Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: DGOc/6BAf3IfYXmP5Cis3q/fBZSWffb/bqP226QhW0g=
Subject key identifier: 22:CE:2B:10:4B:EC:49:01:CA:DF:BC:49:43:6D:6F:4E:15:E8:A8:AE
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 01A13D137773B8FD5744E0B0991EE580A8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 1008
Signing time: Thu 15 Oct 2026 01:00:48 +0000
Manifest this update: Thu 15 Oct 2026 01:00:48 +0000
Manifest next update: Fri 16 Oct 2026 01:00:48 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: LyHagkgNd+ioQTurZY11EqT9HA9WOBDN/ap4pZRP5MQ=)
2: UFIlSKxx9JVyflAe4XZ9RSQQiYg.roa (hash: PLd/XdORbh+AqlA44ImDYbauW5MSTsm0/u80XEVDYgk=)
3: i5wzAWhzD6thOzcjAU711zxCavE.roa (hash: P2AdWkb+9Icdy+0Iaf1HCIO0qMt8S3L75/lIYdAPN0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:77:73:b8:fd:57:44:e0:b0:99:1e:e5:80:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Oct 15 01:00:48 2026 GMT
Not After : Oct 16 01:00:48 2026 GMT
Subject: CN=22ce2b104bec4901cadfbc49436d6f4e15e8a8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:bd:48:0e:c5:40:1d:b9:44:32:5f:64:5d:
50:16:7f:86:01:5a:e9:2b:07:15:c0:56:ef:b7:aa:
63:1b:54:5e:9e:39:8a:fa:6d:ed:67:c7:6b:89:2d:
f4:f6:81:37:a6:20:5b:8b:bd:e4:bf:02:b8:01:26:
27:c4:7d:ed:07:68:a0:4d:4c:e9:de:0f:8d:07:89:
93:1d:eb:0c:0c:17:62:ee:88:01:50:1f:e4:9e:07:
d2:d7:fa:17:24:20:09:a2:32:3d:86:e3:66:1a:7d:
b1:8b:24:48:7a:84:8d:ac:6f:89:30:3b:70:c8:df:
36:a8:61:8c:6c:78:d6:f4:6d:21:f1:49:45:15:85:
c7:9a:7b:d0:1e:38:65:ef:5c:c9:62:2a:6b:e6:63:
39:28:16:97:0d:ad:e3:25:4c:09:92:4d:19:ce:ed:
b9:fc:ff:d1:20:dc:12:b4:5e:62:b9:37:ff:23:d1:
8a:e8:5a:60:dc:6f:db:d5:4d:ff:7e:29:c8:d5:c3:
6e:64:97:c4:80:b1:bd:6a:fd:f2:39:ec:b8:bd:a2:
a4:a0:c9:84:5b:79:bb:80:b8:b7:74:91:07:e4:6e:
8c:4a:32:96:e9:49:2a:82:ec:85:d5:6c:7a:4c:51:
3a:dc:f1:58:9a:4a:7c:a2:17:5c:ee:21:1f:50:5e:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:2B:10:4B:EC:49:01:CA:DF:BC:49:43:6D:6F:4E:15:E8:A8:AE
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2f:17:3e:2c:fb:22:01:8d:06:8b:73:b1:fe:a3:2d:fc:ae:
c7:44:63:46:9b:e2:f7:2b:2f:fb:fe:5d:19:e2:65:25:76:5d:
ad:e8:7a:3f:cc:78:de:4c:eb:03:22:80:b1:c2:6d:b5:74:d2:
b0:02:c7:66:fd:64:c3:b7:83:63:de:03:a8:60:f6:15:39:23:
0f:2f:87:a2:30:80:ea:5e:99:61:48:79:31:20:f7:70:6c:94:
56:38:ac:1d:bf:58:43:de:f9:86:93:8c:8d:0c:a3:53:23:0d:
2f:ad:83:d7:1b:5e:2f:be:f1:f6:10:ca:13:65:20:7b:79:f8:
7c:f3:58:3b:16:12:ea:9d:a0:c8:0e:99:62:7d:52:9f:4a:a0:
4f:0b:88:d3:5d:a4:66:70:1f:7f:77:fc:8b:cb:7b:54:33:c2:
a8:15:45:b9:6f:02:50:44:d0:58:a1:87:6a:17:69:a6:e6:40:
62:89:9c:7c:b1:21:18:9e:cb:b0:9a:80:a4:17:60:b0:f1:c5:
bb:56:97:31:6d:0c:ad:df:8e:c4:fc:ee:28:4e:91:ae:e7:b2:
05:95:b2:4c:63:8e:a0:67:82:05:58:af:ac:ca:6b:5d:49:ac:
0b:d2:42:8f:9a:25:41:df:36:1f:da:f3:53:d3:9b:b6:6f:dc:
21:ea:95:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:38 2026 by rpki-client