Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
File: 1s5ZxWscobYwJswpw-etzzQUZjw.mft (raw, json)
Hash identifier: 2ofMIDiYSidfdjrnX48qk5KRG4bzeV0f1iS1+HBTFqE=
Subject key identifier: 37:45:96:85:0D:25:D7:A2:F9:05:95:E9:D3:74:90:BC:31:27:08:F8
Authority key identifier: D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
Certificate issuer: /CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Certificate serial: 01A1A9A7A2FFC947545F6E5269AD3B988186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
Manifest number: 0202
Signing time: Thu 05 Nov 2026 03:01:37 +0000
Manifest this update: Thu 05 Nov 2026 03:01:37 +0000
Manifest next update: Fri 06 Nov 2026 03:01:37 +0000
Files and hashes: 1: 1s5ZxWscobYwJswpw-etzzQUZjw.crl (hash: pJa+lKwv4KxWDJmDAPS9qOpA4xH4IZCux2s8kscItN0=)
2: N9FFxQDjdWSsDqKRotEMiDNfWM0.roa (hash: JYJSVQnx65soskv06MhEawaexOLV3MdaQKd5cWOTtiM=)
3: qcXXlS_rHE9ouJsEbCmmlq5R8Ug.roa (hash: 1unAuaM5VTHoo8Otio/wEUldD3aBxQgm3lHyPoQMCYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:a7:a2:ff:c9:47:54:5f:6e:52:69:ad:3b:98:81:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Validity
Not Before: Nov 5 03:01:37 2026 GMT
Not After : Nov 6 03:01:37 2026 GMT
Subject: CN=374596850d25d7a2f90595e9d37490bc312708f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:e0:4b:b2:98:80:9f:dd:0d:06:50:22:d4:
bf:2e:47:10:ec:fe:65:5f:67:dc:71:cd:46:78:79:
1a:63:10:5c:f1:7a:36:3c:42:04:55:41:78:60:03:
77:1c:60:36:07:6b:77:2a:8a:2b:eb:b7:e7:04:24:
88:1a:27:dd:88:5a:af:6d:91:77:95:b0:97:37:cc:
87:7b:b9:ac:0b:24:7c:a6:de:56:d4:00:85:17:a7:
c8:35:f6:21:c2:9d:c1:dd:e4:32:5a:12:31:25:48:
10:62:5d:37:e0:b6:80:42:a4:e5:93:c4:a3:22:eb:
60:7f:05:53:f0:0c:00:ed:55:80:23:34:ea:a0:0e:
12:0a:ba:56:8b:af:58:57:ac:54:d9:bf:7d:a1:ee:
e1:df:2a:22:5f:99:1c:3d:5f:d8:2c:6a:87:50:a2:
b8:a2:a8:6d:6d:d8:67:39:ef:34:91:89:0e:9a:41:
a9:60:7c:c0:b3:f7:0d:e0:25:db:64:63:bf:7e:a6:
70:30:1e:9a:23:89:36:5f:ce:9d:ff:39:06:8e:1b:
79:51:1c:1f:aa:7b:25:2f:de:3a:82:5f:a9:02:da:
18:81:72:49:b2:25:7d:1e:f9:21:87:8b:ab:0b:3f:
7a:73:2b:46:d3:96:cf:36:f4:c4:5b:41:28:b7:71:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:45:96:85:0D:25:D7:A2:F9:05:95:E9:D3:74:90:BC:31:27:08:F8
X509v3 Authority Key Identifier:
keyid:D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5f:a9:23:1d:8b:c7:ed:34:5f:de:89:c1:91:b1:23:ca:3d:
0b:f9:1b:1b:60:ac:9c:5c:c3:b2:2d:63:73:5a:8f:06:7e:1c:
b5:4e:8d:fc:72:af:c1:e2:fb:ec:a3:ef:90:04:50:f1:35:fc:
a6:77:50:44:45:15:c7:67:27:2f:6d:05:3b:24:66:e9:a5:5c:
1a:0f:1d:d7:03:c4:d0:3b:1c:af:6c:f5:63:fa:cc:91:5d:66:
f4:c5:4e:e7:5f:bf:fe:80:81:5a:37:b7:12:17:16:8c:e6:8e:
35:89:d8:20:a1:5b:97:49:e5:fb:4a:69:2f:0f:13:d4:51:ca:
e7:eb:a1:5b:ef:3a:db:2b:0a:39:8a:bf:f0:04:b5:43:81:3e:
9a:93:ce:66:b8:92:37:dc:43:bc:9e:d0:b8:d5:43:fa:11:df:
89:77:22:aa:68:db:98:45:3c:a0:72:99:fe:e8:71:70:ae:c5:
0d:75:04:04:9d:97:22:3c:94:40:e0:1c:38:74:72:6a:e5:2b:
30:29:4b:33:ba:5c:02:06:75:9d:f4:34:c0:e4:4b:d4:42:2a:
f0:7a:db:24:47:1b:95:71:5d:89:af:5d:1d:6b:e2:c2:cf:bf:
18:65:c0:35:ce:39:08:89:05:51:a8:d1:ca:62:f7:db:5c:75:
4e:13:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:45:33 2026 by rpki-client