Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
File: 1s5ZxWscobYwJswpw-etzzQUZjw.mft (raw, json)
Hash identifier: Wvft/balUQc9oGA2ZmeqvEqLIe0PBUGB6M1k9yPvje4=
Subject key identifier: 12:FD:08:0F:71:99:C6:69:8B:6F:79:72:97:D7:FD:07:5D:58:4C:EB
Authority key identifier: D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
Certificate issuer: /CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Certificate serial: 01A1A5CA67D529746A96A4E2646969070443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
Manifest number: 0200
Signing time: Wed 04 Nov 2026 09:01:07 +0000
Manifest this update: Wed 04 Nov 2026 09:01:07 +0000
Manifest next update: Thu 05 Nov 2026 09:01:07 +0000
Files and hashes: 1: 1s5ZxWscobYwJswpw-etzzQUZjw.crl (hash: w/hHRK5S3KSv90KoQeDkRpeLC6MfM3OTFxQ5BFd8s70=)
2: N9FFxQDjdWSsDqKRotEMiDNfWM0.roa (hash: JYJSVQnx65soskv06MhEawaexOLV3MdaQKd5cWOTtiM=)
3: qcXXlS_rHE9ouJsEbCmmlq5R8Ug.roa (hash: 1unAuaM5VTHoo8Otio/wEUldD3aBxQgm3lHyPoQMCYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:ca:67:d5:29:74:6a:96:a4:e2:64:69:69:07:04:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Validity
Not Before: Nov 4 09:01:07 2026 GMT
Not After : Nov 5 09:01:07 2026 GMT
Subject: CN=12fd080f7199c6698b6f797297d7fd075d584ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:61:3f:22:f7:fa:2e:a5:1a:c3:ee:2d:97:
f3:d4:f8:f3:1d:bb:df:1e:03:89:46:11:0b:cb:32:
98:f1:5e:ea:66:b3:f8:3e:38:8b:30:9e:c3:1e:69:
34:29:a3:6c:9a:eb:dd:5e:5c:2d:48:46:5c:67:98:
78:64:d6:e8:1c:61:6e:7a:62:c1:30:b3:33:be:c3:
da:4e:f3:d3:90:41:41:62:b3:8a:af:07:9c:d8:55:
bb:ae:3b:12:2a:b1:86:0c:1d:c4:15:09:3a:d7:10:
3c:47:71:b6:21:f3:ec:f8:b4:b4:1a:5e:1e:95:0f:
ec:cc:70:fb:c6:cc:2d:aa:7f:4a:3b:e9:c4:2a:92:
1c:72:12:11:69:e1:03:7f:76:81:1d:86:29:99:7f:
fa:fa:f4:ae:f3:da:56:a3:f8:ea:f1:0d:7f:11:3d:
da:37:2b:8c:13:fa:d4:a3:49:d8:53:8b:fb:7a:88:
9d:01:b5:60:b6:9c:a2:e3:1c:f1:ef:e1:9d:0c:1c:
b2:e3:fb:06:93:fd:91:f2:50:b6:93:5c:b3:ef:bf:
82:12:67:be:00:0a:67:bd:79:1c:cd:1c:ce:59:bd:
25:95:81:c0:98:bc:0a:23:40:49:90:4b:50:e0:7f:
b3:bd:f8:5a:db:5b:3d:24:3a:1b:fb:cc:00:97:b1:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FD:08:0F:71:99:C6:69:8B:6F:79:72:97:D7:FD:07:5D:58:4C:EB
X509v3 Authority Key Identifier:
keyid:D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b7:f2:b6:db:9f:fb:f5:db:87:04:11:6c:b4:33:c6:a8:92:
43:c5:58:0e:62:8d:e0:60:a8:7c:43:6d:c0:e1:04:b9:87:df:
c5:7d:2b:e7:c9:be:da:8a:cb:cc:6c:64:68:66:34:36:4d:39:
78:6f:ff:31:d9:61:db:8b:34:ef:63:46:df:46:4f:96:9d:47:
24:6a:ed:88:f6:40:89:b3:0c:bf:79:a7:7a:53:d0:d1:87:19:
d1:95:30:6d:ef:73:f2:83:b7:18:48:71:1c:bf:0a:a2:34:db:
9d:59:63:01:9e:91:8a:cf:83:8b:9b:d1:3a:b8:ad:7c:d2:28:
2a:f6:d2:0b:4e:c6:90:7e:b3:03:86:b6:56:46:f8:3d:dc:2e:
d7:5b:83:bb:81:ac:2f:1d:85:3e:b9:15:59:a6:2d:6b:08:1f:
ff:48:b1:30:67:2e:95:3f:04:52:b9:f3:70:d6:41:9a:95:88:
fd:cf:96:69:5d:25:62:df:32:2d:42:06:2d:c8:07:2e:af:80:
e4:14:33:c2:00:48:a1:69:6b:af:3c:16:88:f6:66:23:5f:1f:
c9:4e:64:13:ab:17:d2:45:38:56:2f:09:9a:f2:d3:ca:b4:e6:
7e:60:02:05:52:52:f3:56:8d:3f:c7:0b:9a:98:fe:96:3d:08:
0a:ff:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:45 2026 by rpki-client