Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: os7kXegZ/FzP/dfDt5zJzg+xhrgL+1AMwzT1ioUNbgs=
Subject key identifier: ED:B4:80:52:E5:8A:67:DD:CA:D9:70:F0:45:38:6A:E4:05:B8:87:23
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 01A1DEDEA580FA7F20932C6617E1AFF42FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 11:01:35 +0000
Manifest this update: Sun 15 Nov 2026 11:01:35 +0000
Manifest next update: Mon 16 Nov 2026 11:01:35 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: 6V27viydc7if+zmyhtd7nI2oBjvJRdXwlyuezOsN+3c=)
2: HZePOmsjkPsg7dlktNrDrbvkEoQ.roa (hash: EMtZKX87wa385GEwMyBcWWCzgkUjroenf3wknZ0qOr8=)
3: feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa (hash: 8ChsNr7pTk9JhrykIfRkpxl+JlzU+6lvsFJu1WkZIeY=)
4: jbQbuOumCNgoddvSeNQ0EqiLIvk.roa (hash: r2PNx4QtBVQh/b8nKhzHQVcKqAGoHRGsycMInrQsQyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:a5:80:fa:7f:20:93:2c:66:17:e1:af:f4:2f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Nov 15 11:01:35 2026 GMT
Not After : Nov 16 11:01:35 2026 GMT
Subject: CN=edb48052e58a67ddcad970f045386ae405b88723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:e8:04:74:23:e1:4f:60:2b:5a:76:99:47:
24:1c:8b:d3:c5:cc:6a:b7:07:bb:f4:b7:5b:7c:d3:
28:52:f7:aa:7e:dc:d7:d0:52:4d:df:63:38:f3:66:
9f:83:7b:9a:19:09:fc:1a:ae:df:b9:f9:45:c5:4c:
c7:f0:17:0c:a1:17:38:80:13:51:0f:8f:da:23:03:
3a:fc:6d:df:77:55:41:75:54:b7:46:dc:ff:51:c1:
24:c7:78:54:78:a5:ee:4d:95:4e:e5:10:5a:53:bc:
88:ae:b5:a5:38:37:1c:a8:6f:f8:15:92:f9:d9:ec:
4a:b7:20:5a:d2:e2:8d:ae:c3:06:c3:4e:65:ce:33:
72:a1:e0:f0:2d:d3:05:9c:dc:5b:fa:d6:51:7b:23:
bf:5c:aa:3a:4b:66:08:60:e0:c9:39:7c:95:f3:de:
be:57:fc:d4:98:ec:2b:b2:34:8e:35:87:26:75:16:
90:c5:5d:88:f0:68:8b:3e:a1:8c:95:74:80:40:7f:
1d:a6:b3:a7:65:3f:b3:0c:77:84:d1:06:4d:0d:77:
f2:1b:3d:cb:b4:b4:58:3a:14:dd:ca:c4:ea:c1:c2:
e2:ff:a7:75:40:0b:72:97:24:ee:74:62:46:81:67:
03:01:35:f2:5c:be:db:1d:07:fa:9a:34:90:27:ef:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B4:80:52:E5:8A:67:DD:CA:D9:70:F0:45:38:6A:E4:05:B8:87:23
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7e:32:5d:34:ee:8e:af:6f:ca:c0:e0:19:a6:c9:bd:1e:6b:
ac:9b:8a:44:d2:bf:7c:92:ff:f9:6d:b7:c7:40:21:bf:60:bc:
5c:88:60:08:32:64:4c:b7:b4:08:c5:15:2a:12:fc:d7:41:c4:
f8:66:11:54:62:89:66:23:f3:e3:af:ca:b9:28:6f:a6:02:0a:
61:71:85:01:8e:2b:14:7e:0f:4d:d5:ae:41:b3:52:17:2f:c2:
66:24:57:25:9f:2e:54:ea:81:f7:8f:0e:29:83:55:a0:a4:83:
62:95:db:15:cf:75:e2:f5:77:c8:51:b4:20:60:b2:72:c5:d4:
a1:6e:70:fc:cf:70:88:cd:5d:17:2e:d3:4d:f8:b1:bb:7e:d8:
da:54:8e:13:f4:1c:66:98:c6:a6:3d:4b:bf:6c:c7:c5:7e:2b:
62:a9:eb:21:0b:d0:24:94:10:03:c0:a7:43:70:11:1c:d9:60:
c8:b4:23:ad:f3:09:e6:ac:a9:4f:97:36:f4:b3:b0:64:d2:7e:
72:8c:bd:61:b2:83:fe:03:60:a0:45:9b:2a:51:8a:09:66:3e:
74:2e:87:27:cb:24:b5:8c:df:5d:28:f8:ec:97:4c:ac:b2:13:
03:60:2c:7f:a7:70:99:ad:8a:ab:4e:13:dc:88:45:08:d3:07:
9d:3a:6f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3qWA+n8gkyxmF+Gv9C+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YTViMDQyZmU0OGVlYjEyM2JlNTZkYmY5ZThkZGEyMGMx
ZWExMWQwHhcNMjYxMTE1MTEwMTM1WhcNMjYxMTE2MTEwMTM1WjAzMTEwLwYDVQQD
EyhlZGI0ODA1MmU1OGE2N2RkY2FkOTcwZjA0NTM4NmFlNDA1Yjg4NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQnoBHQj4U9gK1p2mUckHIvTxcxq
twe79LdbfNMoUveqftzX0FJN32M482afg3uaGQn8Gq7fuflFxUzH8BcMoRc4gBNR
D4/aIwM6/G3fd1VBdVS3Rtz/UcEkx3hUeKXuTZVO5RBaU7yIrrWlODccqG/4FZL5
2exKtyBa0uKNrsMGw05lzjNyoeDwLdMFnNxb+tZReyO/XKo6S2YIYODJOXyV896+
V/zUmOwrsjSONYcmdRaQxV2I8GiLPqGMlXSAQH8dprOnZT+zDHeE0QZNDXfyGz3L
tLRYOhTdysTqwcLi/6d1QAtylyTudGJGgWcDATXyXL7bHQf6mjSQJ++rtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO20gFLlimfdytlw8EU4auQFuIcjMB8GA1UdIwQY
MBaAFPSlsEL+SO6xI75W2/no3aIMHqEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQt
YjRiMjg0MzdmZTZjLzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQtYjRiMjg0MzdmZTZj
LzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn4yXTTu
jq9vysDgGabJvR5rrJuKRNK/fJL/+W23x0Ahv2C8XIhgCDJkTLe0CMUVKhL810HE
+GYRVGKJZiPz46/KuShvpgIKYXGFAY4rFH4PTdWuQbNSFy/CZiRXJZ8uVOqB948O
KYNVoKSDYpXbFc914vV3yFG0IGCycsXUoW5w/M9wiM1dFy7TTfixu37Y2lSOE/Qc
ZpjGpj1Lv2zHxX4rYqnrIQvQJJQQA8CnQ3ARHNlgyLQjrfMJ5qypT5c29LOwZNJ+
coy9YbKD/gNgoEWbKlGKCWY+dC6HJ8sktYzfXSj47JdMrLITA2Asf6dwma2Kq04T
3IhFCNMHnTpv0A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:12:54 2026 by rpki-client