Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: 9RMKqEDooQOHcbJfeGX/pyMDuTUZuc74q2pbS9Kf7CQ=
Subject key identifier: 7C:AD:DA:3D:AD:0E:E5:24:3D:EF:76:81:F1:C0:0C:3C:BD:FF:7C:73
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 019DCF7517E2F4BE19176B0F8CF639DB46C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 0D0A
Signing time: Mon 27 Apr 2026 15:00:50 +0000
Manifest this update: Mon 27 Apr 2026 15:00:50 +0000
Manifest next update: Tue 28 Apr 2026 15:00:50 +0000
Files and hashes: 1: 1-ZxJKDFY_5zEIrEwX3VUy-JWPSA.roa (hash: GNsBEOF1St9pG7LTdw9A6w4OoqaTcb1Ixn98EplE4uQ=)
2: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: gxZRVXV3zt7Pt4il3830fFEgYwF6kwbjoK2DplWHVQA=)
3: IAE8GGEet8vnOy86a4Pl0t2IxIY.roa (hash: lB8GOpaeZj6cYWMehbLSIz/zXRuF4JutqhvwkMmG1eM=)
4: is55BrXiUjEY_w75gay3Xb4D5SQ.roa (hash: QUfa5r3yyLD0pccqcwV34ch7edYey1CHveIQqVa6Gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:17:e2:f4:be:19:17:6b:0f:8c:f6:39:db:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Apr 27 15:00:50 2026 GMT
Not After : Apr 28 15:00:50 2026 GMT
Subject: CN=7cadda3dad0ee5243def7681f1c00c3cbdff7c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:61:91:f7:ea:68:cf:a0:16:40:35:8d:8a:
f3:51:a3:80:f7:2c:23:50:23:62:24:7f:32:4c:06:
aa:57:0b:f5:9c:2b:e3:de:3e:54:7e:eb:ff:9a:d7:
80:f3:aa:9f:c8:f2:5f:6a:0b:ac:61:d9:cc:30:38:
55:42:9c:5e:cd:26:33:76:60:99:f9:9d:f4:1d:26:
e5:9e:d2:0d:bf:d2:14:09:98:11:a7:68:95:d0:8d:
6d:97:e2:c5:a4:ef:e3:f0:1a:35:a3:d0:4d:dc:0c:
6f:b9:3a:e2:8f:b6:53:3e:16:47:b4:a6:af:52:7b:
ef:c9:b5:57:88:43:12:c9:4a:b6:de:04:80:c4:f9:
40:d3:9d:37:71:dc:38:57:ca:12:92:d3:d4:e6:3f:
15:52:f8:cc:48:bc:58:02:1f:58:eb:15:0f:fa:bb:
31:ea:0e:44:39:a4:5b:1c:b1:8c:d3:be:48:b3:d0:
92:d7:3f:55:c8:73:1c:57:d4:4f:18:b5:c3:bf:33:
69:5b:99:93:53:e0:e6:24:27:4c:cd:2f:8b:b2:b0:
9d:c3:f8:59:d5:af:43:b0:94:35:82:44:77:6a:8a:
4f:bf:b5:e3:88:29:af:84:83:c7:a2:77:38:da:17:
ac:4e:26:9f:5b:93:24:ba:1f:2c:53:69:b8:19:64:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AD:DA:3D:AD:0E:E5:24:3D:EF:76:81:F1:C0:0C:3C:BD:FF:7C:73
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3a:bf:3f:c2:ad:2d:42:32:e4:56:4f:5c:6f:b4:b0:01:63:
ef:77:42:85:16:92:d2:c7:20:13:d4:92:58:6b:6f:c0:76:db:
82:6b:8a:03:80:2e:86:82:28:36:f0:88:ae:00:2c:5f:a9:59:
94:38:7c:90:06:dd:6e:47:0b:7c:05:91:fa:78:75:00:3e:3b:
1c:c5:71:2d:4f:82:b1:26:b3:87:0d:db:71:69:a8:f1:2a:25:
9f:c6:65:57:16:09:5c:99:65:a4:54:2f:0f:9b:2b:b3:3b:fd:
d4:aa:4e:df:e3:53:50:26:c8:5b:57:5e:f0:32:92:57:cd:ec:
cf:c6:5f:35:01:d2:25:a9:a4:e8:1f:a3:19:b8:63:fd:2b:a0:
f6:a7:f6:a6:37:13:63:40:44:ec:56:67:23:b0:ae:df:61:42:
b1:ee:7b:a9:3d:db:d7:49:4a:47:8d:be:a5:4e:c8:a9:50:96:
bd:33:b3:76:32:9c:dd:66:da:7f:fc:d8:e5:89:d0:73:68:4c:
aa:3e:24:c7:a2:65:98:02:7d:95:29:cc:4a:76:f8:7d:dc:77:
ba:3d:56:be:ff:a6:01:f8:7b:b5:1c:43:90:61:5f:5f:97:8f:
9c:c2:12:51:5b:20:3d:10:bc:42:db:00:e9:e5:9b:19:af:79:
98:20:81:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:25:04 2026 by rpki-client