Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
File: 1s5ZxWscobYwJswpw-etzzQUZjw.mft (raw, json)
Hash identifier: nXh+yDcnAdK2K/HUgCBvKoquU5GqkKtOgnHcJ48vKEY=
Subject key identifier: BF:A7:D2:7E:5C:7B:12:3E:82:B2:87:19:DF:87:B4:CE:74:65:B6:5D
Authority key identifier: D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
Certificate issuer: /CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Certificate serial: 019FADBF6261F4CCFD8E02FCB124D3A0FB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
Manifest number: FB
Signing time: Wed 29 Jul 2026 12:00:28 +0000
Manifest this update: Wed 29 Jul 2026 12:00:28 +0000
Manifest next update: Thu 30 Jul 2026 12:00:28 +0000
Files and hashes: 1: 1s5ZxWscobYwJswpw-etzzQUZjw.crl (hash: hOcHvz+7m2CYBoGIwCLFvkjTu+tfrrM01WMn5yaM42E=)
2: N9FFxQDjdWSsDqKRotEMiDNfWM0.roa (hash: JYJSVQnx65soskv06MhEawaexOLV3MdaQKd5cWOTtiM=)
3: qcXXlS_rHE9ouJsEbCmmlq5R8Ug.roa (hash: 1unAuaM5VTHoo8Otio/wEUldD3aBxQgm3lHyPoQMCYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:62:61:f4:cc:fd:8e:02:fc:b1:24:d3:a0:fb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce59c56b1ca1b63026cc29c3e7adcf3414663c
Validity
Not Before: Jul 29 12:00:28 2026 GMT
Not After : Jul 30 12:00:28 2026 GMT
Subject: CN=bfa7d27e5c7b123e82b28719df87b4ce7465b65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:31:75:ca:3b:15:68:6a:b0:db:1a:04:49:55:
76:75:e0:e6:fe:1b:f9:4f:67:a1:06:d1:e2:e4:aa:
f2:8d:fe:7c:14:54:2f:b9:5d:c7:5b:bb:00:6a:c5:
6e:d9:c9:72:c2:f1:e2:a5:2f:02:3a:33:e3:36:8f:
70:25:39:23:ca:b2:28:a4:5b:8c:c1:08:cb:1f:e4:
04:ff:9c:db:bb:6d:58:01:f9:a4:f1:00:fd:63:0a:
96:4a:cc:8c:6c:4b:c7:5b:e6:8b:17:55:c4:c5:17:
4c:2e:51:49:21:a4:3e:76:8b:5b:d3:b3:85:10:2c:
05:6f:b4:13:72:83:6a:79:a5:f4:f2:d5:17:b3:91:
e0:e1:c8:bf:3b:af:fc:98:28:66:14:98:a7:5c:ab:
ca:b8:e6:df:a7:14:20:3d:1c:f0:13:06:94:2a:dd:
93:b7:f3:24:dc:07:05:80:91:3b:91:55:81:ec:1a:
c8:01:4b:cc:c5:5a:fe:74:09:5a:9b:0b:f1:5b:13:
9c:cf:43:35:76:39:0a:a5:dc:80:fb:44:eb:e3:4f:
79:7b:70:b8:29:23:e3:7b:61:b3:cd:68:a0:9c:89:
56:c5:88:da:8c:37:70:93:fe:ed:74:28:02:af:58:
96:c7:d9:3e:60:93:7b:85:72:5c:4e:8e:ce:e9:b7:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:D2:7E:5C:7B:12:3E:82:B2:87:19:DF:87:B4:CE:74:65:B6:5D
X509v3 Authority Key Identifier:
keyid:D6:CE:59:C5:6B:1C:A1:B6:30:26:CC:29:C3:E7:AD:CF:34:14:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5ZxWscobYwJswpw-etzzQUZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ceb578-71d8-449e-a2c9-c85963c718fb/1/1s5ZxWscobYwJswpw-etzzQUZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c4:7e:44:ae:92:d2:ae:44:46:90:f9:5b:2a:2b:31:54:2c:
b0:66:fe:5e:96:da:8c:c5:b7:f1:92:9c:9d:d8:ee:73:8e:32:
66:70:8c:08:b2:13:7b:ce:ff:3e:c6:83:d1:72:7e:7b:d0:02:
d4:03:0a:23:26:08:df:e6:68:91:44:86:83:e6:b8:61:4b:fe:
69:fe:dd:4e:99:6c:42:16:aa:9a:c4:d4:ba:0c:63:73:12:a5:
73:8a:fa:a8:bd:b4:26:c9:ad:a1:32:e0:cd:e0:28:a5:58:ed:
c9:43:f9:60:ba:59:8c:cf:3d:b0:37:ac:36:1e:d8:51:f5:78:
b2:3d:37:93:7b:6b:2e:ce:ca:db:03:51:9b:a9:1e:f6:6d:7b:
4c:14:b5:13:90:4f:09:b6:d8:8d:88:94:8d:0f:12:ec:e5:df:
ce:68:f8:af:60:1b:ac:b2:d0:38:1f:0d:7b:c4:24:3a:3c:fa:
c6:06:9a:7f:cd:8b:26:c6:f5:bf:3f:1c:8a:90:e1:25:5e:db:
a3:5f:9a:a4:09:9e:29:14:7e:f8:03:d1:f3:a1:80:79:4d:52:
b6:99:ce:b3:c2:36:a0:a0:f6:9f:23:4d:c6:c0:70:30:0d:14:
73:ab:b8:ee:73:b7:7b:8f:82:bd:e7:85:48:9a:e8:56:68:5b:
85:5c:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:28:29 2026 by rpki-client