Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier: 49xUSx8UK2o7ckvnODXBHZM+gfvXRryiOaZbxahqpuo=
Subject key identifier: 15:55:2E:5C:91:FD:82:87:12:EC:B2:31:B4:BF:D7:82:21:0C:D1:9E
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 01A001DCAA2CD632D2D1FCA8180C4E6C39DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number: 14D9
Signing time: Fri 14 Aug 2026 20:00:33 +0000
Manifest this update: Fri 14 Aug 2026 20:00:33 +0000
Manifest next update: Sat 15 Aug 2026 20:00:33 +0000
Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: WOQl3ERC4sXNxftuyTFAiN1/4A2rJYFNOz6ocdC5bGU=)
2: 3HiDrZA7PYUoDOVj2lWK_MTDMy4.roa (hash: VEj0HSUKE42dKjFD2uYohf7XQqVFoN8s8ftve/Xm9PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:aa:2c:d6:32:d2:d1:fc:a8:18:0c:4e:6c:39:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: Aug 14 20:00:33 2026 GMT
Not After : Aug 15 20:00:33 2026 GMT
Subject: CN=15552e5c91fd828712ecb231b4bfd782210cd19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2e:7b:48:f0:d5:e7:cf:0c:94:66:95:c2:10:
8f:80:d5:7b:46:c1:4c:04:59:03:1c:eb:ab:c4:4b:
40:43:f4:ad:f4:14:4d:0f:c6:17:d2:48:ba:9b:c4:
ea:8b:74:85:84:41:55:f9:d0:3f:d9:87:e5:8c:8a:
36:33:21:42:92:7c:78:0d:33:19:f6:c5:39:2c:b5:
a4:9d:3d:17:9e:c1:3a:38:11:3f:3f:5b:d7:a5:f6:
fd:80:ab:36:e8:6c:18:dd:ec:9e:35:64:77:a1:10:
1d:71:df:f0:3f:b7:bd:00:89:91:a7:18:bc:bc:c4:
38:75:88:be:68:04:25:a8:cd:a7:f3:78:c7:63:45:
e0:0d:71:5d:69:7f:e5:da:08:64:86:65:5d:50:da:
d6:2a:39:87:86:da:89:0d:90:2f:0c:4a:3f:6d:58:
68:f4:c6:9b:f6:b9:32:e8:aa:d2:1a:c2:43:9b:19:
04:a6:13:6e:86:4d:ba:9b:85:f1:77:b7:2e:a2:c9:
cc:ef:eb:56:7e:c2:80:bf:2d:b4:51:c3:9a:8d:70:
38:1d:17:94:7d:29:c1:16:67:38:7c:05:16:12:81:
ff:fe:91:56:19:d9:d8:b8:b5:8f:c4:34:e3:01:39:
f7:e6:05:38:28:d6:7f:c4:9e:38:29:8e:02:d0:2a:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:2E:5C:91:FD:82:87:12:EC:B2:31:B4:BF:D7:82:21:0C:D1:9E
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:10:e0:66:37:6f:8f:c7:b3:2b:59:01:27:53:e2:09:d3:0f:
c3:e9:2d:1b:8a:56:78:52:e7:2d:e8:6b:00:1c:36:e3:f9:93:
00:5a:1b:12:72:fd:60:85:40:fb:de:1a:93:2d:52:63:1c:0d:
bc:bd:dd:a6:3b:a4:29:fc:56:f7:61:94:fb:7a:a4:49:a4:88:
f8:fc:ce:e6:0b:e1:1b:7c:b6:5d:70:0b:6a:e0:b2:3a:69:1b:
fc:fe:d1:f8:0e:1a:d3:ae:6e:63:c5:93:17:75:55:eb:4b:b7:
87:96:20:b0:ab:96:d8:70:3a:c7:52:44:f4:ed:34:91:b2:24:
14:17:a1:e1:57:16:f2:d3:64:d3:d9:90:30:fd:83:f4:f4:f4:
ae:e8:93:1a:90:3c:d7:ae:f4:e5:c5:98:3e:b8:4f:f5:bc:36:
27:ec:73:6b:93:de:3d:42:9e:ae:f8:5b:96:cc:c6:12:cd:f9:
6f:c3:f9:a9:8a:86:32:2d:58:7f:56:1b:e3:ec:88:6d:ef:c1:
08:bd:79:c9:db:f2:35:48:72:46:e5:4d:e6:2e:b7:e9:83:d9:
00:19:f7:ba:c8:25:4e:d6:b8:e5:f4:40:64:ea:7d:d4:23:48:
6c:fa:77:5b:35:2e:e0:5b:1b:e7:4f:7d:83:44:62:6d:1f:dc:
41:75:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:55 2026 by rpki-client