Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: UFcx/4vD2oTJVuYO3tM5Lkaj31t208UjRks3EgIGN30=
Subject key identifier: 2E:38:8B:15:DE:C4:24:16:62:E9:E6:FF:7D:24:E3:72:02:74:B0:A6
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 019E1CEB731DF71651053B4948DE3D28F30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 12CE
Signing time: Tue 12 May 2026 16:00:52 +0000
Manifest this update: Tue 12 May 2026 16:00:52 +0000
Manifest next update: Wed 13 May 2026 16:00:52 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: 2Zw4XehMnbcU+p/kt0eQzczZ9oSFPqByE33cLGOb+iQ=)
2: 8BYDJuaf2CuIte9znhQTMnQNfzY.roa (hash: /nJhQIQ9VVW/Qtz2O6f+WJOXBH0IlvQwIRyYeoC0B4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:73:1d:f7:16:51:05:3b:49:48:de:3d:28:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: May 12 16:00:52 2026 GMT
Not After : May 13 16:00:52 2026 GMT
Subject: CN=2e388b15dec4241662e9e6ff7d24e3720274b0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:42:15:2e:24:4a:5a:0c:18:df:63:6c:e4:
fd:43:ba:14:2d:87:67:5d:0b:f9:a1:14:ad:a8:0d:
f1:cf:bd:99:fd:2f:e2:de:84:58:ec:da:d1:51:45:
0e:0e:7c:5b:70:74:3f:34:f4:aa:92:aa:a7:b4:f3:
ed:00:3b:dd:19:64:5b:a2:68:c4:d9:dc:35:4d:20:
47:ca:74:18:ab:76:e7:4f:37:46:cd:c2:29:2e:4a:
a0:59:1c:c4:d2:29:58:68:67:23:fd:44:1d:90:79:
cc:65:28:de:f1:9b:9e:8d:78:f5:84:32:66:0e:ba:
b2:41:62:78:43:56:72:39:9c:fd:02:48:e9:91:04:
40:74:6b:72:9d:82:fc:c3:bd:4c:f2:a4:e1:6b:b8:
40:95:e2:e4:80:7d:fd:95:77:44:b9:00:d9:03:50:
e0:5e:99:f5:04:81:6e:bb:26:4e:ae:ce:73:fc:6b:
78:ae:af:10:0f:04:b5:e2:5b:d3:1d:dc:ee:f8:09:
f0:1c:a1:d9:2a:c1:ae:06:db:44:90:02:82:d8:50:
e9:df:aa:2d:6d:00:25:3b:22:87:5e:03:48:95:2d:
06:e2:d6:6a:1f:99:19:dc:ff:1a:26:cd:90:04:dc:
e4:db:3a:1f:46:c1:36:07:fa:ca:2d:4e:ef:b6:95:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:38:8B:15:DE:C4:24:16:62:E9:E6:FF:7D:24:E3:72:02:74:B0:A6
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3d:fd:b9:9d:99:61:f8:84:84:79:67:c7:7f:4b:e9:3e:77:
70:05:5c:3b:6c:4a:a2:a4:cf:7a:0c:81:03:7d:fd:a4:55:85:
98:95:e1:50:f3:9b:86:3d:c9:b8:24:58:f2:62:3f:8b:c8:b0:
66:7b:c7:0a:b7:bf:d7:dd:58:a2:89:a8:ab:e2:7d:d9:d8:82:
00:9e:ae:a5:fb:ef:c0:89:66:ee:af:26:42:95:f1:a4:c6:bb:
e4:fb:18:e1:0a:80:11:a2:64:e0:94:e4:90:31:04:4e:ea:56:
89:d1:f7:8b:16:64:7d:a1:ab:b2:d3:36:7b:8c:f3:6c:25:64:
62:74:16:a2:9e:84:42:62:d0:29:72:e3:26:c8:f1:70:a8:3e:
e0:2e:35:a2:7b:39:89:fa:6a:84:34:a3:ad:b5:c4:f3:4d:27:
11:0f:9f:73:62:ba:22:87:3e:89:bd:31:ca:e1:da:bb:50:35:
2b:ad:9b:ee:d1:9b:e1:bc:8c:35:5e:b0:31:df:10:6f:11:b0:
22:06:c5:cc:fd:56:fb:70:e3:17:8c:56:2e:ed:0f:f1:6a:7b:
42:f7:95:ff:78:81:e3:12:45:a2:3d:45:45:1b:80:74:e8:45:
73:07:69:1e:0f:09:00:0c:9a:56:04:a0:89:bc:f5:ce:35:f7:
b6:49:7c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c63Md9xZRBTtJSN49KPMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGNkZTIxMjVmMDQwNThhZDRmNDc4ZTE3ODg4NDE0MmNm
MmRhZDAwHhcNMjYwNTEyMTYwMDUyWhcNMjYwNTEzMTYwMDUyWjAzMTEwLwYDVQQD
EygyZTM4OGIxNWRlYzQyNDE2NjJlOWU2ZmY3ZDI0ZTM3MjAyNzRiMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmixCFS4kSloMGN9jbOT9Q7oULYdn
XQv5oRStqA3xz72Z/S/i3oRY7NrRUUUODnxbcHQ/NPSqkqqntPPtADvdGWRbomjE
2dw1TSBHynQYq3bnTzdGzcIpLkqgWRzE0ilYaGcj/UQdkHnMZSje8ZuejXj1hDJm
DrqyQWJ4Q1ZyOZz9AkjpkQRAdGtynYL8w71M8qTha7hAleLkgH39lXdEuQDZA1Dg
Xpn1BIFuuyZOrs5z/Gt4rq8QDwS14lvTHdzu+AnwHKHZKsGuBttEkAKC2FDp36ot
bQAlOyKHXgNIlS0G4tZqH5kZ3P8aJs2QBNzk2zofRsE2B/rKLU7vtpU2MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC44ixXexCQWYunm/30k43ICdLCmMB8GA1UdIwQY
MBaAFNXc3iEl8EBYrU9HjheIhBQs8trQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMt
Y2ZkYWRiZGM0OGVjLzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMtY2ZkYWRiZGM0OGVj
LzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMz39uZ2Z
YfiEhHlnx39L6T53cAVcO2xKoqTPegyBA339pFWFmJXhUPObhj3JuCRY8mI/i8iw
ZnvHCre/191Yoomoq+J92diCAJ6upfvvwIlm7q8mQpXxpMa75PsY4QqAEaJk4JTk
kDEETupWidH3ixZkfaGrstM2e4zzbCVkYnQWop6EQmLQKXLjJsjxcKg+4C41ons5
ifpqhDSjrbXE800nEQ+fc2K6Ioc+ib0xyuHau1A1K62b7tGb4byMNV6wMd8QbxGw
IgbFzP1W+3DjF4xWLu0P8Wp7QveV/3iB4xJFoj1FRRuAdOhFcwdpHg8JAAyaVgSg
ibz1zjX3tkl8XA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:17:20 2026 by rpki-client