Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: UbKhZ1nfE82aqcTvzS3YK4N1AkSFSXaeykGo4yDR04Q=
Subject key identifier: 8A:EA:FE:C5:10:23:B5:1F:FE:B6:CA:DA:44:47:07:F8:45:29:86:13
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 01A0C6334FFF5CFE1BD35E5FCA8F71CCE0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 18D8
Signing time: Mon 21 Sep 2026 23:00:46 +0000
Manifest this update: Mon 21 Sep 2026 23:00:46 +0000
Manifest next update: Tue 22 Sep 2026 23:00:46 +0000
Files and hashes: 1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: ia8MBrr1jCepelC+JEqTlXAlwqaYfnt0bYm23ot8L2Y=)
2: GllxanRi9edQc4SoJ1p-sRQjjuU.roa (hash: Om+DeQOxMRS5RnhUZBxqORnDtsjXB3ZQzZG6mlBEotI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:4f:ff:5c:fe:1b:d3:5e:5f:ca:8f:71:cc:e0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Sep 21 23:00:46 2026 GMT
Not After : Sep 22 23:00:46 2026 GMT
Subject: CN=8aeafec51023b51ffeb6cada444707f845298613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:67:22:ce:1c:e3:bb:b4:78:db:9d:7f:23:
4a:c8:eb:ee:11:32:c1:9d:47:ad:30:80:47:c8:f8:
4b:fb:48:8a:d1:37:3b:00:4f:c6:91:66:34:29:bd:
bd:3c:d1:dd:47:52:8c:f6:44:78:1a:81:fc:96:ba:
fd:cc:46:8a:e0:48:f6:4e:38:b5:10:2b:34:dd:d2:
32:90:58:8f:8a:e0:7e:05:db:9f:cc:0b:bb:74:37:
74:d8:52:59:3a:b1:d2:bc:a7:2b:29:8a:1e:73:e7:
92:e5:da:96:4b:9d:eb:88:58:1f:d2:ef:b0:e7:d4:
69:30:9e:ea:51:31:b9:e8:d5:45:7d:97:8d:4d:fe:
30:b1:50:98:ac:8f:a0:8b:20:25:9d:37:33:e9:4c:
0c:34:27:7e:9f:8d:e3:e4:12:6f:85:8c:de:ae:1d:
06:83:10:a0:cf:02:27:5b:3b:d7:08:f0:c6:86:2d:
91:ef:08:9e:e6:c4:ed:09:10:6a:ea:78:c5:24:38:
e8:65:03:43:b5:52:8c:1d:06:61:13:c0:c0:79:c3:
57:cb:96:48:ac:c4:ab:6a:dc:49:74:f0:04:47:cf:
8a:48:d3:e0:09:99:0d:d1:5a:5a:aa:4f:da:36:57:
7e:96:97:9b:ec:eb:3b:6d:b6:4b:81:90:f5:1f:76:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:FE:C5:10:23:B5:1F:FE:B6:CA:DA:44:47:07:F8:45:29:86:13
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:34:11:b4:c8:eb:00:f7:89:20:a3:07:8e:61:40:9f:1e:ab:
23:f0:d6:ac:c4:ec:29:d8:13:51:39:d5:3e:49:6f:2c:85:1c:
01:bf:be:05:8b:98:ac:74:2c:7d:3f:5a:b7:04:f2:4a:47:d6:
45:0d:22:ea:f1:9f:e6:1c:a8:dc:33:f0:82:5c:a4:63:5d:b3:
dd:ba:4f:57:df:aa:71:9c:78:04:d9:8e:65:19:43:6a:21:84:
91:2e:3c:2f:57:dd:48:1e:46:07:2a:a0:a9:1d:a1:e7:4a:0b:
62:91:64:88:9a:e6:d1:3c:b5:c9:58:17:3e:83:d2:64:ba:f1:
9a:4e:23:20:15:1a:ca:4d:7d:cf:08:c9:1f:18:b0:fb:84:5e:
52:0c:c6:b2:f9:dc:cb:f9:75:c7:c2:e1:25:8e:73:26:c7:f1:
66:e5:4e:9a:a2:00:aa:43:f2:b1:72:58:1c:fb:5e:86:26:44:
e4:16:45:33:ea:b9:cc:6b:8d:67:ae:a7:48:23:d7:74:29:37:
dc:1b:2e:df:c9:ee:90:e1:cd:3d:69:c8:be:3a:28:5a:16:ff:
46:38:f9:ad:12:01:88:ee:92:68:77:ec:f8:d6:50:d0:d1:c8:
10:be:06:9a:ed:11:26:97:fe:ad:06:bc:d0:22:13:cc:65:e2:
33:d8:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:23:35 2026 by rpki-client