
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: Ykzx7E37Z7A3Gb+rn7I2VVnCX4XuV6CPuF+TQQXU8ok=
Subject key identifier: 8A:40:9D:96:A0:0A:43:E3:8D:CC:EB:4B:5F:73:2B:72:44:FB:A1:8F
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 01A0CBFE8231AE15ED6B74B7C6A868A1CA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 18DB
Signing time: Wed 23 Sep 2026 02:00:49 +0000
Manifest this update: Wed 23 Sep 2026 02:00:49 +0000
Manifest next update: Thu 24 Sep 2026 02:00:49 +0000
Files and hashes: 1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: PXd1V/JGZGiV1CrU1qxdlgOJbTrFnHRNPHCZ4isEqRk=)
2: GllxanRi9edQc4SoJ1p-sRQjjuU.roa (hash: Om+DeQOxMRS5RnhUZBxqORnDtsjXB3ZQzZG6mlBEotI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:82:31:ae:15:ed:6b:74:b7:c6:a8:68:a1:ca:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Sep 23 02:00:49 2026 GMT
Not After : Sep 24 02:00:49 2026 GMT
Subject: CN=8a409d96a00a43e38dcceb4b5f732b7244fba18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:15:e0:9b:00:04:a2:43:ff:2c:f8:52:5e:
7f:a7:55:ad:ce:28:2e:d4:93:9a:e3:ae:5e:66:54:
c2:58:4c:03:30:45:97:2f:ea:86:c9:b4:ad:21:f3:
2a:34:d7:35:3a:6c:06:05:93:2e:29:4e:6a:a2:37:
9b:da:f3:e7:51:cd:a0:a4:5e:41:94:37:cc:f6:2f:
89:3a:25:35:4d:39:ce:02:96:7c:92:2d:14:b3:ac:
73:07:9c:58:80:da:b9:91:81:f5:65:cf:d0:cb:09:
d0:43:f3:b5:37:26:e0:24:6d:5d:38:95:c0:f8:6b:
12:6c:c7:c3:e8:a6:fd:1b:d0:0f:e1:50:11:c1:b0:
b0:b0:e4:2c:7d:18:ac:af:d7:c9:8e:35:3f:23:10:
4d:c0:02:72:d5:3a:34:68:8b:72:78:a9:1f:6a:4f:
a7:64:57:a0:72:9a:b0:52:cb:d4:37:2d:90:a7:23:
6a:e8:4d:f9:4a:0a:b2:b0:56:16:ae:a2:87:93:80:
d6:77:ad:3a:b8:ae:8b:f3:fb:15:cc:c7:10:61:0e:
40:fa:e8:8c:60:d1:52:ca:fb:4e:c5:f2:5d:ac:16:
3e:28:a5:e4:f2:f5:01:6f:ac:4b:9a:85:d4:d8:26:
20:74:44:12:2c:e0:c5:7a:72:b9:6b:34:cf:ad:40:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:40:9D:96:A0:0A:43:E3:8D:CC:EB:4B:5F:73:2B:72:44:FB:A1:8F
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d0:2b:ac:9a:ac:12:e7:b6:c2:c1:6e:c2:3a:da:58:6f:4f:
b1:a3:c6:df:b9:21:e7:f0:66:00:24:19:f7:19:87:f8:0e:cb:
ce:7b:ab:db:95:61:f3:85:66:c9:98:9d:d5:be:b1:c8:ad:25:
0e:7f:ad:8f:5e:81:0c:d9:e8:49:28:a5:b8:d7:b9:c2:7c:a2:
f3:58:1d:2d:40:02:9f:1f:d9:d3:d7:72:c3:d9:cd:27:66:70:
94:30:8a:fb:d3:ab:be:f8:d1:22:f9:17:ed:36:41:c4:d7:76:
98:f7:77:43:e9:a1:26:7e:5d:16:74:db:1f:3b:c3:91:76:ee:
54:43:2d:24:a0:d8:e9:35:24:0d:18:e5:25:09:83:d2:ee:87:
ec:25:58:98:20:d4:a2:2b:14:89:20:99:72:a0:c9:d3:8e:bf:
14:db:79:73:26:d7:9d:00:b4:22:e9:44:3a:21:6b:55:d3:f3:
5c:a8:97:65:7f:aa:20:13:5f:98:0c:96:0a:f8:06:3a:6a:94:
16:b8:4b:9e:df:e4:36:d1:0c:17:64:bc:40:6e:c6:e6:58:e9:
b2:3f:12:13:76:95:75:0e:b0:39:54:c9:b8:66:5a:16:86:9f:
14:0b:37:f7:61:20:76:75:a5:e8:5a:0d:c7:2a:b4:b2:7f:46:
85:da:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:15:00 2026 by rpki-client