Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File: rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier: /F16iYUx26G05mBZUBGCIVeNhQQGfM+y8DeMB9puqYY=
Subject key identifier: 84:D9:B6:0C:DF:20:7E:61:A1:48:C0:4F:B8:17:A8:17:DE:98:0B:05
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 01A1DF833674EDD919038D19B0BE5496DCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 14:01:20 +0000
Manifest this update: Sun 15 Nov 2026 14:01:20 +0000
Manifest next update: Mon 16 Nov 2026 14:01:20 +0000
Files and hashes: 1: 1cRlTVeHuriEMSuZag34rfiSKZQ.roa (hash: OlYfnvQCajHgPtwJVq37KeK/wVE1TX6e1PHAiHTVPas=)
2: 2pok9xJkRmV7G5KjO3Ssd6tFcqw.roa (hash: KoLqQThDszC4VMDHG0N47iFOrNC8BwC1qVShpNw7N6s=)
3: JyOMnJgKMoFcNN43M_f5LI8XErA.roa (hash: SNoMZNzmCYdIoiwDjZbbibJBXJA6CdM7GlaPizZt3KQ=)
4: aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa (hash: FtDK49Ysh1r9A0NZdb70mTg5pImu9NrACPcmS/OHayk=)
5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: Bdzwiv1UYwvXisB/riF5Bv4hZIY4G4WytgAzNa2GnU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:36:74:ed:d9:19:03:8d:19:b0:be:54:96:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Nov 15 14:01:20 2026 GMT
Not After : Nov 16 14:01:20 2026 GMT
Subject: CN=84d9b60cdf207e61a148c04fb817a817de980b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:9f:02:9f:30:41:a8:b3:47:f1:fc:11:e3:
6f:99:c5:c5:ad:0c:4e:7e:c1:98:a5:6a:a2:c9:72:
d5:e3:5c:6b:61:b2:bd:4f:b5:ce:13:95:ea:5a:ec:
54:1a:5f:5c:73:db:cd:5d:f3:0d:a2:28:1f:cd:9e:
a3:fa:94:be:9e:ca:51:eb:81:62:66:66:f5:b2:0a:
e9:39:ff:de:d4:8b:69:10:f1:f6:40:4a:87:ce:09:
e5:bd:63:89:d3:26:9c:23:5e:1a:9b:15:2f:1a:75:
4f:0c:64:01:d8:6f:04:e3:03:2e:29:4c:f9:0b:50:
e9:a0:13:9d:f3:06:32:83:38:ea:87:0a:8b:ba:c5:
df:bd:be:67:37:e9:59:e2:81:da:5b:a6:a4:32:67:
55:12:a2:e5:e8:3b:47:3e:ad:99:2f:6c:89:14:84:
52:b6:a8:cd:5b:da:74:97:f0:54:76:96:f8:93:34:
48:35:8b:7f:91:c1:08:c6:4b:1b:c9:78:c1:af:c2:
3d:85:90:b7:70:7b:5b:e9:9d:76:6c:b4:4b:2f:77:
c4:0b:35:0c:60:be:a5:f7:40:53:8e:98:9a:21:b4:
fa:b4:d0:fc:cf:64:af:ff:0f:db:96:4f:0c:72:ae:
33:50:e0:64:45:35:89:97:cb:36:73:28:f8:85:ac:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D9:B6:0C:DF:20:7E:61:A1:48:C0:4F:B8:17:A8:17:DE:98:0B:05
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2f:d2:70:3e:7d:c7:26:a3:48:ec:36:49:e1:10:21:47:08:
6b:86:27:ba:e5:06:91:b6:bd:d9:ac:9f:66:ce:18:2f:46:89:
b7:0f:6a:14:6e:51:28:ec:0f:0a:19:c5:43:eb:d9:7d:4e:58:
81:e5:e8:ba:78:23:15:ca:52:ce:dc:5f:78:f4:48:05:79:fe:
3c:36:7a:51:d1:ad:03:e3:ee:a7:b2:ad:1f:9e:46:78:d7:cc:
c8:e9:67:f6:c6:db:30:6a:eb:63:ee:70:bb:47:5a:43:75:26:
ec:1e:c9:20:9e:fa:8f:57:00:30:f4:ba:e0:a8:dd:ec:01:11:
15:29:70:ea:20:c5:8a:d6:4b:89:34:38:4a:20:e6:e4:f0:c5:
e5:fe:9f:e6:d0:77:aa:4a:74:81:18:3b:9c:9b:81:62:30:d2:
4b:a4:e2:31:cc:f0:93:98:8a:7b:36:7b:14:d5:dc:a7:58:fa:
4e:fd:fb:d1:35:c9:13:30:f0:5f:2f:56:78:5b:a5:aa:5b:a5:
c4:df:d8:16:98:af:dc:e8:4a:f0:cf:e0:74:53:54:7a:7a:4d:
de:43:ef:ef:ce:69:18:e5:cd:b3:71:2d:a1:74:80:7b:a8:c1:
f3:dd:6a:77:ce:b5:fa:28:0d:de:ca:09:3a:d4:23:d4:60:ff:
33:85:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:15:28 2026 by rpki-client