Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: LRmATWwc7n4VveYQb/Yiypjn/xJtmEt5j0jsDLsmVxw=
Subject key identifier: 1F:09:26:B0:66:DA:8B:8D:BB:76:14:EA:BB:1F:63:D7:F3:9F:5A:3C
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 01A001A63F318274520EBFD4AA5998CBC942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 0F63
Signing time: Fri 14 Aug 2026 19:01:07 +0000
Manifest this update: Fri 14 Aug 2026 19:01:07 +0000
Manifest next update: Sat 15 Aug 2026 19:01:07 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: Uwt+JLMZOthWEtyINL62y3dt/Zjk88182mYdYHiIOOM=)
2: i5wzAWhzD6thOzcjAU711zxCavE.roa (hash: P2AdWkb+9Icdy+0Iaf1HCIO0qMt8S3L75/lIYdAPN0w=)
3: p-kTlbQouPjMNiRixH1O0X2WaO4.roa (hash: HbkgtFGk5iSU61DgeSp5FYFokJuHWEnOUImsHeOoZNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:3f:31:82:74:52:0e:bf:d4:aa:59:98:cb:c9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Aug 14 19:01:07 2026 GMT
Not After : Aug 15 19:01:07 2026 GMT
Subject: CN=1f0926b066da8b8dbb7614eabb1f63d7f39f5a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:dd:16:61:dc:e6:97:33:33:8b:ba:fe:42:
e2:66:cc:61:59:06:e3:67:74:2d:85:cd:12:99:10:
fd:21:ce:05:d1:22:ce:89:d1:a3:14:c8:c0:bf:83:
e9:76:09:83:88:39:7b:fe:a2:56:e0:29:35:56:44:
9a:07:d5:07:6c:62:81:f8:eb:c1:39:7e:7e:d4:f1:
3e:cd:8b:d2:17:f8:cd:9c:e6:30:ce:55:29:e2:f5:
f4:7f:6d:d5:f4:a5:14:94:f7:15:52:b6:58:1f:00:
1f:99:7a:bf:25:c2:0a:0f:c5:c9:d4:26:0e:4c:8e:
6a:21:3e:75:8a:44:57:0c:88:3b:ec:c7:f6:32:8a:
00:76:5a:da:ae:3f:98:ce:4c:16:60:3c:98:2d:a4:
e6:27:dc:26:1f:1a:70:04:04:35:d9:f4:67:bc:30:
9a:43:7f:f5:85:15:7e:49:5f:ab:d8:b0:e1:58:a7:
90:dd:4e:c9:56:de:e0:ba:d1:76:5d:b0:03:08:77:
e4:c2:e2:57:7d:7e:e9:d3:ce:b1:38:29:a1:c3:eb:
85:ab:e7:06:4a:78:7e:a3:c9:7f:91:82:02:7e:61:
a5:57:d1:53:88:31:6f:68:23:6e:40:7a:ee:1b:b9:
72:b6:e6:e0:67:e1:ac:e1:2f:4f:14:c4:77:02:fb:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:09:26:B0:66:DA:8B:8D:BB:76:14:EA:BB:1F:63:D7:F3:9F:5A:3C
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f7:42:12:93:6f:10:e6:27:20:59:3e:34:54:46:84:ea:b1:
4e:e1:d1:60:a0:a5:2a:35:fe:3c:46:ed:03:9e:be:6b:44:fd:
97:dd:4b:fb:a1:dc:64:32:67:3a:cc:0f:d2:e7:25:a0:a1:fa:
b6:7e:11:90:74:3d:3b:b3:44:3d:1c:b3:bc:4a:93:e2:3a:32:
61:7a:bc:13:ca:ec:bf:78:97:d1:49:dc:36:77:c5:86:6e:40:
eb:14:14:d1:ea:2a:30:81:20:67:93:5d:bb:bd:7c:86:23:88:
aa:a9:b4:05:01:69:35:4d:1c:90:94:8f:0e:92:ac:a0:04:22:
44:35:2a:3f:7a:02:4f:dd:86:2e:1d:93:f4:3a:48:7e:a3:44:
bc:c3:db:4d:7e:8e:da:64:70:74:9e:52:cf:fb:39:83:d9:e7:
ed:ea:c4:8a:96:62:de:b7:20:3f:8f:da:11:2f:cc:c0:fe:67:
d8:1f:11:ce:f2:67:6e:5e:6b:1f:ec:73:c5:36:2f:39:be:ed:
8c:66:13:cc:0d:ea:93:1e:98:d8:bd:c6:a1:5c:7b:a4:ac:3d:
7b:f8:36:82:13:ab:f8:ed:09:73:3e:cd:92:4d:61:30:5e:05:
05:0c:30:c7:1e:cd:35:1c:d2:22:84:7a:ef:c5:a0:dd:ad:79:
a5:a4:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:25 2026 by rpki-client