Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: uay9/aSuDnmUXrHPltrSOGjqpcx2uMfCTA2iZ6UQryg=
Subject key identifier: 38:1B:32:04:D0:2E:FB:69:9E:C5:B6:C1:62:FD:F9:A5:3D:F9:4F:43
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 01A1DE02A70F72E0DE44E686FB5FC55ACE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 07:01:18 +0000
Manifest this update: Sun 15 Nov 2026 07:01:18 +0000
Manifest next update: Mon 16 Nov 2026 07:01:18 +0000
Files and hashes: 1: Yo_sQDnlWVAHdBUjfYUlBGrEGAk.roa (hash: UtSlgr8dKlU2oiUU/YuYyiNrWIQBlqU7VjuzqeMr5iU=)
2: Yohrn8HNTtjhGA9URKUO2_Mby_U.roa (hash: /XhETKRi5W1obuv4QEHTmdciLbp0sxJedBeaO8RsKsM=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: gBKAjClQyCdm36Gvl1N2hacvGlQNFCB1YnzWya5G+rY=)
4: pqiBFTplBLtHWoMHzRforQTq8dI.roa (hash: wl+v61veOlULrNd8VjKMUyPIgjxBb6XbU3q/woMIXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:a7:0f:72:e0:de:44:e6:86:fb:5f:c5:5a:ce:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Nov 15 07:01:18 2026 GMT
Not After : Nov 16 07:01:18 2026 GMT
Subject: CN=381b3204d02efb699ec5b6c162fdf9a53df94f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:5d:6b:5c:32:de:7a:7f:54:cc:62:69:ea:
98:5a:81:bf:6b:c3:e4:08:54:d9:e4:c2:20:34:1f:
fe:49:35:3c:72:19:04:b7:89:2c:27:b4:4e:cb:a2:
cf:d7:98:83:23:a1:69:b8:6e:9f:3b:26:41:64:70:
a6:8f:93:eb:fb:cb:4f:bc:3d:27:aa:2a:a0:93:2d:
49:13:33:8f:42:42:84:76:82:2e:cc:ed:4e:ef:32:
fe:7e:dd:c6:68:8c:a6:72:ee:77:a9:54:83:5e:03:
19:43:64:0f:52:82:7c:86:11:a2:7b:08:72:7d:25:
7d:cc:c6:56:49:57:f2:2e:75:99:e6:00:32:01:b5:
e4:a5:69:75:e1:e5:c8:e3:a1:e6:80:d8:99:68:8a:
39:78:ef:46:d5:da:45:43:51:ea:6f:08:b7:38:f7:
69:ab:99:0d:33:77:43:a7:7c:50:9a:7b:e5:a8:99:
96:5c:04:c9:d4:c6:54:b8:7b:ce:0c:fc:2e:ad:01:
c6:09:05:e8:05:c5:34:d6:53:f9:80:1c:50:ab:d3:
ad:3e:1d:fc:3a:f8:fe:5c:3e:69:42:d8:bd:5d:8c:
1d:7d:15:92:85:b1:6d:23:f2:c2:f0:16:d5:bf:49:
21:2d:ea:98:80:4b:3d:eb:96:20:84:a9:c9:9f:20:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:32:04:D0:2E:FB:69:9E:C5:B6:C1:62:FD:F9:A5:3D:F9:4F:43
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1f:8b:fe:56:1a:3d:9b:59:8d:82:c1:46:89:0c:8d:f7:6e:
3b:96:b4:6c:5d:3a:10:09:aa:0e:6b:72:39:ed:6d:1c:14:a1:
ca:21:17:ac:14:e0:dc:3a:89:b2:3a:55:3e:a2:14:0d:4b:7a:
17:d0:31:84:bb:bf:ca:89:2b:7e:07:4b:08:ee:6c:ab:32:a9:
58:e3:44:34:45:d0:28:0c:4f:8e:f3:2f:db:83:29:e9:aa:9f:
89:42:4e:3d:78:a3:10:3b:52:76:10:06:28:86:d9:85:23:d8:
2d:30:e0:57:2a:90:dc:92:42:3d:12:a8:e2:1b:42:d4:38:68:
59:c8:4f:70:0b:b2:66:50:b9:19:90:67:05:ea:78:56:07:ff:
db:3d:e0:8e:39:58:8f:b6:a1:c6:54:e3:6d:3f:99:eb:e5:83:
61:12:67:c7:58:18:52:b0:22:d6:91:f0:2a:2e:66:7e:9b:64:
16:08:26:56:6d:e6:a7:61:70:df:aa:c9:48:18:39:25:55:fe:
0d:bc:ed:0c:0d:2d:35:74:81:06:ef:9b:cf:d9:62:cd:c9:b1:
1c:b4:f2:b2:47:96:76:37:23:01:11:dd:7d:0c:9d:c1:13:20:
db:e4:de:24:7a:0d:86:d2:8f:6a:14:0a:8d:2d:03:49:3d:8d:
01:bf:64:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:18:19 2026 by rpki-client