Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: c2t6+wlgCUXPRY/Y7C/+4SGd5Z4bx+Sfrx2svowySiw=
Subject key identifier: 59:A6:3B:FD:95:B6:52:18:45:9C:9D:D4:5A:86:0E:F5:8C:BF:9A:CE
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 01A11184D1507929D34CF59BAF2CE8260F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 09CE
Signing time: Tue 06 Oct 2026 14:01:19 +0000
Manifest this update: Tue 06 Oct 2026 14:01:19 +0000
Manifest next update: Wed 07 Oct 2026 14:01:19 +0000
Files and hashes: 1: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: 7OVhwV4FHSJ5rWvinayQrIigh6XmohujZyMja1N3P8M=)
2: Y3xy27kzFffMPewtUpDREyfJrvY.roa (hash: tx10cTi8DLhzNW2hd7QG0hYENx9jGu/u+XgKab2XuPA=)
3: ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa (hash: xFSZDnEjwVDIcL0zURA7Oo3gZI5+yugqjcFTXmh2x0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:d1:50:79:29:d3:4c:f5:9b:af:2c:e8:26:0f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Oct 6 14:01:19 2026 GMT
Not After : Oct 7 14:01:19 2026 GMT
Subject: CN=59a63bfd95b65218459c9dd45a860ef58cbf9ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:bc:06:79:a8:f0:48:bb:2e:5f:b6:02:ec:
8c:10:99:02:a3:e2:31:f7:84:2b:c6:46:3c:ce:be:
b5:14:ed:0b:b4:df:b8:8d:e2:0f:2d:f0:ee:1d:0b:
c7:6f:f4:f0:b4:9c:fb:40:5c:d7:58:a9:24:57:d1:
d5:9f:b4:4d:50:73:59:38:0c:99:c7:c6:c5:24:0f:
30:15:f2:55:31:cb:4e:9e:11:ef:a6:c2:a7:24:30:
31:43:b2:d2:3a:4e:bf:2d:34:c4:18:64:45:3f:48:
78:fa:da:4a:03:e2:b8:b8:86:f5:7d:e3:5b:78:20:
6c:4c:1c:f5:ec:01:9a:15:8d:ff:37:71:1d:32:48:
bb:68:e1:e6:74:3c:02:bc:7e:26:ec:45:eb:1b:93:
e2:46:9d:b5:7e:7d:ff:b1:18:0f:84:90:5b:c5:b3:
3c:5a:97:27:7f:3a:1b:00:74:91:0f:09:36:50:30:
e1:ac:f3:21:0f:ba:8f:68:44:fd:4b:71:10:46:f6:
e2:12:fb:bc:5c:75:0d:ac:1b:aa:5f:05:5d:ed:e0:
48:1f:de:2b:cd:cb:4a:30:06:f4:5d:d6:15:98:36:
21:c4:2a:22:50:43:e2:08:6f:c9:8f:6b:e3:57:1b:
38:5c:d6:f7:64:f7:72:1e:8a:b8:7a:d2:be:49:d5:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:3B:FD:95:B6:52:18:45:9C:9D:D4:5A:86:0E:F5:8C:BF:9A:CE
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:12:d1:57:b5:ca:70:82:7f:b4:aa:9f:20:18:1e:ba:8a:be:
7a:5f:e8:21:f3:ea:b5:5c:3c:f5:49:dc:12:0a:e9:62:93:cf:
02:51:79:58:df:1c:1d:c8:55:61:ed:e0:0c:51:61:c6:8d:8c:
fa:29:6b:ee:dd:90:12:c9:31:7f:b0:cd:5a:e1:17:78:9f:d6:
6f:44:fa:e9:fc:54:e7:20:40:82:cc:bc:02:ad:47:10:fb:07:
f1:9e:c5:2f:0d:9f:56:7f:1d:97:f9:ed:9c:6a:b9:9a:b3:3d:
74:24:5b:5c:76:f9:42:cb:ed:4e:d9:93:56:03:85:ba:2f:12:
83:ef:d0:89:b3:fe:c0:fb:c8:8e:f5:5a:02:5e:84:13:bf:70:
5f:95:e2:58:3d:7f:bd:11:ba:cd:35:14:4f:59:f4:92:53:ad:
2e:82:1c:bb:69:f9:e2:21:af:4e:fd:4f:18:be:32:c8:16:48:
b2:7d:6e:9d:36:5e:6d:2a:8e:65:1f:fe:a5:af:52:95:ef:b7:
9b:bd:13:05:7f:f2:96:36:28:3c:1f:cb:c5:18:c3:09:34:f9:
a4:f6:1e:16:f3:15:db:6a:99:99:d0:a6:9b:f4:08:d2:d8:4b:
0e:75:f6:47:43:13:c7:3e:5d:27:36:21:3e:cb:e7:f8:a3:82:
63:50:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:27:15 2026 by rpki-client