Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
File: f5fak4IA5C6oDDSCgLD2IW2dBFg.mft (raw, json)
Hash identifier: RaHmPzNIr1fKEmnCFNx9v5duz6PEFaP+gmln4NMSzeo=
Subject key identifier: A2:0D:0A:50:98:69:A7:F6:54:AA:74:96:F3:84:B3:5A:5F:F9:75:86
Authority key identifier: 7F:97:DA:93:82:00:E4:2E:A8:0C:34:82:80:B0:F6:21:6D:9D:04:58
Certificate issuer: /CN=7f97da938200e42ea80c348280b0f6216d9d0458
Certificate serial: 01A1C81FF0EB3438E7CCE0274FA293457275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
Manifest number: 3D
Signing time: Wed 11 Nov 2026 01:01:38 +0000
Manifest this update: Wed 11 Nov 2026 01:01:38 +0000
Manifest next update: Thu 12 Nov 2026 01:01:38 +0000
Files and hashes: 1: 7YMqYmtUJ4_Y0Wq2iJ-eIKvQ0NU.roa (hash: Y8RJARbtiP6gnbhn+dWW5386wCY8cNnyD8nuruEw4Jg=)
2: _sh4thc09FjUhaJ-CIlOqE5ACws.asa (hash: gGKwfbzOsuFNMjqj35SauYDnxOtxjx9w9YhsbYtE8Zs=)
3: f5fak4IA5C6oDDSCgLD2IW2dBFg.crl (hash: GRBVHCPDyhCj04fsA9AweAuqVjgyDeR7Ftndy9hNSOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c8:1f:f0:eb:34:38:e7:cc:e0:27:4f:a2:93:45:72:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f97da938200e42ea80c348280b0f6216d9d0458
Validity
Not Before: Nov 11 01:01:38 2026 GMT
Not After : Nov 12 01:01:38 2026 GMT
Subject: CN=a20d0a509869a7f654aa7496f384b35a5ff97586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:85:1b:ce:b0:f0:13:a7:78:74:1f:29:19:
5b:e8:6d:3b:ec:e7:f2:c3:cc:80:3f:5b:62:42:5e:
a1:f5:53:65:1f:57:9e:88:66:57:20:29:d6:32:a6:
d5:e3:55:7a:dc:13:2f:8e:a5:4f:70:94:40:18:f9:
7c:1a:68:56:04:88:5c:20:bd:25:f0:9d:c5:c7:25:
c5:19:61:5f:da:fc:83:9b:40:9e:f2:f0:1f:b6:46:
05:06:8a:cb:2c:d9:d5:d0:da:9f:61:1b:7b:de:b0:
9b:d0:93:60:43:ad:c7:52:3f:1e:1b:86:6b:7f:29:
2a:4b:e8:95:51:f2:c5:26:c5:b1:e1:16:06:04:09:
8b:47:9c:31:03:af:9b:fb:ba:f9:18:eb:ab:e4:5e:
d5:17:3c:c6:eb:38:69:58:c6:c5:d6:4b:b8:4b:ce:
5a:48:90:e8:c4:ac:81:f6:23:bb:98:11:ca:e2:16:
14:95:40:87:f2:f0:85:33:6d:d5:3b:a8:6c:78:86:
27:a1:f4:78:f7:0c:e4:cc:8f:77:5d:5a:db:1b:a9:
1e:df:80:b0:ff:4e:94:5b:6b:1c:28:b1:ef:d6:b9:
c5:ac:f8:e3:8f:fd:33:cf:07:28:54:cd:46:e2:0a:
3e:02:58:c1:61:cc:cd:f0:eb:9e:38:89:f4:76:7f:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0D:0A:50:98:69:A7:F6:54:AA:74:96:F3:84:B3:5A:5F:F9:75:86
X509v3 Authority Key Identifier:
keyid:7F:97:DA:93:82:00:E4:2E:A8:0C:34:82:80:B0:F6:21:6D:9D:04:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:66:35:f7:ff:91:2c:aa:c3:e2:1d:54:2e:a6:cd:9f:32:05:
8a:a6:0f:2b:b7:3b:49:11:17:d1:62:5c:f8:bc:fe:c1:51:84:
ae:ec:d4:a2:eb:4b:77:91:15:26:d1:46:4c:14:85:92:1d:c6:
76:c1:95:9a:c5:da:45:f6:21:4b:91:0b:9b:22:cd:f3:ee:2c:
cd:6f:e4:e4:c0:1d:e8:10:8f:a6:ee:0a:78:3f:1e:52:0f:32:
b2:29:9d:76:38:f0:8e:d4:c5:cc:84:e0:1a:8c:3c:5f:5d:45:
2d:04:1f:dc:2e:d1:f9:9a:76:ba:ca:e3:f7:33:1b:a6:13:fb:
0a:90:e6:eb:26:70:3a:04:39:32:02:07:29:84:67:db:1c:d0:
dd:34:2c:fb:48:6b:06:57:20:da:0e:45:fc:f5:16:14:f0:5e:
b1:4f:8e:c9:10:7e:ff:a8:28:30:47:ff:32:95:72:86:15:5c:
a1:b5:04:89:d3:c8:80:cf:19:b9:ae:d8:a5:4e:e1:a1:af:ca:
e7:ff:af:32:57:b6:1a:eb:5e:b8:89:46:61:57:d5:44:6d:e9:
70:f6:2b:3c:dc:91:ca:0e:85:66:b4:fc:f1:2b:39:d4:ce:b4:
f9:c7:ce:2a:8e:0c:01:8a:9d:42:14:0f:33:53:97:a9:14:a1:
22:b6:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 08:43:16 2026 by rpki-client