Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: e/glPt9jGYO8lG46viwQWVj1HQxZxN2zpnFG+DImgsg=
Subject key identifier: 25:4E:DE:C3:70:75:7F:0B:11:98:18:F6:46:FA:AA:95:28:85:65:CC
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 019FAA50A1F010A78D3311110193219F3C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 1845
Signing time: Tue 28 Jul 2026 20:00:38 +0000
Manifest this update: Tue 28 Jul 2026 20:00:38 +0000
Manifest next update: Wed 29 Jul 2026 20:00:38 +0000
Files and hashes: 1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: g2I434pCKsec54iSzxYdMSbfjYB5icyX52od859bQws=)
2: GllxanRi9edQc4SoJ1p-sRQjjuU.roa (hash: Om+DeQOxMRS5RnhUZBxqORnDtsjXB3ZQzZG6mlBEotI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a1:f0:10:a7:8d:33:11:11:01:93:21:9f:3c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Jul 28 20:00:38 2026 GMT
Not After : Jul 29 20:00:38 2026 GMT
Subject: CN=254edec370757f0b119818f646faaa95288565cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:a6:46:81:18:d0:bd:86:6f:cd:17:ba:11:
b8:69:a6:d7:4e:84:aa:c4:c9:ad:73:2a:41:24:f4:
ab:f3:31:19:b4:65:b9:08:b6:59:7b:66:65:1a:68:
fa:2a:fc:45:f0:32:d0:34:70:36:11:91:ec:01:b7:
00:92:34:19:1a:54:9d:46:a6:ef:74:3f:ac:d7:5e:
60:75:05:63:2c:25:59:9c:3a:86:e5:06:33:1f:41:
69:0e:97:67:66:e2:f3:05:13:b7:85:a4:39:7e:7d:
90:42:55:91:75:af:c9:44:e9:6a:e8:a9:1b:68:ed:
37:78:92:25:ab:2b:10:88:b3:1c:4a:f2:e8:4e:d6:
fa:51:85:47:d9:5c:26:55:2a:db:45:7b:d6:02:ef:
8e:01:67:8e:14:90:b2:c4:ec:f4:40:4b:ce:ba:23:
f6:2f:09:f2:d4:fd:69:42:1a:b0:2f:94:4c:5e:7e:
f3:fd:a0:a8:42:eb:63:b2:28:8b:3d:00:ca:d9:1a:
e8:8e:fa:43:17:76:1b:97:ea:e8:58:fc:11:ae:ef:
d9:43:43:9d:12:7b:92:e8:a1:c2:d2:53:3a:a0:b6:
21:9b:f7:d7:02:1f:25:e4:e1:0f:17:54:98:dd:5c:
5e:b1:08:cd:a4:a5:dd:a8:83:8d:2a:a9:b5:5d:32:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4E:DE:C3:70:75:7F:0B:11:98:18:F6:46:FA:AA:95:28:85:65:CC
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5e:10:a8:54:69:6e:e5:f4:8d:49:9e:31:42:db:16:a7:76:
93:85:83:69:48:46:a5:4f:f1:2f:9e:e3:1b:58:7f:46:28:0d:
25:1f:a4:ca:5d:c3:54:16:2f:2e:21:5e:00:1b:40:7c:5a:85:
70:b6:cb:d9:9f:f4:27:86:b2:18:5a:ae:17:3f:58:82:b4:aa:
42:9c:fa:16:bd:91:9a:46:1d:37:9b:52:fb:da:25:db:c1:9e:
05:b3:d8:0f:5b:7c:18:96:73:b4:19:75:a3:5f:b7:e6:6e:8c:
72:f0:02:bf:d5:3f:c0:d8:41:22:6e:92:08:45:03:11:0b:3c:
c7:6b:27:80:b6:06:08:79:19:ea:1c:45:d3:4c:57:08:79:f8:
d6:f6:65:3f:98:b5:10:30:d0:c9:1b:66:6a:34:7e:be:2e:a1:
33:ef:13:87:fa:0d:c9:5e:58:d1:b9:94:20:e8:2b:b5:fc:0a:
1a:39:0f:0f:7d:e2:07:59:18:34:be:5a:9f:61:21:c0:a3:c8:
db:79:46:cd:8d:01:e7:d6:89:73:65:4b:ba:80:ac:11:5f:2d:
71:f9:f3:16:c0:2f:7a:0d:4c:6e:39:0e:57:c4:ad:fa:b4:6d:
93:98:46:75:de:46:58:5c:c4:9e:00:d1:1b:2d:b1:f6:7e:a5:
84:51:03:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUKHwEKeNMxERAZMhnzwbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MWU2Nzk5YmM1Y2EyODVhMzc2MzcyZjBiNjM0NWRmZmM4
N2I4YzAwHhcNMjYwNzI4MjAwMDM4WhcNMjYwNzI5MjAwMDM4WjAzMTEwLwYDVQQD
EygyNTRlZGVjMzcwNzU3ZjBiMTE5ODE4ZjY0NmZhYWE5NTI4ODU2NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCKmRoEY0L2Gb80XuhG4aabXToSq
xMmtcypBJPSr8zEZtGW5CLZZe2ZlGmj6KvxF8DLQNHA2EZHsAbcAkjQZGlSdRqbv
dD+s115gdQVjLCVZnDqG5QYzH0FpDpdnZuLzBRO3haQ5fn2QQlWRda/JROlq6Kkb
aO03eJIlqysQiLMcSvLoTtb6UYVH2VwmVSrbRXvWAu+OAWeOFJCyxOz0QEvOuiP2
Lwny1P1pQhqwL5RMXn7z/aCoQutjsiiLPQDK2RrojvpDF3Ybl+roWPwRru/ZQ0Od
EnuS6KHC0lM6oLYhm/fXAh8l5OEPF1SY3VxesQjNpKXdqIONKqm1XTKtEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVO3sNwdX8LEZgY9kb6qpUohWXMMB8GA1UdIwQY
MBaAFNUeZ5m8XKKFo3Y3LwtjRd/8h7jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEt
OWNhMjUxYzA1NDhiLzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEtOWNhMjUxYzA1NDhi
LzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsV4QqFRp
buX0jUmeMULbFqd2k4WDaUhGpU/xL57jG1h/RigNJR+kyl3DVBYvLiFeABtAfFqF
cLbL2Z/0J4ayGFquFz9YgrSqQpz6Fr2RmkYdN5tS+9ol28GeBbPYD1t8GJZztBl1
o1+35m6McvACv9U/wNhBIm6SCEUDEQs8x2sngLYGCHkZ6hxF00xXCHn41vZlP5i1
EDDQyRtmajR+vi6hM+8Th/oNyV5Y0bmUIOgrtfwKGjkPD33iB1kYNL5an2EhwKPI
23lGzY0B59aJc2VLuoCsEV8tcfnzFsAveg1MbjkOV8St+rRtk5hGdd5GWFzEngDR
Gy2x9n6lhFEDuQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:33 2026 by rpki-client