Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: eskoeArG1EABmOtOVaa7N23yVgw3oapVxB1eABWcp5Q=
Subject key identifier: CE:AE:04:72:85:19:66:1C:73:BE:39:BF:00:D1:38:71:03:0A:C9:68
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 01A1DEDEE29F16E67F9FB08F444CF8A11F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0F23
Signing time: Sun 15 Nov 2026 11:01:51 +0000
Manifest this update: Sun 15 Nov 2026 11:01:51 +0000
Manifest next update: Mon 16 Nov 2026 11:01:51 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: BjC6HezaDoxWEzFKLOwfTSaTutc8D7D30qg4TGg4JbU=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:e2:9f:16:e6:7f:9f:b0:8f:44:4c:f8:a1:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Nov 15 11:01:51 2026 GMT
Not After : Nov 16 11:01:51 2026 GMT
Subject: CN=ceae04728519661c73be39bf00d13871030ac968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d5:d6:7c:19:95:26:b7:30:ad:7b:0c:be:ae:
cc:2c:a9:55:64:23:5d:9c:af:79:00:c4:53:ff:15:
f1:17:0a:01:5c:b0:f5:f2:5d:02:d4:27:93:64:1c:
21:66:83:56:ed:2b:fd:d8:66:ed:f9:98:c7:b5:22:
9d:32:5a:81:50:34:47:86:03:1a:23:fe:68:27:bf:
06:ca:e7:fe:0e:e8:30:d9:d1:cf:30:6f:f9:4a:81:
b2:71:89:c8:46:e2:be:ad:1c:e6:61:e6:40:12:12:
ef:4b:11:24:dc:e9:1d:17:d9:e0:26:6e:34:c0:70:
ac:b3:85:ea:bf:61:56:f8:ef:bf:86:cd:62:47:0f:
b8:c4:8a:3d:09:1c:3d:94:75:7c:7f:eb:54:25:b3:
d0:7b:3c:d5:ec:ca:9f:f2:94:4f:3e:9b:94:e4:f5:
42:ef:d0:db:f5:4d:05:ac:57:4d:88:55:a4:48:9e:
ee:b1:09:72:d9:58:cd:67:b4:b2:85:99:14:50:d3:
d9:2c:43:15:88:b7:5b:25:fb:ac:e2:a2:ae:a3:4e:
e6:de:6f:16:52:13:e7:f2:55:c2:33:00:5b:c1:5c:
4d:c2:e0:8c:4e:63:0f:56:7e:92:5b:c0:fe:e1:f8:
82:e8:75:f5:fa:49:7f:07:fd:80:2c:72:b9:ef:2c:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:04:72:85:19:66:1C:73:BE:39:BF:00:D1:38:71:03:0A:C9:68
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cf:fe:13:b6:fb:24:15:03:33:3a:09:84:ea:37:de:0a:d7:
12:69:1b:08:99:ea:f4:05:88:06:36:b5:21:3f:93:c9:f8:a1:
30:70:77:f5:3c:ff:fa:32:97:66:c5:5a:dc:08:39:fe:0b:93:
19:20:a0:53:b6:27:2a:ff:ae:91:6c:fc:40:c4:ba:e4:d0:f3:
c9:9d:9d:f5:8b:4d:6a:17:8d:1a:78:20:0a:a1:95:27:2c:86:
1a:03:26:1e:23:95:3b:75:8c:26:a9:20:62:5a:e0:4a:ff:01:
00:d4:53:5a:2a:77:60:c7:57:d8:90:e6:84:34:21:38:97:b5:
06:8f:43:a7:30:01:d0:62:24:de:58:9c:d3:c4:94:b4:01:af:
68:25:c4:c5:97:11:2f:de:f5:e1:ae:01:01:26:f1:f7:6b:fa:
ab:7b:e9:4d:19:2c:4a:a2:e4:98:1a:49:57:30:bc:9b:6f:a1:
03:15:eb:1b:a7:9b:a6:c0:46:50:2c:c0:77:69:d3:07:ea:33:
0b:16:1d:c2:e3:0b:d8:42:9d:2d:28:79:02:b8:72:0d:cf:fb:
ff:9b:a1:db:5b:18:11:34:83:c4:cb:78:c5:a2:51:04:aa:60:
ff:59:3d:ba:e1:98:b2:e1:d5:e4:fd:6e:3a:05:84:cd:33:f8:
4f:2e:a0:12
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHe3uKfFuZ/n7CPREz4oR8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNGU0MDUzNTlhMjEzMTcwOGZjMDI0MzhkNDcyNTY4ZTJj
MDM0NzAwHhcNMjYxMTE1MTEwMTUxWhcNMjYxMTE2MTEwMTUxWjAzMTEwLwYDVQQD
EyhjZWFlMDQ3Mjg1MTk2NjFjNzNiZTM5YmYwMGQxMzg3MTAzMGFjOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NXWfBmVJrcwrXsMvq7MLKlVZCNd
nK95AMRT/xXxFwoBXLD18l0C1CeTZBwhZoNW7Sv92Gbt+ZjHtSKdMlqBUDRHhgMa
I/5oJ78Gyuf+Dugw2dHPMG/5SoGycYnIRuK+rRzmYeZAEhLvSxEk3OkdF9ngJm40
wHCss4Xqv2FW+O+/hs1iRw+4xIo9CRw9lHV8f+tUJbPQezzV7Mqf8pRPPpuU5PVC
79Db9U0FrFdNiFWkSJ7usQly2VjNZ7SyhZkUUNPZLEMViLdbJfus4qKuo07m3m8W
UhPn8lXCMwBbwVxNwuCMTmMPVn6SW8D+4fiC6HX1+kl/B/2ALHK57yzWmQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM6uBHKFGWYcc745vwDROHEDCsloMB8GA1UdIwQY
MBaAFPpOQFNZohMXCPwCQ41HJWjiwDRwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rNUFVMW1pRXhjSV9BSkRqVWNsYU9MQU5IQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0
LWI4MThmYWVjYjcxNy8xLzEtazVBVTFtaUV4Y0lfQUpEalVjbGFPTEFOSEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA3LzZhM2YzNS0zNWI4LTQ5ZTAtOWY0NC1iODE4ZmFlY2I3
MTcvMS8xLWs1QVUxbWlFeGNJX0FKRGpVY2xhT0xBTkhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8/+
E7b7JBUDMzoJhOo33grXEmkbCJnq9AWIBja1IT+TyfihMHB39Tz/+jKXZsVa3Ag5
/guTGSCgU7YnKv+ukWz8QMS65NDzyZ2d9YtNaheNGnggCqGVJyyGGgMmHiOVO3WM
JqkgYlrgSv8BANRTWip3YMdX2JDmhDQhOJe1Bo9DpzAB0GIk3lic08SUtAGvaCXE
xZcRL9714a4BASbx92v6q3vpTRksSqLkmBpJVzC8m2+hAxXrG6ebpsBGUCzAd2nT
B+ozCxYdwuML2EKdLSh5ArhyDc/7/5uh21sYETSDxMt4xaJRBKpg/1k9uuGYsuHV
5P1uOgWEzTP4Ty6gEg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:44:26 2026 by rpki-client