Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File: 54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier: sEsjgLHiWdDfDZBbakycPvyrEXcAhin/2LAbtweD0/A=
Subject key identifier: C5:D3:48:56:FC:22:FF:4B:09:27:7F:3C:86:DE:50:4B:3B:2E:63:DA
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 01A1C9D6412E8D0366458624CC5A5D61719F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number: 1A83
Signing time: Wed 11 Nov 2026 09:00:24 +0000
Manifest this update: Wed 11 Nov 2026 09:00:24 +0000
Manifest next update: Thu 12 Nov 2026 09:00:24 +0000
Files and hashes: 1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: Ea+RMsgPA4XwrJ2RoNsXVW0BN7xRRy/AB63pn9h7Q6c=)
2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
4: Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa (hash: ipV86oOkjGzli6pzk5Ar8vQYROabIbZnZILhX3gNwHo=)
5: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
6: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
7: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
8: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:d6:41:2e:8d:03:66:45:86:24:cc:5a:5d:61:71:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Nov 11 09:00:24 2026 GMT
Not After : Nov 12 09:00:24 2026 GMT
Subject: CN=c5d34856fc22ff4b09277f3c86de504b3b2e63da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:e5:30:e0:d8:66:b8:41:7e:89:02:d2:65:
47:8a:cb:c4:11:77:73:2f:31:88:f5:11:36:21:39:
20:81:7b:d3:5a:f4:4d:16:49:64:67:a9:fc:23:0b:
43:b0:dc:45:cd:f2:87:b1:14:a1:a3:ee:8e:ac:4d:
29:09:79:ea:58:a4:3d:af:4b:5a:6f:50:7d:63:02:
7a:b9:22:4f:97:83:49:5a:cd:47:f3:1e:f9:aa:f0:
da:b2:0a:1b:ad:3a:00:40:97:62:d1:df:3d:6f:8f:
7f:03:36:7a:ab:98:a6:8e:d3:c8:7e:5f:0a:61:8e:
5b:4d:4b:04:8a:fc:c2:6b:28:e3:d9:65:86:0c:ef:
01:9e:4f:53:c4:0e:c4:9e:c5:35:a9:c2:a7:10:76:
f5:61:56:69:c7:62:1c:ab:c1:9a:ce:cf:82:26:aa:
1f:ee:2a:fe:69:d9:64:52:7a:b6:08:ae:2f:96:b6:
02:1d:44:54:da:b9:84:92:d8:57:aa:7d:7d:2d:0b:
97:fb:03:ef:98:fe:d1:fb:c0:37:4b:9d:a1:6c:ef:
49:f3:5a:e0:4f:dd:99:47:92:65:3a:71:b8:b3:20:
c3:5b:f3:55:52:11:48:af:91:12:a9:55:07:3f:09:
d4:d1:38:d0:91:56:4d:08:0e:b7:dc:ef:65:99:ff:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D3:48:56:FC:22:FF:4B:09:27:7F:3C:86:DE:50:4B:3B:2E:63:DA
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fc:27:f5:ec:fd:29:eb:04:e0:25:89:8d:b5:0e:97:42:1b:
c1:51:8d:45:60:51:8a:d5:48:7f:7e:6b:eb:36:6a:64:b1:b5:
ac:7e:bb:be:c0:a8:59:d5:e8:35:e9:d7:0b:2e:0e:0b:5e:bd:
81:b9:87:3d:96:b4:0b:2d:a3:aa:61:f7:96:5b:ea:f9:d5:1f:
32:25:4b:5d:4e:a3:df:d6:3d:84:a6:bd:f6:a9:97:70:a7:50:
1e:bc:44:ca:d5:21:1f:f5:7b:c1:89:92:2d:66:44:5b:ba:ae:
25:01:eb:ee:bb:26:9f:f2:f4:cb:65:0a:f1:dd:0e:4a:cb:f1:
94:69:df:1f:6a:de:b9:73:58:ed:ba:14:3b:04:af:2d:0b:ca:
89:17:18:55:22:b7:81:a2:24:f5:e9:75:1d:c7:92:b6:ea:fe:
ba:d6:e3:8f:ce:64:99:4b:68:fe:5c:1e:78:d3:48:bd:03:30:
9b:26:63:51:e3:f3:eb:4e:c3:c2:cc:70:e6:74:c7:2d:76:f8:
9b:5e:d4:6e:c0:42:29:ca:7f:6c:1d:2e:d3:94:99:58:93:ca:
4d:7c:18:22:97:36:ca:96:38:f7:b5:9a:56:cc:c6:f4:d8:43:
02:b8:50:75:62:2f:28:29:4a:6d:e9:ca:74:de:a3:40:dc:07:
e9:f9:e3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 15:44:21 2026 by rpki-client