Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: ZB68yjupzkYBcrbjdU0ECUGV4KW6SjEgcguvelg8ACU=
Subject key identifier: 12:93:0D:D3:76:33:43:6E:89:17:64:F5:AC:4D:83:5A:6A:F6:19:CF
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 01A1DE39E2D35D0C82846E19332E86A101CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 08:01:37 +0000
Manifest this update: Sun 15 Nov 2026 08:01:37 +0000
Manifest next update: Mon 16 Nov 2026 08:01:37 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: N/Zy1gJTW6mrkvoM23pwmewmWjs0w9sF3BziflnI8T4=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:e2:d3:5d:0c:82:84:6e:19:33:2e:86:a1:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Nov 15 08:01:37 2026 GMT
Not After : Nov 16 08:01:37 2026 GMT
Subject: CN=12930dd37633436e891764f5ac4d835a6af619cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:50:7b:ed:41:b9:7c:bd:7e:94:d1:fb:6d:
8f:25:06:94:c6:2e:f1:b0:95:4e:ec:e4:c8:65:bd:
2e:53:af:7f:38:78:dc:90:39:6d:f9:d5:75:dd:5f:
ea:b5:2e:a1:d1:d5:37:24:c6:94:fd:05:06:6e:81:
c6:d8:02:37:c7:f4:6c:21:c8:43:6e:7c:27:9f:fb:
af:5e:a6:6c:a9:9c:d1:64:81:96:60:b2:04:3d:14:
83:be:87:c8:2d:a0:54:33:1f:e6:8b:b9:d7:8a:2e:
27:6d:b9:d7:57:48:00:fa:51:6d:a7:c3:fd:9d:13:
22:52:4e:36:4c:68:52:8a:e1:f2:6e:98:19:ba:f7:
38:cf:37:94:c6:d2:e5:ef:03:1e:de:30:0a:23:f0:
e0:3f:c2:c5:b2:e8:40:82:0d:dc:37:d5:49:bb:6a:
a7:03:d1:ff:ad:b5:5f:01:6a:e1:44:3f:54:60:49:
88:89:04:8e:ac:2b:79:57:73:84:81:03:b0:38:67:
61:f4:31:27:45:b4:70:54:a1:fd:16:08:c7:43:af:
d6:fc:61:86:0a:36:0f:c7:18:e6:26:d3:11:43:d2:
e4:c8:52:0d:06:77:b4:aa:38:4f:49:94:bd:95:a3:
9d:ee:f4:fc:f5:71:be:81:0a:24:80:6c:29:21:00:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:0D:D3:76:33:43:6E:89:17:64:F5:AC:4D:83:5A:6A:F6:19:CF
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:51:fb:a1:71:10:bc:06:a8:2c:2b:18:05:b2:6a:44:3f:3b:
74:02:81:c6:7e:9b:ab:2b:f3:82:78:a7:03:b1:4e:da:36:65:
b6:3e:2e:c1:72:b1:8f:f2:b0:4e:50:cf:72:5d:85:4f:f7:bf:
de:e4:58:6a:c7:1b:0d:31:dc:42:e5:e1:13:2d:b2:49:73:89:
8a:f6:43:65:e5:9d:cf:03:79:7b:a3:d4:65:02:e9:8c:cb:39:
92:60:81:46:ed:c2:09:bb:f2:fd:14:70:d4:c6:32:03:1f:11:
ef:90:77:ca:2e:b9:e1:63:58:f5:f9:23:a7:cc:19:97:bf:16:
2d:90:6e:85:df:be:9c:9b:f3:88:db:c1:7d:6a:13:62:9a:1e:
3e:6c:be:aa:94:94:cd:98:3d:af:a4:71:7c:96:4c:3d:d3:b7:
18:55:73:fb:2f:0a:fb:36:4a:7b:b4:7f:f6:f5:11:8b:e4:5b:
3f:10:18:a0:52:e9:84:b4:2f:76:00:40:3d:e6:b8:b9:37:9c:
bc:0d:54:c2:aa:bd:6e:3f:ea:f3:37:4d:f9:b4:0e:38:cb:04:
b0:d5:b2:4e:23:b5:64:4a:92:c4:d1:ae:aa:4e:17:fc:b1:73:
28:f5:f6:05:81:2e:24:5b:ac:9a:47:f6:39:18:7a:d0:eb:60:
f9:f5:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:07:46 2026 by rpki-client