Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier: nTn3Kzdpg9Mft3EnJzP3KBBoUrISG8OkA8b5ygiObPQ=
Subject key identifier: B5:E5:55:9E:52:E2:04:9F:38:91:2D:57:6B:3E:69:E8:CB:AE:71:13
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 01A151E3A4888EABB2508E39A0EF4E7FF287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number: 1587
Signing time: Mon 19 Oct 2026 02:00:35 +0000
Manifest this update: Mon 19 Oct 2026 02:00:35 +0000
Manifest next update: Tue 20 Oct 2026 02:00:35 +0000
Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: O8lUxM4R6NU7YHvjuYwxTi+aJUfEpdBHFssoxQQSLyE=)
2: 3HiDrZA7PYUoDOVj2lWK_MTDMy4.roa (hash: VEj0HSUKE42dKjFD2uYohf7XQqVFoN8s8ftve/Xm9PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e3:a4:88:8e:ab:b2:50:8e:39:a0:ef:4e:7f:f2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: Oct 19 02:00:35 2026 GMT
Not After : Oct 20 02:00:35 2026 GMT
Subject: CN=b5e5559e52e2049f38912d576b3e69e8cbae7113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:ff:ab:74:ef:d4:5e:62:d3:8b:3b:91:f5:
0b:c8:48:7c:dd:12:0e:a9:8d:12:e9:67:30:0c:a9:
f3:57:e4:0a:9f:d4:11:4c:7f:c0:40:fb:a1:e5:80:
dc:bb:1e:db:49:02:81:34:66:27:10:af:0f:65:97:
4e:07:4d:ab:93:25:49:3c:94:68:00:3f:0f:b3:ca:
e0:d9:6f:6d:9c:08:19:52:59:1b:6d:83:ce:7f:8a:
a3:98:a7:f3:e3:48:ee:bd:24:ca:1e:6b:b4:60:1e:
96:a0:be:5a:a8:3c:fe:2b:a9:34:c8:fd:c0:a3:13:
b5:06:5e:d4:22:8d:91:5d:4d:74:96:88:5a:b5:6f:
96:93:64:c1:a7:cd:8c:7e:d4:d7:25:37:53:a6:2e:
8c:2f:f4:fb:05:95:be:2c:7f:f8:42:cc:31:07:2e:
d3:e5:00:1d:51:56:43:3b:5f:aa:af:8e:28:42:2f:
9a:ca:a5:d8:d0:2b:54:e2:63:58:e4:f6:7a:82:09:
cd:41:66:fd:64:f4:bb:67:72:75:2c:8f:0c:69:ac:
96:82:2d:4e:63:67:f5:4e:dd:4e:29:20:d5:75:a1:
a9:59:11:51:cd:2f:ec:47:3b:39:26:f5:aa:65:e8:
f4:0b:60:2b:e9:35:15:28:31:a3:2b:cd:af:84:af:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:55:9E:52:E2:04:9F:38:91:2D:57:6B:3E:69:E8:CB:AE:71:13
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8a:26:5c:91:d1:da:30:bf:a0:e9:82:77:a8:39:e3:aa:b4:
3a:d0:f2:4b:0e:ce:90:36:da:9c:ad:d4:cb:0a:38:32:c7:45:
3f:ff:3e:de:cf:de:59:fa:05:60:79:5d:84:3e:ca:22:72:c6:
0f:00:04:c4:99:7c:2e:01:ca:ae:03:89:2e:15:fb:07:bc:dc:
87:0b:5c:6a:84:f0:1b:bd:b0:8e:de:78:0c:87:19:e8:1e:55:
36:64:d2:7c:35:61:22:12:11:da:55:c6:51:81:56:a7:d4:48:
9d:00:dd:d8:b9:fc:86:64:f6:45:9e:ef:df:db:03:97:de:5f:
45:b9:8c:c4:1a:2d:f0:23:84:7a:b5:7b:a3:3f:8b:b7:c8:a2:
92:de:ba:37:b3:dd:21:bb:3f:03:be:64:00:6a:82:e0:f5:ca:
0d:38:07:5e:e8:a9:e4:d9:8f:44:68:21:64:e6:b6:cf:e6:34:
ed:1a:8d:11:67:34:d9:91:19:81:fa:b2:35:b1:f4:17:aa:ec:
63:54:fd:e6:48:a2:3b:0c:2a:b3:e2:4f:9a:e8:b0:b1:b8:85:
42:05:6d:ce:45:5e:cb:61:43:c4:d5:e3:aa:79:35:14:86:8e:
b0:d0:84:bc:6c:6d:a1:21:5d:ed:57:c1:8d:8d:c2:c1:b7:b2:
a6:bb:4e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:54:31 2026 by rpki-client