Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
File: _X5IAbAS8bGZsv0RqqxS13VjRzk.mft (raw, json)
Hash identifier: bcTKCBHWM/WfEUKydJgGLb/JC39GCkY6oB0QOzC3Co4=
Subject key identifier: 2D:79:56:27:77:4A:35:95:C9:AC:E2:2F:AB:F0:89:E2:FF:46:CB:D7
Authority key identifier: FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
Certificate issuer: /CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Certificate serial: 01A1E05F07219E84E1C11AB5CB13EA6F5E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 18:01:26 +0000
Manifest this update: Sun 15 Nov 2026 18:01:26 +0000
Manifest next update: Mon 16 Nov 2026 18:01:26 +0000
Files and hashes: 1: YDVKQbfRYIpm7hR70cFm_r3Bozk.roa (hash: aF7PQA8hwmlUZMld6dK9hesrrO56Rkyyowsvq4iO504=)
2: _X5IAbAS8bGZsv0RqqxS13VjRzk.crl (hash: S9bPJPu/VjoKij+QZ22iS0IG/fXrdkjWn658vBNk0H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:07:21:9e:84:e1:c1:1a:b5:cb:13:ea:6f:5e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Validity
Not Before: Nov 15 18:01:26 2026 GMT
Not After : Nov 16 18:01:26 2026 GMT
Subject: CN=2d795627774a3595c9ace22fabf089e2ff46cbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:f0:49:0e:2c:68:aa:8c:34:ff:a0:69:53:
ff:16:c4:60:97:06:9f:4b:a4:54:17:b2:96:a8:16:
c2:9a:14:2e:70:54:01:1c:59:ec:0e:ce:f0:c0:22:
12:85:93:f4:4c:32:24:1c:33:8f:11:df:6d:12:7b:
dd:25:80:7f:4c:14:32:13:db:fe:df:d6:d8:fa:d4:
25:bb:f1:f8:e0:2c:ba:23:51:19:e4:56:61:8b:9a:
fe:94:0a:68:74:93:a1:d9:f0:dd:71:84:cf:9a:4e:
00:e5:d1:5b:09:4d:ef:1f:4f:9a:4f:93:99:e1:f4:
8d:eb:8f:ad:e4:2b:e5:0f:3b:74:89:7f:31:d7:ad:
f3:ff:f2:09:3a:38:66:9b:b3:a2:54:9e:47:02:59:
f9:20:39:9a:91:5b:83:06:28:8a:a5:04:db:cf:4f:
43:43:ba:34:20:ae:19:0f:31:28:61:c8:b2:1e:6f:
4a:5d:b8:e8:e7:1c:b1:8f:08:f1:55:79:79:0e:50:
85:cf:87:01:5a:10:b2:75:7d:b8:be:71:3e:a2:1a:
aa:9c:00:e3:a1:f9:42:6c:ce:24:92:5a:42:d6:d8:
ff:74:a3:de:85:15:a3:d0:b2:43:34:24:1d:01:64:
9c:e9:b0:43:97:25:35:27:8a:5e:85:d3:51:7f:a3:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:56:27:77:4A:35:95:C9:AC:E2:2F:AB:F0:89:E2:FF:46:CB:D7
X509v3 Authority Key Identifier:
keyid:FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8c:91:c3:54:6d:d9:7e:bc:88:a6:c5:0d:aa:32:b0:8b:1d:
ec:fb:70:b8:3e:aa:73:85:7e:60:48:1c:12:57:3c:b0:17:2d:
9e:cb:f3:5e:4e:e7:83:87:98:48:f4:6f:ef:8f:7b:b9:a4:04:
21:72:c2:8a:b8:ac:00:61:ec:21:e2:d8:84:21:91:45:c8:b9:
1b:4e:98:7e:ae:b5:6a:55:9b:fa:80:76:7a:cd:c9:95:4e:84:
8d:f8:1c:13:35:91:08:9b:87:5a:04:8c:7c:a3:2d:b2:e0:0a:
77:58:7c:70:d3:ee:3a:3b:a1:07:25:23:23:42:a3:90:75:7c:
cd:ea:da:f2:23:d5:f7:54:7e:72:24:84:7e:9d:7e:9f:de:17:
43:8b:bb:11:a2:53:4e:72:49:ca:53:3c:b4:f9:c1:db:58:1c:
a9:29:10:cd:12:b3:fc:9f:5c:8b:c3:74:b4:77:0f:03:ec:8b:
50:46:97:cb:63:62:74:7e:01:be:7c:73:c9:c4:5e:f0:4b:59:
e9:55:3c:f2:5b:77:ab:3f:bc:c9:c7:f8:aa:85:b7:25:56:a3:
26:d7:3e:6b:53:48:71:fe:79:de:5e:b4:db:22:cd:a5:46:28:
c4:21:8e:8f:81:84:58:3d:9e:f2:cb:61:b2:6e:e0:f4:9e:c7:
38:4e:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:44:30 2026 by rpki-client