Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: BAWDzBAKyoPxPi9VfeRaBwYroFv6QatlwWRstKi8Q3o=
Subject key identifier: 43:EF:DF:E4:C3:7E:27:EC:78:85:5E:1A:24:80:D3:F3:65:B8:83:C4
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 01A13FDE81EDBF88627CAE2D981770156A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 1918
Signing time: Thu 15 Oct 2026 14:01:49 +0000
Manifest this update: Thu 15 Oct 2026 14:01:49 +0000
Manifest next update: Fri 16 Oct 2026 14:01:49 +0000
Files and hashes: 1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: cwS6Y5nvVPdtHIseY7UXc1f/fKatCh/M2zYt1e1InFo=)
2: Hp_WUbOhn2zAoO7EHoGoBET1CVY.roa (hash: f3R4RclAY5m9pnFbK+tbWViF6ZaULHEZrjUnSSfF1J0=)
3: KE6iJA-hn1b3IWFsrJuzBxcx2q4.roa (hash: wz9KjacGN75RHVU7rEROAQLIesngE9DXITSuM+/w2G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:81:ed:bf:88:62:7c:ae:2d:98:17:70:15:6a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Oct 15 14:01:49 2026 GMT
Not After : Oct 16 14:01:49 2026 GMT
Subject: CN=43efdfe4c37e27ec78855e1a2480d3f365b883c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:fb:b4:20:3a:b2:b2:37:8f:57:ea:c6:4e:
6f:f0:d2:20:54:4d:86:ba:bc:1f:32:56:0e:ed:8a:
8a:c1:9f:d3:a5:95:ec:39:9d:97:ea:bb:c0:07:48:
d0:cb:01:9f:f1:30:93:d4:8b:93:d3:bc:e5:3e:0e:
ed:2c:3d:d3:0a:af:21:c2:02:3e:57:34:64:d3:79:
0b:20:62:ac:b7:3a:49:8d:5e:46:42:89:55:3c:e2:
99:f0:2b:bf:e7:4e:b7:7c:9c:2d:96:37:00:0b:12:
eb:5d:4f:6a:78:28:03:3d:dd:57:31:3b:e0:55:42:
4e:3b:49:fc:00:ce:24:6b:b1:76:e6:39:b0:90:07:
cf:bf:33:b7:f7:ad:45:6f:12:7b:cb:89:6d:fd:6b:
2c:fc:d3:8b:7e:7f:d0:4f:91:29:55:cf:c7:19:3f:
20:80:71:95:dd:1a:af:22:43:00:6a:57:2e:22:03:
f1:d2:c8:b8:00:4c:87:37:46:74:14:2c:ab:b5:39:
93:2e:43:9c:9f:b3:4a:5c:fe:fc:6c:84:ad:a7:01:
08:93:41:7c:a9:4d:f1:d9:18:d9:35:df:d7:e7:20:
da:2e:5c:fd:25:07:85:5f:58:2c:28:e9:e2:dd:42:
d8:9a:76:be:89:5d:7a:ba:c7:7d:dc:fc:70:24:45:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EF:DF:E4:C3:7E:27:EC:78:85:5E:1A:24:80:D3:F3:65:B8:83:C4
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b3:ad:fa:dd:c0:ee:e7:a6:a5:c8:01:55:ee:fa:5b:ac:d5:
08:b3:24:af:fd:5b:d2:20:a8:7a:54:b2:4b:5d:4c:27:cf:79:
05:ad:38:76:b1:12:16:fe:28:90:43:38:bd:f5:50:5e:8c:b2:
9a:e4:08:a9:e5:43:4a:ad:7d:0a:ae:69:7c:fb:c7:ad:8d:d2:
80:f4:52:d3:ba:59:44:ea:e8:1a:0c:fc:37:06:a6:50:65:2b:
7a:66:72:c3:76:cf:ab:dc:d6:71:7d:2e:e4:6f:fe:30:7f:b1:
e3:d1:34:50:38:e8:f4:f3:3d:db:15:05:79:76:fb:a3:51:36:
50:e4:e7:83:26:e9:cc:b0:e4:cd:92:89:b3:c5:a3:01:70:ac:
cf:b3:6f:62:f5:ca:eb:6c:66:ec:cc:40:69:fb:95:00:71:45:
a6:ed:92:b5:b4:71:46:85:3d:1c:c3:f7:6a:ad:f7:30:29:26:
db:ce:11:a6:7e:db:15:7c:db:4b:82:7c:d8:56:2a:f6:72:a1:
d6:34:b5:61:95:f0:9b:09:06:98:c8:ea:a9:93:cf:fd:fd:e3:
4c:7e:61:84:7a:df:a0:0d:22:1e:5f:10:6b:65:4c:6b:57:bb:
e0:74:68:45:b7:46:0c:40:93:1b:af:d7:9c:2c:16:3d:4c:65:
f3:97:d5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/3oHtv4hifK4tmBdwFWqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MWU2Nzk5YmM1Y2EyODVhMzc2MzcyZjBiNjM0NWRmZmM4
N2I4YzAwHhcNMjYxMDE1MTQwMTQ5WhcNMjYxMDE2MTQwMTQ5WjAzMTEwLwYDVQQD
Eyg0M2VmZGZlNGMzN2UyN2VjNzg4NTVlMWEyNDgwZDNmMzY1Yjg4M2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgz7tCA6srI3j1fqxk5v8NIgVE2G
urwfMlYO7YqKwZ/TpZXsOZ2X6rvAB0jQywGf8TCT1IuT07zlPg7tLD3TCq8hwgI+
VzRk03kLIGKstzpJjV5GQolVPOKZ8Cu/5063fJwtljcACxLrXU9qeCgDPd1XMTvg
VUJOO0n8AM4ka7F25jmwkAfPvzO3961FbxJ7y4lt/Wss/NOLfn/QT5EpVc/HGT8g
gHGV3RqvIkMAalcuIgPx0si4AEyHN0Z0FCyrtTmTLkOcn7NKXP78bIStpwEIk0F8
qU3x2RjZNd/X5yDaLlz9JQeFX1gsKOni3ULYmna+iV16usd93PxwJEUOnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPv3+TDfifseIVeGiSA0/NluIPEMB8GA1UdIwQY
MBaAFNUeZ5m8XKKFo3Y3LwtjRd/8h7jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEt
OWNhMjUxYzA1NDhiLzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mZTM2YWEtYTZhZS00MDYzLWIyZmEtOWNhMjUxYzA1NDhi
LzEvMVI1bm1ieGNvb1dqZGpjdkMyTkYzX3lIdU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLOt+t3A
7uempcgBVe76W6zVCLMkr/1b0iCoelSyS11MJ895Ba04drESFv4okEM4vfVQXoyy
muQIqeVDSq19Cq5pfPvHrY3SgPRS07pZROroGgz8NwamUGUremZyw3bPq9zWcX0u
5G/+MH+x49E0UDjo9PM92xUFeXb7o1E2UOTngybpzLDkzZKJs8WjAXCsz7NvYvXK
62xm7MxAafuVAHFFpu2StbRxRoU9HMP3aq33MCkm284Rpn7bFXzbS4J82FYq9nKh
1jS1YZXwmwkGmMjqqZPP/f3jTH5hhHrfoA0iHl8Qa2VMa1e74HRoRbdGDECTG6/X
nCwWPUxl85fVMg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 16:21:51 2026 by rpki-client