Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: jg+hrKv6GgutDk1MWhIwC3JdTyXa8veEnxQlH1G9N7I=
Subject key identifier: A5:E2:13:3F:AC:33:89:30:CE:AB:AB:EA:65:0B:82:A1:73:C6:0A:A4
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 01A1DB6F833BEE6F914F66557D6C9A72D5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 1AF7
Signing time: Sat 14 Nov 2026 19:01:20 +0000
Manifest this update: Sat 14 Nov 2026 19:01:20 +0000
Manifest next update: Sun 15 Nov 2026 19:01:20 +0000
Files and hashes: 1: FzaSctWTm436xTaHu7cLIoR3zuI.roa (hash: ZWQNCmBRzSOXikzbY8uxPHONXN2ergkv72vrvK6pGEg=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: 2XlhdcwBoC/M5Ob7rxHzVdWf0UTb+sr+lLkvkuRD8wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:83:3b:ee:6f:91:4f:66:55:7d:6c:9a:72:d5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Nov 14 19:01:20 2026 GMT
Not After : Nov 15 19:01:20 2026 GMT
Subject: CN=a5e2133fac338930ceababea650b82a173c60aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:bf:10:0d:ef:11:7a:a5:81:f7:18:18:1b:
77:ae:1a:4b:cb:cf:a2:8b:67:d6:d3:76:f0:ed:da:
5c:79:c1:b2:ae:ab:c0:10:c6:db:7f:c1:25:39:61:
13:08:69:2c:83:a9:82:0e:d0:13:16:75:29:96:f9:
15:5c:2c:5a:b9:06:9e:04:bb:c6:dd:3b:98:33:f6:
a1:95:15:ca:6d:30:97:22:7c:b6:68:91:ee:96:3a:
b7:1c:53:6c:ad:a1:74:ea:f6:e8:8b:c5:3d:ef:f2:
33:b6:c5:8b:00:b2:74:65:8d:69:2e:80:81:6b:73:
b1:da:6d:24:1c:00:71:45:ed:9c:cf:a1:31:8b:08:
51:87:ab:bb:e1:6a:83:53:f0:fb:a1:10:db:12:65:
d1:aa:23:1c:6d:99:cf:7c:36:07:5f:b2:52:0f:42:
3e:df:24:a4:5c:ba:2f:05:98:43:4d:15:05:0e:b6:
97:15:ce:80:81:3b:ed:c2:3a:da:e7:76:33:b3:98:
6b:ff:7d:38:e8:1a:2d:28:27:f7:f5:5d:b4:85:82:
ef:5c:5c:2b:f0:25:75:15:b7:18:96:27:63:d7:f7:
72:e4:17:3f:19:0e:3e:28:5e:2f:16:d2:df:7b:02:
30:96:e6:5b:44:2a:91:1c:8e:e2:2b:6a:35:c0:bf:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E2:13:3F:AC:33:89:30:CE:AB:AB:EA:65:0B:82:A1:73:C6:0A:A4
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:74:86:ab:ac:25:0d:61:78:e8:0b:45:a2:60:69:2a:7f:10:
57:9a:d7:70:0e:03:2f:00:92:1a:de:39:f6:e4:21:8e:5c:e7:
e5:d3:38:b3:44:34:33:8f:a9:e7:0e:cc:79:f6:94:87:60:4a:
81:4e:5a:39:f8:b3:85:fe:ab:2e:79:eb:fc:7a:6a:16:d4:fc:
00:b0:a9:f6:7e:39:dc:8a:d5:13:3b:c4:b0:f3:4a:91:9e:3d:
2d:c7:8e:03:2c:9d:b7:05:94:45:c8:9e:2c:75:11:0e:13:14:
0d:a8:f5:36:28:09:32:b3:5b:5a:82:ed:2b:9f:d6:95:08:9e:
d6:15:ec:93:b6:61:13:ae:f8:57:f5:ee:c8:f4:6d:0d:c7:a8:
48:1e:6c:b5:3e:48:06:c5:a6:60:98:21:fb:c4:37:4f:55:e1:
28:c8:e1:b3:25:28:43:6f:09:9f:92:c9:dd:3c:1a:b8:f2:a3:
be:f9:af:ee:2b:2d:d0:b8:1d:44:d2:be:0a:87:8c:82:05:bf:
66:97:01:71:ea:18:b0:80:81:f9:6c:b4:ba:e8:6c:55:c5:95:
03:b5:ca:d3:46:47:15:fd:5b:81:35:2d:88:9a:cf:42:94:91:
5a:01:6c:2d:e9:e3:66:c1:7a:92:e8:72:d0:30:82:e4:0d:cd:
f0:23:4a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:24:15 2026 by rpki-client