f3:e5:84:62:61:
5a:92:52:09:f7:7b:e6:1c:6f:e3:cc:5e:65:29:b1:
19:f7:fe:3d:18:67:ac:3a:c9:4a:20:8a:ff:a0:e9:
35:d8:18:16:f4:36:87:33:52:4f:a8:37:61:2b:bc:
0b:da:70:9e:55:a3:e3:9d:03:3c:9c:ca:af:5d:cd:
85:97:65:00:bf:cf:10:08:ec:83:81:2f:b4:bc:2d:
7f:40:59:7d:42:3a:1a:6f:41:be:7a:5e:16:21:82:
3e:81:18:06:0f:14:5d:af:7f:66:a1:9e:bb:13:3b:
3f:92:13:3d:01:f4:a0:07:ac:d0:11:60:7e:c7:97:
1b:b8:0b:08:52:63:63:f5:bd:cb:97:92:8f:ca:36:
74:aa:3f:d5:e4:27:ba:2f:5e:b2:cf:d3:1d:3c:a4:
2c:69:42:57:eb:ca:d0:64:e0:83:26:45:6c:b7:91:
0b:73:08:ac:d1:b6:a5:ec:5f:a0:8b:3d:32:58:89:
ef:1e:56:90:53:ae:26:37:b0:78:7b:8c:aa:0e:0c:
d2:58:f6:bd:cf:7e:e9:54:e7:6d:dd:fc:76:d7:38:
43:ad:fb:c5:08:2d:72:41:99:62:92:07:f1:1a:a1:
c4:24:dd:51:da:a4:ff:99:40:0e:46:cf:ad:4b:71:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F0:8C:84:BF:9C:A2:1D:F6:DB:75:07:CF:CB:12:49:ED:22:6A:FC
X509v3 Authority Key Identifier:
keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cc:73:6a:44:76:6d:88:d2:fb:f9:7c:02:a4:ee:32:bc:64:
72:f2:b0:a9:57:27:5f:a1:41:d9:07:46:3a:1b:16:7f:46:cd:
94:de:30:53:fc:c1:88:a2:50:9b:a1:79:a5:5c:84:ec:5c:8f:
7b:16:63:2b:20:70:8c:32:6b:31:ca:a6:99:29:31:b9:85:1d:
cb:e2:4a:45:8a:d5:ae:7b:e4:4c:bd:f1:1a:8d:dd:78:3f:0e:
80:7a:4f:96:0f:81:e0:8e:1c:de:22:00:9b:05:de:3a:21:1b:
d6:e1:21:1c:57:62:ad:a2:19:06:b4:ba:f1:cb:75:26:06:77:
59:e7:e5:86:a9:a0:d0:ba:d0:01:e5:a5:14:2e:7d:41:94:fc:
c1:8c:63:88:1b:bb:1a:5e:a8:bc:59:d9:63:15:6e:59:bf:04:
65:2f:b9:6b:ac:c7:a4:82:9f:60:49:d8:55:bb:2d:00:c6:8b:
96:2c:94:e3:2e:ec:ec:43:2d:55:de:88:a7:3e:68:71:e6:c5:
f5:f2:9d:86:0c:f3:3f:f9:2b:73:1c:0d:b6:a8:f7:7f:cd:82:
db:56:05:37:b6:cd:3d:a3:00:b6:d9:08:9f:37:a7:dd:21:cd:
d7:82:e6:ee:5f:4b:72:7d:1f:f7:dd:3e:bf:b2:45:0c:93:bd:
a1:df:6c:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVptHRf65cj4c6Td0uMq1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNTE1NWNlYmY5ZGUwY2I3M2U0MGEwZmEwYTFhYjRkY2Yx
ZDA5Y2EwHhcNMjYwOTI0MjMwMTE0WhcNMjYwOTI1MjMwMTE0WjAzMTEwLwYDVQQD
EyhlNWYwOGM4NGJmOWNhMjFkZjZkYjc1MDdjZmNiMTI0OWVkMjI2YWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApakZp7luLaaO8+WEYmFaklIJ93vm
HG/jzF5lKbEZ9/49GGesOslKIIr/oOk12BgW9DaHM1JPqDdhK7wL2nCeVaPjnQM8
nMqvXc2Fl2UAv88QCOyDgS+0vC1/QFl9Qjoab0G+el4WIYI+gRgGDxRdr39moZ67
Ezs/khM9AfSgB6zQEWB+x5cbuAsIUmNj9b3Ll5KPyjZ0qj/V5Ce6L16yz9MdPKQs
aUJX68rQZOCDJkVst5ELcwis0bal7F+giz0yWInvHlaQU64mN7B4e4yqDgzSWPa9
z37pVOdt3fx21zhDrfvFCC1yQZlikgfxGqHEJN1R2qT/mUAORs+tS3FUqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXwjIS/nKId9tt1B8/LEkntImr8MB8GA1UdIwQY
MBaAFBNRVc6/neDLc+QKD6Chq03PHQnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgt
MzhmNWQ5NjMyMjJjLzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgtMzhmNWQ5NjMyMjJj
LzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8xzakR2
bYjS+/l8AqTuMrxkcvKwqVcnX6FB2QdGOhsWf0bNlN4wU/zBiKJQm6F5pVyE7FyP
exZjKyBwjDJrMcqmmSkxuYUdy+JKRYrVrnvkTL3xGo3deD8OgHpPlg+B4I4c3iIA
mwXeOiEb1uEhHFdiraIZBrS68ct1JgZ3Weflhqmg0LrQAeWlFC59QZT8wYxjiBu7
Gl6ovFnZYxVuWb8EZS+5a6zHpIKfYEnYVbstAMaLliyU4y7s7EMtVd6Ipz5ocebF
9fKdhgzzP/krcxwNtqj3f82C21YFN7bNPaMAttkInzen3SHN14Lm7l9Lcn0f990+
v7JFDJO9od9sOw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:15:17 2026 by rpki-client