Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: t8d7sKDTRfhKo1vnwPkybXIISW1Rku5FArjhuMs1Ivk=
Subject key identifier: 2F:C8:8E:CD:AB:07:B5:E1:94:F4:C5:18:D2:62:E4:35:DD:ED:5F:3C
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 01A1DD94CDF5484B6ED0DC675B742F772CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 05:01:19 +0000
Manifest this update: Sun 15 Nov 2026 05:01:19 +0000
Manifest next update: Mon 16 Nov 2026 05:01:19 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: ym5NseCIkzHg4TNDl3L8jiJzaPBPKgGvglXdUqZSqJc=)
2: AHnNibYpBfUdvSGboILQ1teAIw4.roa (hash: 42GSIkMZbcrmZ8XMph6d+mXrtH34NIs/JYMf8WUp4vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:cd:f5:48:4b:6e:d0:dc:67:5b:74:2f:77:2c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Nov 15 05:01:19 2026 GMT
Not After : Nov 16 05:01:19 2026 GMT
Subject: CN=2fc88ecdab07b5e194f4c518d262e435dded5f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:2c:49:0f:e5:06:f1:e4:2e:ad:af:d1:64:
83:13:c9:92:44:b0:cb:c2:fc:75:24:42:79:91:b1:
52:7e:d2:dc:17:03:77:f0:9d:c7:59:a0:01:db:b7:
ee:8e:d6:21:ad:25:90:fe:a3:34:33:31:17:d4:e3:
9e:db:57:c0:93:aa:09:df:5f:9f:97:00:e5:08:a8:
99:3f:f5:6e:a4:60:e8:d6:51:de:72:f2:1b:6e:2a:
aa:b6:bd:a7:73:81:74:54:d3:92:05:25:6a:d8:e8:
20:03:89:08:da:66:1f:e6:02:dd:60:e9:38:b9:fb:
a1:21:ec:07:f4:6c:11:da:1b:e3:de:ee:3c:ab:8d:
da:1b:ac:3b:f8:8b:3e:7f:96:cc:35:d3:ab:d0:d6:
87:e7:fe:1b:f7:23:61:ca:ad:fd:41:cb:f7:7f:78:
d8:1b:0b:1d:6f:fb:13:c1:9d:aa:9e:19:f0:02:2f:
c0:33:83:08:14:fb:20:e8:ef:e6:b1:9c:2e:05:f8:
ad:7c:d8:71:28:e2:f4:02:13:1e:3e:c3:da:24:09:
d0:ae:ba:3c:e2:d4:06:19:65:b9:70:52:5d:fc:c2:
b5:24:4c:79:50:31:a1:7d:75:0a:63:af:fc:69:8d:
65:59:61:b1:e2:d9:6a:66:98:bc:0b:b6:e0:8e:31:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C8:8E:CD:AB:07:B5:E1:94:F4:C5:18:D2:62:E4:35:DD:ED:5F:3C
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:15:d3:89:c0:8b:22:ac:25:fb:c9:d6:c8:21:d3:f4:53:37:
ca:e3:49:fa:3a:16:19:4d:bb:09:b4:c7:6d:c1:7e:ba:13:4f:
83:07:b8:41:8a:74:55:99:ef:6b:cf:db:b2:54:e8:d3:45:e9:
70:cd:15:2e:ea:07:9d:f7:b2:ac:ca:e2:ac:72:0c:aa:49:76:
05:d6:62:4f:e4:44:20:30:a9:1e:ac:45:fe:1b:c5:cd:0d:13:
63:b0:21:6c:22:2b:5e:ea:0f:47:f7:61:c6:f2:2a:ba:c4:34:
f8:33:fb:e7:27:3e:55:ac:e3:8e:ed:fb:e6:e5:d3:84:32:12:
28:8d:80:8b:a4:35:6b:f4:43:22:9f:f4:21:31:29:b4:d3:1f:
9a:b4:d7:04:ff:1f:cf:e5:57:d2:7b:94:45:bd:9e:25:65:01:
fd:a9:1e:a8:a9:b9:c2:f8:9c:37:cd:bd:f4:c7:ce:8f:f9:16:
78:cf:0f:f2:b5:95:11:a8:0b:1e:ab:6d:53:df:1f:b5:34:b9:
2a:54:1c:8c:37:18:ff:8e:57:6f:6f:42:83:c8:b9:42:af:8b:
01:46:f1:c0:41:74:a5:75:a1:6b:d4:86:9a:50:5f:b7:21:b6:
0d:87:f7:16:d9:72:74:1e:5f:c2:3d:ea:af:e3:f9:ff:b6:e4:
a6:67:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:02:46 2026 by rpki-client