Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: c2TBNIqQfw724JcmPNassp4BoJIcqPi7RUcQYxLzrVE=
Subject key identifier: 51:6C:00:DF:C4:0A:AA:D9:EF:5E:90:68:3A:0B:2A:D4:18:9A:43:BB
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 01A0C70E8E50AD822BACE4B23B18598B5CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 1589
Signing time: Tue 22 Sep 2026 03:00:14 +0000
Manifest this update: Tue 22 Sep 2026 03:00:14 +0000
Manifest next update: Wed 23 Sep 2026 03:00:14 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: xGvChoZhu8B8reNsoPud/qXj3t1sUpYB1jKmT2Z9lWI=)
2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:8e:50:ad:82:2b:ac:e4:b2:3b:18:59:8b:5c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Sep 22 03:00:14 2026 GMT
Not After : Sep 23 03:00:14 2026 GMT
Subject: CN=516c00dfc40aaad9ef5e90683a0b2ad4189a43bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:aa:02:76:56:ba:0e:91:ea:f3:d5:7c:96:
4b:9d:f8:c5:57:5e:15:27:b9:68:82:77:ee:49:c5:
9c:bc:1a:52:2b:d6:16:9a:a4:73:1d:eb:e2:e3:c5:
9a:81:82:21:b4:df:a2:c6:66:37:0a:4b:ff:c1:e1:
fd:2f:fc:bf:ce:ac:0f:8b:4f:c8:29:7f:e3:18:db:
99:80:45:51:5d:da:c3:53:6d:dd:ee:3b:35:ac:ce:
23:91:49:c7:7d:38:47:c6:9c:10:85:25:a0:f2:9b:
9c:e7:cd:54:42:7e:75:e5:09:4a:8b:ab:01:dd:e4:
fe:7b:fd:ae:43:42:79:ab:13:b8:56:9e:4e:30:6a:
30:79:c5:86:f6:64:cf:1c:46:99:54:2d:ae:a9:40:
09:95:57:b6:e2:e9:82:da:e3:22:e8:64:b3:a2:49:
1c:97:1f:f4:dc:2d:70:cd:3e:dd:e8:4e:25:3e:67:
c0:56:f3:4c:79:e5:ae:b5:a6:87:50:0d:01:d6:8c:
73:58:64:4d:49:7b:5a:f3:dd:b8:7c:fc:c0:09:cb:
56:46:a2:77:83:f1:9b:fe:92:34:e3:0d:20:f5:ab:
2c:a2:8b:85:a7:45:0d:de:f3:37:1e:13:e2:6d:3a:
02:64:6f:58:88:a2:bb:22:d1:53:54:18:9d:e4:47:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:00:DF:C4:0A:AA:D9:EF:5E:90:68:3A:0B:2A:D4:18:9A:43:BB
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ef:0d:c0:d7:7c:a6:1e:c9:be:c4:49:32:af:f1:7f:7c:5d:
d8:81:8d:b2:74:c6:fd:18:e5:6d:4f:69:b9:22:9c:08:4b:26:
dd:7c:d4:43:e1:d0:b8:15:33:f7:e4:14:dc:ec:09:f6:bb:9c:
4c:a5:7b:d2:28:49:cb:0c:24:4d:cc:a0:45:97:c0:f7:67:d9:
57:88:ad:98:c7:56:d2:a6:12:e7:99:cd:b7:18:40:d7:ba:60:
96:80:f6:e8:24:ff:56:94:bd:a2:b6:30:df:5e:dd:b9:d6:1e:
3c:1a:12:79:e7:bd:b8:ff:7d:7b:37:93:8e:1b:ea:fb:a5:11:
17:bd:1d:02:f7:ad:84:53:2e:af:37:3b:20:3f:68:6c:ba:6d:
53:f1:70:6a:d9:c7:c8:05:8a:d6:20:c9:76:4b:cc:f3:19:5b:
dc:20:d5:d9:af:d2:ec:62:d4:12:ad:31:90:5e:95:5b:af:11:
59:1c:3d:20:d9:56:b4:30:c1:25:d5:48:6d:99:d6:0a:8c:7d:
a3:94:78:8e:9a:76:3b:bc:21:d7:0f:1d:36:40:a5:1a:5c:96:
ed:6b:95:1e:12:ab:b8:3c:f7:5d:2c:ca:03:f3:18:14:7a:ae:
ab:5f:d5:3c:ef:af:fa:a8:48:a8:74:23:9f:a1:00:32:5b:d9:
4d:6d:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:33:03 2026 by rpki-client