Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: llrw3Hxb5CczYQS21P6IRxD+uONsxT8s4TFrHA2n1o0=
Subject key identifier: 50:02:3E:8B:FC:E2:26:D4:20:BE:BE:9F:90:93:0B:B5:EC:AE:F9:42
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 01A1DDCBA99A900C56D4F54425D9B3338B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 14D6
Signing time: Sun 15 Nov 2026 06:01:14 +0000
Manifest this update: Sun 15 Nov 2026 06:01:14 +0000
Manifest next update: Mon 16 Nov 2026 06:01:14 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: 99BjKyQfXDWm+Wa3O5cslHaV/jA52Zu0EO97lX3FrNI=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:a9:9a:90:0c:56:d4:f5:44:25:d9:b3:33:8b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Nov 15 06:01:14 2026 GMT
Not After : Nov 16 06:01:14 2026 GMT
Subject: CN=50023e8bfce226d420bebe9f90930bb5ecaef942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:9c:22:8d:34:ef:1a:54:f1:e7:3c:b2:b8:
0b:3d:8b:72:38:30:5a:86:d2:db:76:92:51:34:e0:
fd:6a:aa:14:1c:3f:b6:78:44:8a:10:d2:db:a7:e4:
4c:fc:7e:6a:dd:8e:24:ee:1e:11:a5:d2:59:70:fc:
ea:b6:4f:87:d8:90:5e:f5:a9:18:58:cb:99:77:4f:
4a:ac:c7:ab:a0:15:ae:03:6b:2a:61:a6:76:4c:9c:
1e:37:b7:bf:68:3c:1b:48:5d:b1:2d:5e:ca:dd:85:
39:10:2a:20:8c:34:86:5b:ea:a6:51:e9:e5:3e:ec:
08:7c:3d:f2:df:ed:9d:f7:cd:e2:e3:f5:bf:58:ea:
fb:99:b8:14:2b:bc:11:96:f4:50:f1:f1:47:91:69:
86:20:e1:9a:e4:5a:8a:7d:28:54:d7:e7:11:bc:ff:
16:ec:58:65:3a:93:24:3d:ce:b4:d3:58:6f:1e:cf:
f6:55:99:1d:32:4d:30:25:94:74:7b:c9:d7:ad:17:
b7:3e:0c:6a:50:e7:5a:b0:8b:e2:f8:9f:c8:85:b2:
4d:0b:a2:8f:a9:d4:07:5f:85:28:ee:2f:c3:7c:87:
31:c9:81:76:64:de:ce:3c:19:75:c0:bd:38:45:61:
91:a7:e3:1b:fa:d0:80:fe:b7:b4:2d:9b:e3:08:01:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:02:3E:8B:FC:E2:26:D4:20:BE:BE:9F:90:93:0B:B5:EC:AE:F9:42
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:98:7d:1f:c3:8b:aa:4c:e0:40:94:dc:fa:ae:2f:72:9e:f1:
ea:70:6d:39:e4:5a:69:e6:04:32:b1:64:2a:95:d2:22:75:2f:
bb:4e:0c:e7:4b:40:7b:60:0f:d1:95:32:48:35:63:e0:7b:9b:
ce:7a:bf:9e:7b:d8:71:55:60:61:1b:4d:26:db:29:b1:7b:86:
a7:5f:ff:af:27:c3:00:09:5a:ef:00:5a:04:3f:58:6d:a5:2f:
cd:fc:1a:0a:02:48:d7:6c:1e:02:a3:b0:8d:be:24:8d:9b:98:
91:92:83:78:63:bc:c0:ac:40:a6:7b:d9:70:6d:b8:bb:d4:dc:
7f:cd:43:1b:06:46:3a:f2:73:63:6c:a8:b5:b1:81:f6:1a:50:
45:32:49:55:d7:e3:03:4c:39:63:f8:37:34:3f:c0:2e:14:0f:
2d:5f:cd:51:51:0d:14:93:e9:b5:2f:de:1f:13:3f:a8:05:e6:
2c:6f:7f:7e:eb:d3:c2:e6:92:f9:a4:15:87:ab:c3:fe:85:c2:
33:64:27:64:12:29:9f:08:3b:10:3f:98:85:b6:47:e6:61:db:
f9:e2:b6:c6:a4:e1:91:37:cb:10:70:e6:db:39:99:b5:a2:d0:
b4:fa:49:9f:8c:9f:35:1f:a7:74:88:2e:79:22:1e:d0:5f:53:
2c:90:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:42 2026 by rpki-client