Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
File: 1foTUAdEKPBxdVoZaMpa-ihFUqI.mft (raw, json)
Hash identifier: KxdlozhbClY4gqIHTkczKEx3j8kvPUXLl3C2jX9jyYE=
Subject key identifier: 11:66:75:53:AF:71:C9:B6:EC:A6:E3:08:E8:ED:04:E0:34:1A:0E:A8
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 01A0D011F629311CC9BBDFBA13A7768ACC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:32 +0000
Manifest this update: Wed 23 Sep 2026 21:00:32 +0000
Manifest next update: Thu 24 Sep 2026 21:00:32 +0000
Files and hashes: 1: 1foTUAdEKPBxdVoZaMpa-ihFUqI.crl (hash: iMk6hkZvIzzCGmAb2e+x+itjw0EG/F0UXrcgyYo6M58=)
2: 1xg7adVXPiGdkBhp_sNzxuzreFg.roa (hash: 2uXt3/w741xTFDmIndVVSu8CCPreiOPbFW1zo41VUgk=)
3: XpVd8TEHFdbwUBtoAGpaT1un8nw.roa (hash: ePXp/0+VEKMUCzKgS41AYjixo9sL8aeMR15qF8zIMW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:f6:29:31:1c:c9:bb:df:ba:13:a7:76:8a:cc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Sep 23 21:00:32 2026 GMT
Not After : Sep 24 21:00:32 2026 GMT
Subject: CN=11667553af71c9b6eca6e308e8ed04e0341a0ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:34:7c:d8:e4:43:dd:16:3c:c0:47:51:f0:
52:2d:3f:28:ea:fc:8b:16:d9:95:ed:3b:59:27:8d:
2b:93:5c:50:44:36:2f:3e:51:19:59:9e:01:b5:39:
7f:81:2b:45:cd:3a:d9:b4:a6:8b:12:3a:de:b8:b3:
c1:86:9d:09:ea:24:25:32:08:6c:83:6e:a9:48:e0:
f1:60:f5:64:37:0e:5e:7c:88:f4:02:7f:57:14:5d:
70:75:8b:4e:e7:04:65:ca:56:91:0e:ae:d1:73:e9:
01:ff:6c:9d:9f:34:14:86:e6:ed:92:70:89:9a:35:
d3:29:90:72:b6:e5:77:81:92:99:f8:81:97:86:51:
b7:86:d5:bb:e9:4d:79:70:38:71:47:da:66:94:d0:
1f:c9:eb:17:1c:23:1a:41:96:eb:01:cf:a6:b3:d8:
57:90:ac:ef:41:0e:73:39:41:23:4f:4e:58:a8:79:
6d:e8:a3:34:aa:3c:3c:63:b3:5c:13:69:d6:02:94:
6c:46:bd:ce:b0:7a:f1:85:aa:98:09:49:67:91:39:
90:7f:22:94:8a:de:9b:63:e1:f5:9f:ef:40:c4:38:
0c:f0:1f:50:8a:49:7c:a8:52:08:60:ab:82:bf:cc:
31:7d:b7:91:28:5d:9d:dd:66:49:18:c9:22:4d:5c:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:66:75:53:AF:71:C9:B6:EC:A6:E3:08:E8:ED:04:E0:34:1A:0E:A8
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:94:31:c5:52:c6:1f:2d:77:f0:81:c6:2b:46:fa:cd:08:d9:
24:df:f8:0b:24:7b:6c:0b:e7:27:52:ff:53:9f:99:fb:ab:74:
3a:04:d4:56:b8:70:9d:5b:98:d3:2d:aa:6a:8f:00:f1:5b:59:
7a:87:98:a2:2e:f6:63:53:e4:97:20:a8:f7:f1:82:c9:3b:24:
93:eb:f4:1a:0e:c6:ba:17:8a:14:8c:d4:e1:48:2e:11:58:f4:
d5:a8:82:75:bd:d8:b1:11:18:81:b3:17:a5:05:e4:84:6e:4a:
1d:62:1e:75:79:4d:f2:b5:85:e5:b6:d1:ba:6a:ce:ee:14:34:
f7:24:f3:15:d7:94:23:95:83:15:60:3b:ae:86:58:35:fe:11:
13:68:73:43:70:bc:1c:2a:ce:49:e6:8e:68:6f:d8:44:3d:dd:
40:b8:5d:38:50:40:8f:e7:cd:81:82:8f:e6:11:2e:a3:a8:5a:
ee:8e:5f:46:27:05:d5:72:5a:d6:0e:49:34:59:80:ef:83:15:
56:8a:8a:cf:c9:8a:3d:ce:cc:b1:07:43:0f:51:16:d7:33:1d:
ca:91:3f:40:5e:d1:c7:7f:e6:0c:cd:8f:00:f6:62:1f:c5:d8:
50:8f:88:b2:8e:4c:b9:03:4f:7b:9d:3f:6b:07:43:3c:25:75:
3f:ea:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:38:48 2026 by rpki-client