Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier: 7D/B1EKRaQbbtE11I3oS9mXTqXZ8fLdmQEE9Gm3WXc4=
Subject key identifier: 99:89:1F:80:55:30:6F:1F:CD:C6:6D:D3:6C:A4:CC:1C:55:D7:55:BA
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 01A1E05F67D02E1946B539C199767F2C34F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number: 1722
Signing time: Sun 15 Nov 2026 18:01:51 +0000
Manifest this update: Sun 15 Nov 2026 18:01:51 +0000
Manifest next update: Mon 16 Nov 2026 18:01:51 +0000
Files and hashes: 1: 0uyZF4hqCFblriuhdFvB97CSvjE.roa (hash: F5N4p/+NGVHw75uzEq/ujSUpO10EhoH/RBzsn4VqeFg=)
2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: 8tvR/Jc4GtSgFXk+tc0QDl7CNRcK13kk6ipp+qGGOuY=)
3: HEYOxnvlLCOWsnSS_6it9qLhNIs.roa (hash: 6D1EaOUZTiXuJWqZZr2E8iZjtev1Lso+FFHwbrAgIes=)
4: OUe9Gs1ZfjOio8GPiClkO1rK7Co.roa (hash: 9zzu21yZwWAMdvzRS8JS72fLpBxbfgfEMRdYkP6CTaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:67:d0:2e:19:46:b5:39:c1:99:76:7f:2c:34:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Nov 15 18:01:51 2026 GMT
Not After : Nov 16 18:01:51 2026 GMT
Subject: CN=99891f8055306f1fcdc66dd36ca4cc1c55d755ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:9a:95:05:c2:13:90:7d:fe:e8:e7:73:e3:
ae:2d:d4:76:27:2a:21:55:ad:c0:34:40:6f:ef:93:
a7:b5:68:f4:54:f4:83:04:cd:9d:6e:46:27:4f:5b:
e2:4f:c8:f6:44:bc:f8:b2:38:4a:de:59:4b:ec:15:
0c:2f:6f:55:13:ed:c9:5a:73:f9:ae:fc:76:84:59:
e5:2a:ac:c0:0c:09:aa:e5:ab:87:dc:db:6d:79:17:
8c:f3:ee:f1:34:67:22:e8:2d:1e:b3:ec:b7:7e:67:
51:b4:4d:fc:89:2b:8b:69:6d:bc:9d:4c:13:35:58:
1f:cd:45:29:08:bd:d9:a1:bb:c3:8b:04:62:39:89:
6a:a4:12:9c:85:d5:81:0b:bc:4a:68:63:9b:3e:b0:
43:ae:87:9f:65:34:73:19:36:10:7e:3d:61:f0:9a:
53:aa:55:e3:75:1e:42:5b:2f:bd:3b:35:ad:80:64:
e2:97:97:f0:55:36:aa:17:38:a5:be:68:05:af:c5:
f7:2c:56:8a:91:0f:89:b6:3a:a7:fc:ff:82:0f:f0:
8e:1b:ba:fb:98:82:d5:2b:5a:30:c6:cd:f5:ca:93:
01:b7:c1:cf:d3:cc:98:1e:7c:a5:d1:63:fc:a5:48:
0d:b7:11:23:c7:4c:be:48:a3:fa:a0:eb:32:8c:5e:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:1F:80:55:30:6F:1F:CD:C6:6D:D3:6C:A4:CC:1C:55:D7:55:BA
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3e:8b:82:02:0a:f0:78:03:e4:11:a3:b2:c1:82:18:dc:cd:
36:6e:38:1e:88:a1:4a:1b:c3:18:1b:85:f4:58:33:dc:1d:d5:
f0:4b:1e:bf:78:55:7b:c1:6a:91:73:60:c9:85:a6:02:1f:71:
6d:a5:78:3c:11:91:4a:6e:b8:71:c8:95:16:e9:5a:d9:69:4c:
9f:53:25:13:52:b4:38:9f:a8:30:7a:d5:58:bf:0f:53:ca:b7:
07:3e:4e:60:2b:6b:1a:bd:30:b9:d6:ee:0c:37:a8:fe:08:ae:
1a:77:d9:fc:88:ae:8a:da:d5:8c:31:ec:40:4d:83:29:21:bc:
9a:0e:8f:03:d4:ec:4d:be:c1:ce:c1:9d:20:69:5e:42:db:be:
a4:71:e0:8e:b7:73:14:a5:2c:6c:62:3b:4a:9e:50:13:25:43:
52:53:15:ca:00:62:09:e6:f4:c4:68:d8:67:7e:ce:89:86:7d:
9a:ed:33:7a:f3:09:60:fc:00:40:73:44:44:60:ac:c6:31:93:
92:02:a0:a0:b2:f1:a4:f5:9b:b8:0a:e0:49:fc:93:88:3b:ee:
9b:00:c3:8a:55:b7:ab:01:ce:58:89:a5:87:6a:df:98:ca:b2:
56:3f:db:3b:c6:d2:ea:4e:aa:ea:e1:6e:d3:ed:0f:e5:22:36:
1b:1e:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:54:29 2026 by rpki-client