Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: mrOUndMr2fDSs8BrUG71DolUkhKwlrFWCfI5Li6BLak=
Subject key identifier: 4B:00:AF:43:24:22:3D:E3:88:96:5C:12:EE:8C:C6:41:D7:B1:2E:BE
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 01A1DF833663A8E727435B97CB807E6FFA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 14:01:20 +0000
Manifest this update: Sun 15 Nov 2026 14:01:20 +0000
Manifest next update: Mon 16 Nov 2026 14:01:20 +0000
Files and hashes: 1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=)
2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: wsO/UQiMSI5BhhsTQe4gaQ47CkhmwXXCU2EgeKg3TeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:36:63:a8:e7:27:43:5b:97:cb:80:7e:6f:fa:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Nov 15 14:01:20 2026 GMT
Not After : Nov 16 14:01:20 2026 GMT
Subject: CN=4b00af4324223de388965c12ee8cc641d7b12ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:78:4f:e7:b0:13:25:f3:14:8e:68:77:67:
55:4b:98:be:89:8c:a3:ab:98:75:1c:d9:ee:68:92:
ca:1b:7e:3f:57:02:f0:11:90:eb:d1:b0:34:1b:5b:
63:f2:e6:ac:4d:30:b9:e4:7b:f8:9d:14:1d:71:7a:
e1:68:52:42:9b:db:f6:c2:c0:47:1b:a5:dd:28:cf:
23:c2:3f:ea:d6:ef:fa:db:09:be:eb:a0:3f:bb:ec:
3e:07:c1:98:db:54:3b:1e:5a:2c:49:57:bc:75:9d:
99:81:c6:b0:8c:31:79:66:e0:4f:50:ca:d1:36:97:
3a:a2:af:78:58:52:b8:7e:90:e1:e0:92:43:46:0c:
04:8f:d0:2e:b8:0e:35:fb:2e:95:4b:02:cc:cc:4f:
b3:07:64:c9:e7:d8:3f:31:6e:ab:1b:32:b5:d0:0d:
d8:c5:3b:04:1d:04:58:72:e5:3c:a7:16:9d:db:cd:
3d:fe:27:9d:a8:c2:91:17:e1:64:2f:14:13:d1:8b:
4e:40:28:60:dd:b4:24:a8:28:f7:a5:2a:b5:d8:d0:
15:03:87:af:1b:a7:ef:40:8c:c9:f0:09:78:53:f0:
5b:f1:23:0a:35:01:13:60:5e:a1:4d:39:2d:02:d8:
2d:78:5b:52:e3:82:08:0e:a3:09:f3:ea:fe:9c:eb:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:00:AF:43:24:22:3D:E3:88:96:5C:12:EE:8C:C6:41:D7:B1:2E:BE
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:31:b4:a0:1c:d9:c2:d6:65:c9:e7:f4:00:e5:86:52:97:a4:
65:2b:7b:92:7c:58:52:37:ca:d2:45:f0:2c:c0:6b:28:7c:92:
0b:73:30:b6:6c:44:bb:c3:60:05:fa:33:68:96:97:7a:8d:3a:
17:bd:6e:9d:8f:dd:6c:01:77:e9:02:b2:47:06:08:ac:c9:ac:
1f:30:fe:b8:6f:a8:b6:55:5d:48:e6:0d:e8:51:23:eb:fb:06:
42:1a:c0:34:d9:21:37:15:2b:ff:f4:4b:bf:92:ea:75:c7:30:
e5:66:00:a1:ce:e8:65:53:28:ff:d8:66:ad:50:b8:4d:d4:60:
df:5a:df:af:ff:4a:55:55:67:8b:24:8b:ba:4f:97:28:4a:da:
61:96:d3:48:57:e9:fc:fc:b5:52:ee:a8:26:66:49:a7:3d:c0:
b1:9d:26:c6:82:8d:68:ad:6a:12:4b:96:51:8b:8f:de:d8:51:
b6:70:a9:9b:50:45:29:70:d9:52:ac:1b:c0:d2:3a:fb:70:5c:
9b:22:e3:61:9a:51:ef:1a:bb:e3:67:1f:4e:d2:9c:4e:68:d5:
f4:68:00:65:18:7a:7a:60:7f:b4:dd:5b:f4:62:86:2a:73:5d:
9d:ef:4a:3d:c8:29:60:27:c4:78:ee:f0:8c:2c:08:ee:7d:6c:
12:17:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:54 2026 by rpki-client