
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: GHpMIBXF2/uXaOqoA2Yvsn90/U4bhd1B/V5v1dzmp2c=
Subject key identifier: 5E:9C:0F:A6:AC:0A:00:42:D7:DE:00:ED:39:38:F2:C1:A3:E7:72:FE
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019E2CCC337291DEDCE195D0E3A83612201D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 17F5
Signing time: Fri 15 May 2026 18:00:40 +0000
Manifest this update: Fri 15 May 2026 18:00:40 +0000
Manifest next update: Sat 16 May 2026 18:00:40 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: eX5AFni4ObKr9NLlPt1iuAyfJ69kU65ObQaPNbSDzrU=)
2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:cc:33:72:91:de:dc:e1:95:d0:e3:a8:36:12:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: May 15 18:00:40 2026 GMT
Not After : May 16 18:00:40 2026 GMT
Subject: CN=5e9c0fa6ac0a0042d7de00ed3938f2c1a3e772fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:a5:99:85:2b:7f:06:a9:4a:7b:a4:c7:d2:
84:f5:83:23:64:73:43:cb:ff:4e:fa:e6:4c:29:57:
1e:b7:5d:43:10:ef:00:e7:2e:6a:58:de:f8:43:10:
2a:5d:e7:75:c6:63:b5:23:55:94:30:b7:2a:e6:bc:
98:d5:4b:61:e8:35:db:77:0b:30:0e:d1:b8:3d:56:
98:e5:eb:43:0b:cb:e8:a8:07:da:29:d8:5c:ab:cb:
d0:31:2e:54:de:eb:c5:8f:57:f7:29:6f:21:44:48:
4a:fa:e1:35:9a:c9:8f:98:f5:80:06:6c:a4:1f:65:
17:84:4d:74:d0:82:f6:0c:96:67:9e:16:f8:04:1a:
bf:aa:62:97:60:6b:f7:f2:59:fe:31:2f:1c:52:92:
02:ad:ce:84:73:c2:6f:03:b1:21:60:66:5c:1e:fe:
e5:c4:b8:b3:a7:ec:05:23:ce:58:c4:e0:49:4f:30:
ba:06:77:16:70:c7:66:0d:60:f3:ef:83:e9:d4:10:
4f:be:a2:fa:e0:be:90:1b:d6:74:02:b3:a8:06:5d:
ba:2c:c0:c2:d5:a1:4a:26:84:0f:c1:4a:a8:ed:d0:
36:34:85:b6:1c:ca:58:a8:14:b3:2c:12:0f:f3:34:
ca:48:09:d7:1f:50:a0:9b:29:64:2d:3f:ae:78:2c:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9C:0F:A6:AC:0A:00:42:D7:DE:00:ED:39:38:F2:C1:A3:E7:72:FE
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:3e:b7:9c:43:e2:77:ff:19:d5:a7:fd:59:df:68:57:7b:
24:68:07:c6:8a:99:76:55:88:f5:7f:65:1c:3b:3d:5c:da:51:
50:c8:7e:40:8f:23:c1:57:b4:b6:77:22:ed:bb:fe:db:0c:f3:
fa:2e:96:8a:28:70:6d:82:64:9e:f0:ef:9e:8b:70:f5:5c:03:
d4:96:fb:ab:a8:4a:d6:29:06:3d:a6:0d:b6:1f:bf:1d:df:99:
ab:ff:46:c1:7c:e3:1c:48:81:09:c8:46:3c:33:47:2c:3c:a7:
47:db:0d:73:2a:81:30:84:5c:91:5a:f9:cf:d4:d7:7e:e1:07:
ca:1b:d9:77:65:3b:2e:ab:c0:11:e4:7d:17:44:02:fa:f8:1b:
5c:0c:f9:5d:1b:ed:3d:b2:84:b5:d4:fa:91:d6:96:d5:79:50:
2f:cb:48:b6:f1:96:5d:96:c3:66:0a:a2:94:69:04:63:f6:03:
03:23:35:4d:4b:8c:db:6d:de:7d:ce:a5:69:a7:16:1b:d8:39:
e3:f4:d1:77:93:68:f2:bf:62:f9:5b:73:d2:c7:cf:5b:21:72:
31:1d:14:e1:45:4a:2e:be:32:79:46:9a:93:d7:8f:28:a7:e0:
ae:4a:26:05:e6:70:51:19:2c:59:8d:ee:70:ea:42:37:4c:9e:
13:d4:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:46:09 2026 by rpki-client