Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
File: 1s5ZxWscobYwJswpw-etzzQUZjw.mft (raw, json)
Hash identifier: hbMrR1nOH8/a8+78L+uw/XT6pyrtr38aDMSmMH8wZJU=
Subject key identifier: 89:2B:2A:C3:6E:B0:2A:A1:A6:2F:C1:23:DC:61:38:57:FA:8A:6B:E6
Authority key identifier: D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
Certificate issuer: /CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Certificate serial: 019FABD136B8CEE326857AFE40550E1A7A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
Manifest number: FA
Signing time: Wed 29 Jul 2026 03:00:42 +0000
Manifest this update: Wed 29 Jul 2026 03:00:42 +0000
Manifest next update: Thu 30 Jul 2026 03:00:42 +0000
Files and hashes: 1: 1s5ZxWscobYwJswpw-etzzQUZjw.crl (hash: ZWFDDnS3rdraMQNm67ZM/P3+tSNAgKnHrjnU0a/DdjM=)
2: N9FFxQDjdWSsDqKRotEMiDNfWM0.roa (hash: JYJSVQnx65soskv06MhEawaexOLV3MdaQKd5cWOTtiM=)
3: qcXXlS_rHE9ouJsEbCmmlq5R8Ug.roa (hash: 1unAuaM5VTHoo8Otio/wEUldD3aBxQgm3lHyPoQMCYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:36:b8:ce:e3:26:85:7a:fe:40:55:0e:1a:7a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Validity
Not Before: Jul 29 03:00:42 2026 GMT
Not After : Jul 30 03:00:42 2026 GMT
Subject: CN=892b2ac36eb02aa1a62fc123dc613857fa8a6be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:44:bb:02:07:4c:55:70:ef:57:01:6f:1d:
e5:c7:49:07:bd:18:7d:14:08:a2:3e:8a:37:7e:a3:
bc:60:6a:12:be:b1:15:51:68:91:0e:bc:e3:1e:58:
63:e2:c3:a4:ce:63:c8:01:d2:f3:10:30:74:1a:55:
84:1f:8f:9c:8b:ef:59:0d:f1:c7:cf:a2:05:2d:8e:
95:10:ce:fa:ad:89:ab:2c:59:a5:fe:cd:3e:a4:f3:
5a:a4:fa:18:3f:65:e7:a6:0c:27:23:87:48:ad:e2:
07:c0:67:02:36:5f:ee:ce:cc:d3:70:14:4f:60:d7:
15:75:98:7c:d2:32:74:86:7c:15:a2:cd:f8:b0:a9:
f0:4f:fd:ce:0f:9b:9c:c9:1a:98:48:e7:b5:90:b1:
a4:4a:fd:92:b0:2a:2e:af:d7:11:62:4a:5b:d6:57:
8d:14:38:5c:63:53:45:1d:bf:07:76:01:1d:3e:35:
e3:9b:e6:30:bb:c7:11:69:52:14:a4:8c:50:f3:5e:
a5:60:9c:35:74:39:18:96:1b:df:12:f3:9e:d4:bc:
a7:6f:23:dd:46:7a:71:70:1a:25:40:99:be:54:ee:
ec:88:ba:70:e1:e3:79:88:41:0f:b6:8d:fb:68:cc:
b3:b9:8b:1c:46:97:a2:15:a4:49:4c:95:40:e9:bf:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2B:2A:C3:6E:B0:2A:A1:A6:2F:C1:23:DC:61:38:57:FA:8A:6B:E6
X509v3 Authority Key Identifier:
keyid:D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:21:75:2f:34:97:60:65:be:ed:25:02:2a:46:55:86:da:d1:
ac:6f:5c:79:be:ce:0b:e2:29:5e:23:8b:f8:f5:cd:45:d2:81:
63:c2:15:14:4e:55:38:e6:a2:77:b5:64:df:e0:d2:bf:0f:bc:
f9:9d:fc:15:3c:b0:af:8b:4d:40:69:7d:88:6a:ad:46:bd:fc:
8f:6d:15:6c:f0:30:0b:c3:5c:f4:fa:5e:e5:67:2b:11:58:9e:
08:d5:4d:69:0a:f0:90:a0:70:ce:37:bb:24:01:8c:e6:a2:f3:
a9:d0:e8:e8:26:34:db:62:9b:61:36:7b:17:52:1c:f5:32:0e:
30:e5:cf:8b:d9:89:22:c5:8e:9d:91:ca:e3:a4:8c:a2:4a:39:
5b:f0:1a:1d:d0:8e:19:24:e9:13:e2:bc:18:47:ad:16:74:5f:
3d:01:5b:e3:8a:82:e7:a5:a2:f5:5e:e8:ab:cb:38:5b:40:32:
1b:2b:90:cc:62:7e:ad:8f:81:4a:ba:f4:77:eb:4a:a1:b8:93:
f0:d9:6d:9c:f0:a2:44:33:1a:e3:2a:a4:e2:fc:f5:5d:03:5f:
c3:ef:99:b4:54:d4:f1:53:64:d2:f0:44:b5:73:7a:04:23:50:
5a:36:23:73:9f:c7:5e:2c:67:f6:d8:68:78:8d:9d:eb:bd:48:
8c:a4:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:11 2026 by rpki-client