Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: H+0C/5p2LTdcBImpuFmCV5S2Gh9jrcIZ/RSgaO1pVGw=
Subject key identifier: 27:C2:D9:6C:8D:32:2F:B5:31:EC:98:EA:10:C5:BF:8C:29:6A:5A:D0
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 01A152BFAFDA464C9F6CC53FA02E45065845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 1336
Signing time: Mon 19 Oct 2026 06:00:56 +0000
Manifest this update: Mon 19 Oct 2026 06:00:56 +0000
Manifest next update: Tue 20 Oct 2026 06:00:56 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: yb+AsZJLkg0qiaLdKY8IOBfYegSaDk0BoSIpHstIZ2Q=)
2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:bf:af:da:46:4c:9f:6c:c5:3f:a0:2e:45:06:58:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Oct 19 06:00:56 2026 GMT
Not After : Oct 20 06:00:56 2026 GMT
Subject: CN=27c2d96c8d322fb531ec98ea10c5bf8c296a5ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:fc:e7:68:70:e8:c0:03:b6:fb:ec:52:c7:
59:38:04:6e:24:19:10:50:42:99:6d:8e:f0:8f:5d:
ff:70:94:e7:88:5d:83:09:47:69:c0:45:81:cc:6b:
d8:6c:36:fd:6e:db:f9:39:04:3f:15:c3:1a:15:dc:
f3:e9:9a:e6:ae:ab:f8:52:24:85:e2:e3:5f:c9:27:
cf:e4:c0:32:85:df:5e:30:da:a0:b1:6c:98:2c:e3:
ef:27:56:48:14:53:06:47:14:46:e1:fa:4d:e8:34:
e5:01:9b:6e:8d:f5:20:f9:be:d4:27:f4:d3:ce:cd:
cd:8c:cd:39:95:68:63:ff:30:1e:2b:38:f0:21:9e:
d1:72:6f:56:ac:2c:8a:a5:21:88:c8:e1:1c:0b:4e:
5d:96:c6:c3:63:48:15:9f:d1:28:10:df:08:40:87:
9a:7a:26:f5:f2:22:76:11:e2:b7:b5:96:c3:ae:02:
ab:86:20:4b:7a:59:58:80:71:e1:f1:62:57:67:db:
5b:bd:28:3d:e2:d4:b1:0e:63:04:af:41:61:48:3b:
82:2b:20:d3:d1:22:a4:68:25:d3:6f:31:01:ac:a0:
a4:75:27:0c:ea:3c:f5:c7:b5:bc:8b:7c:4a:b1:de:
ff:45:53:04:29:1a:96:84:74:6c:79:20:c5:a0:d2:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C2:D9:6C:8D:32:2F:B5:31:EC:98:EA:10:C5:BF:8C:29:6A:5A:D0
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b0:a9:4b:4e:1e:f5:2c:c2:ab:34:83:5d:a9:52:a3:ac:07:
dc:ec:fe:85:e9:38:fd:33:1f:e2:12:d2:47:37:ee:34:1a:0f:
a0:de:f0:e8:29:31:82:6f:a8:29:36:81:ea:cb:d5:02:2e:4a:
a2:6a:d8:95:16:2d:d8:34:c8:53:74:53:86:2d:09:08:65:f6:
e1:b4:01:cf:28:9d:f3:b1:27:a9:e6:c8:e7:a9:a2:72:91:6e:
6b:e5:59:40:65:8e:12:af:8a:79:e2:c3:0c:29:3b:6f:05:dd:
64:e2:40:a7:c6:2c:d6:31:d6:db:8c:a7:ca:a7:5b:6f:e5:c7:
9d:61:dd:09:fd:cf:79:4f:f9:bd:ec:10:fc:6b:c3:92:eb:1b:
69:d5:0b:6a:2e:ff:80:d3:f1:a2:7a:08:aa:fd:02:5b:d6:6d:
b7:d9:81:0e:7b:a2:02:c5:6a:90:71:0c:be:f7:a1:25:bd:12:
9c:18:df:69:7c:ea:6a:4c:35:b3:eb:13:5a:50:2f:6a:34:37:
72:55:d6:61:d5:19:41:fa:bd:e5:97:a1:a4:7c:48:bc:17:49:
45:23:cc:0f:a4:05:92:d7:81:15:a5:6c:dd:94:b4:60:52:7d:
49:27:c4:1a:b4:70:ee:a0:d6:57:0a:28:cc:6d:62:83:b4:f4:
61:91:dc:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFSv6/aRkyfbMU/oC5FBlhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MmFkNDA2ODk0ODgzMGQ5ZTllNThhY2U1ZTFmMTcwMzQ4
ZTQwMjQwHhcNMjYxMDE5MDYwMDU2WhcNMjYxMDIwMDYwMDU2WjAzMTEwLwYDVQQD
EygyN2MyZDk2YzhkMzIyZmI1MzFlYzk4ZWExMGM1YmY4YzI5NmE1YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymH852hw6MADtvvsUsdZOARuJBkQ
UEKZbY7wj13/cJTniF2DCUdpwEWBzGvYbDb9btv5OQQ/FcMaFdzz6Zrmrqv4UiSF
4uNfySfP5MAyhd9eMNqgsWyYLOPvJ1ZIFFMGRxRG4fpN6DTlAZtujfUg+b7UJ/TT
zs3NjM05lWhj/zAeKzjwIZ7Rcm9WrCyKpSGIyOEcC05dlsbDY0gVn9EoEN8IQIea
eib18iJ2EeK3tZbDrgKrhiBLellYgHHh8WJXZ9tbvSg94tSxDmMEr0FhSDuCKyDT
0SKkaCXTbzEBrKCkdScM6jz1x7W8i3xKsd7/RVMEKRqWhHRseSDFoNLoiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfC2WyNMi+1MeyY6hDFv4wpalrQMB8GA1UdIwQY
MBaAFNUq1AaJSIMNnp5YrOXh8XA0jkAkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjct
YjhjZjA0YjU0MjUxLzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjctYjhjZjA0YjU0MjUx
LzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7CpS04e
9SzCqzSDXalSo6wH3Oz+hek4/TMf4hLSRzfuNBoPoN7w6Ckxgm+oKTaB6svVAi5K
omrYlRYt2DTIU3RThi0JCGX24bQBzyid87EnqebI56micpFua+VZQGWOEq+KeeLD
DCk7bwXdZOJAp8Ys1jHW24ynyqdbb+XHnWHdCf3PeU/5vewQ/GvDkusbadULai7/
gNPxonoIqv0CW9Ztt9mBDnuiAsVqkHEMvvehJb0SnBjfaXzqakw1s+sTWlAvajQ3
clXWYdUZQfq95ZehpHxIvBdJRSPMD6QFkteBFaVs3ZS0YFJ9SSfEGrRw7qDWVwoo
zG1ig7T0YZHcmA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:57:05 2026 by rpki-client