Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: LNw8XwuM8yk33HW7ArwAFenPUVNsPL47pA3pFA45AGc=
Subject key identifier: 55:64:C6:17:43:4B:B0:4E:CD:67:8C:73:1F:98:6E:CC:A8:02:E0:0E
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 01A001DCEC6D122E203651C22F9828D15A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0E2C
Signing time: Fri 14 Aug 2026 20:00:50 +0000
Manifest this update: Fri 14 Aug 2026 20:00:50 +0000
Manifest next update: Sat 15 Aug 2026 20:00:50 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: D3VbCWiqItpa3x1fDFgWMGYEQ636dgLlb7FQxxTxXOM=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:ec:6d:12:2e:20:36:51:c2:2f:98:28:d1:5a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Aug 14 20:00:50 2026 GMT
Not After : Aug 15 20:00:50 2026 GMT
Subject: CN=5564c617434bb04ecd678c731f986ecca802e00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:43:0e:23:b6:22:ea:13:02:b2:a4:e4:1d:
28:d4:96:45:a6:3b:97:da:ae:fe:28:e8:36:eb:4b:
e1:72:68:99:d0:2a:ca:da:83:8b:d3:b2:04:5a:cb:
d1:38:83:a3:dc:1a:3f:48:03:a1:7f:dc:ac:89:9e:
e1:7e:59:fd:06:a1:97:48:76:fd:c7:20:21:08:99:
bf:32:a8:7e:0b:a0:c3:68:f6:2a:d8:3a:e4:af:bf:
eb:ca:32:6a:c5:bc:da:41:9d:eb:1c:d5:69:9b:44:
b2:da:86:e9:43:61:b4:12:71:c0:f9:80:3f:8c:7b:
1b:25:b0:f8:9e:f2:8c:db:2e:27:42:29:6f:5d:dd:
d8:4b:55:46:13:e5:a7:bc:fe:65:21:d0:80:2f:9e:
36:06:04:d5:9b:b2:ae:e0:8a:7e:f0:cc:04:c5:11:
cb:f7:e6:6a:92:be:3c:d6:49:64:1c:da:4c:79:2a:
8a:7e:01:56:09:15:ce:63:7f:6f:f4:61:2a:2f:52:
5d:5d:d3:fa:c0:21:e7:c1:7f:e1:58:3a:e9:8c:07:
73:24:5b:f9:2a:b8:2a:c4:73:34:7a:ea:1b:55:a1:
53:b2:52:70:6f:67:1f:dc:6c:87:0b:72:b4:a8:7b:
95:cc:9f:2a:43:af:c2:f5:7a:16:3f:d3:d5:4d:7c:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:C6:17:43:4B:B0:4E:CD:67:8C:73:1F:98:6E:CC:A8:02:E0:0E
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:c9:47:59:98:ec:5b:89:c1:92:45:e7:25:fe:f8:40:e4:
c8:ea:eb:87:4f:68:83:67:b6:8d:54:d0:cf:cf:a0:9d:44:e7:
01:c9:ba:3c:43:62:df:fe:41:e3:e6:d7:df:86:39:a6:a7:af:
e8:cf:a6:3a:34:82:b5:4c:e0:0f:d6:84:f2:7e:79:04:6b:dc:
a3:f8:8f:15:09:1e:b8:ab:09:d6:3f:3b:c8:8a:51:c5:14:ed:
00:a2:77:e8:5b:b5:46:a9:35:41:ec:35:fa:2b:98:22:14:dd:
22:8a:a5:6a:fc:94:61:00:e2:64:aa:6d:a9:a4:0d:31:c5:66:
f6:19:be:55:9c:e7:2f:1b:11:43:f6:65:ec:39:30:ee:64:f5:
54:05:b5:e2:5c:f3:1c:0a:1e:03:bd:d0:d2:8b:09:6d:40:fc:
da:91:07:0e:a5:68:96:34:18:bb:f4:e0:3a:16:ce:5b:54:ed:
42:24:a7:e1:fa:b3:b1:c1:ab:58:1b:d9:89:28:d9:23:f9:f8:
99:5c:2c:f7:27:3b:e8:2a:15:3e:81:96:a0:0c:23:90:7d:4e:
ee:89:91:f5:1f:6a:4b:7a:3a:2c:be:4d:75:5a:d7:fc:a5:6b:
e3:4c:93:c2:80:ce:0e:dc:64:b7:1d:20:f9:a3:f1:b0:73:46:
c2:05:62:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:14 2026 by rpki-client