Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
File: k1uI_ryNEnURqcvxW4BJmLHNZoY.mft (raw, json)
Hash identifier: keE15pPBFrPyfjW5+rvj8rSaA4+z9iNnRwBnBqzpj2I=
Subject key identifier: C5:E1:44:D7:E0:87:B3:0E:19:62:E8:D5:08:34:E3:9C:7C:4B:77:7A
Authority key identifier: 93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
Certificate issuer: /CN=935b88febc8d127511a9cbf15b804998b1cd6686
Certificate serial: 01A13B5C05CF660A64E978F8EE5352F30A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
Manifest number: 019F
Signing time: Wed 14 Oct 2026 17:00:48 +0000
Manifest this update: Wed 14 Oct 2026 17:00:48 +0000
Manifest next update: Thu 15 Oct 2026 17:00:48 +0000
Files and hashes: 1: Jle1Wqwc9duNEaBgl4I6cNxXpdM.roa (hash: OBFM1Q4yqKAy/JhwM152fWLO9wCkZnqGzYRwcyY0AlU=)
2: k1uI_ryNEnURqcvxW4BJmLHNZoY.crl (hash: Xrn6ILx1zN11wwmgIvlJUdXMvlcQu4eLwAqiBMjV89c=)
3: tWhPmRdm-lCBfCBjSnpAIpwkHdA.asa (hash: CmYFI/mkQzMGe1+SvLrHk5OSNg13/iiannrbVF+QaMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5c:05:cf:66:0a:64:e9:78:f8:ee:53:52:f3:0a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935b88febc8d127511a9cbf15b804998b1cd6686
Validity
Not Before: Oct 14 17:00:48 2026 GMT
Not After : Oct 15 17:00:48 2026 GMT
Subject: CN=c5e144d7e087b30e1962e8d50834e39c7c4b777a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:3e:5d:aa:de:c7:ce:9a:f4:9d:19:ee:9e:
49:6e:ee:63:ba:b4:11:cb:d5:55:1a:e0:ec:5a:1a:
69:04:e6:8c:0f:a0:1d:8f:19:fd:3a:31:52:5b:07:
23:be:f8:5c:1b:ce:d2:06:55:62:a7:b6:50:6b:13:
7a:9b:8b:a4:01:fd:d5:a1:da:6f:bc:12:b4:a0:d1:
11:50:da:5c:a5:28:e1:f1:38:bc:a0:7e:19:da:98:
7e:76:2e:c4:ad:d5:bd:19:12:34:8b:7f:77:03:df:
4c:75:41:41:c5:5a:b8:17:1c:2b:50:bc:84:b3:00:
1b:e4:dd:ae:25:a0:bd:fe:8b:70:48:c7:f7:73:35:
74:17:0b:bb:20:e8:c4:ba:6a:71:a8:a8:a2:e4:e1:
2d:95:0d:b5:1a:36:ef:b2:4e:65:ed:1a:50:27:ee:
da:5b:5e:34:63:b2:13:fd:69:8c:7a:3e:55:f5:6e:
04:56:6c:1b:ef:23:d5:b5:5f:4e:da:d9:ae:f5:85:
5a:69:1d:af:8b:9d:6f:5e:d7:86:92:90:1f:ca:b4:
88:cb:f4:ce:96:d4:a3:4a:87:89:af:db:20:75:31:
d0:01:4a:20:29:0c:98:66:b8:d3:f9:30:05:15:f9:
74:80:ba:ee:89:b8:9d:0c:9b:d0:32:95:27:67:4d:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E1:44:D7:E0:87:B3:0E:19:62:E8:D5:08:34:E3:9C:7C:4B:77:7A
X509v3 Authority Key Identifier:
keyid:93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:17:6e:46:e4:11:d6:fd:58:16:55:f7:4f:31:08:b8:91:82:
87:0f:a1:0e:31:6d:9e:67:52:4c:dc:d0:88:80:18:9e:3f:c8:
f6:a4:03:58:9b:56:7f:b4:47:4d:89:20:b5:26:63:ba:c6:06:
ca:07:b0:f4:03:d4:4d:e3:17:8d:fd:6d:31:af:e2:eb:55:27:
cd:8c:fe:d6:49:f2:3f:01:c8:03:d1:57:81:07:32:ac:87:3a:
ca:fc:51:67:9c:f1:54:b6:a8:81:7c:f4:c9:87:4d:2a:22:cb:
be:46:0f:84:77:51:be:95:a4:f4:9f:62:d5:73:41:3e:28:ef:
3f:3b:af:49:bd:e7:99:70:49:66:b5:ad:58:a0:f6:1a:88:c4:
23:90:24:07:ef:6a:f4:e7:0b:c2:ea:34:84:da:17:c7:5a:9d:
f7:84:08:c1:11:04:0c:37:31:34:f5:8a:ef:07:bc:31:70:ca:
b3:a4:96:03:38:d5:0c:ea:7a:a4:63:88:dc:fb:6c:0d:cf:b1:
01:ca:51:4c:b4:5f:cc:48:34:2e:cf:89:33:d1:d6:c7:bd:cf:
85:e4:43:6c:1f:d0:ab:66:9a:d5:17:21:11:57:b4:3d:25:ba:
ec:97:5c:af:95:4e:e3:86:41:aa:ed:b5:36:50:62:d2:20:4e:
40:7d:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:58:38 2026 by rpki-client