Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File: _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier: rMauGC5YIriWA0VVfHudRY6z6nrLguifh3Q0IvAlyp0=
Subject key identifier: 28:66:75:DF:9C:AB:43:DF:D8:DD:F3:C4:7E:B6:95:03:90:2D:49:27
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 01A1DC81CA35193C475702B5A7A17675FDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number: 18B6
Signing time: Sun 15 Nov 2026 00:00:55 +0000
Manifest this update: Sun 15 Nov 2026 00:00:55 +0000
Manifest next update: Mon 16 Nov 2026 00:00:55 +0000
Files and hashes: 1: 1-jE_yC4NiEpx0K3S7PXk8AXKW_Y.roa (hash: 8052VqgxoQXtGMoT/9mInb/P+q/GQzoHQcwJ95n8TXs=)
2: Phjh0r_ad13WTH6l1p80FF4KGew.roa (hash: u3OCSo+Ax8+S8/eXW7W/E7Cm5GtFphsGlM/+L/E8D18=)
3: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: dbcBw7BK9Nv5BaAQQmufOdQyyIMeVv/wXaStpw1FsKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:81:ca:35:19:3c:47:57:02:b5:a7:a1:76:75:fd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Nov 15 00:00:55 2026 GMT
Not After : Nov 16 00:00:55 2026 GMT
Subject: CN=286675df9cab43dfd8ddf3c47eb69503902d4927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:b3:21:13:f0:9e:a2:29:a7:3a:ed:66:cf:
e8:97:65:02:61:3d:42:b8:7f:89:64:9b:19:81:5e:
d3:f1:01:f4:dc:8b:43:ca:14:76:54:a7:6a:36:fd:
d3:22:c4:8b:34:14:5e:5d:ef:d8:d0:42:06:c3:a9:
23:e4:a2:f8:93:a9:a2:cf:1e:7f:2e:ec:94:e1:9e:
01:99:d5:5a:20:6e:1d:94:f7:f8:54:5c:b8:a4:1d:
cd:b7:14:a5:b1:c6:ae:02:8f:5e:5c:2f:12:ac:0b:
07:41:d5:d2:03:5f:d0:f5:5c:58:4f:e1:a3:72:5a:
2e:50:bd:44:3b:18:d9:4c:6e:e4:a3:60:7f:5c:68:
d5:31:82:e9:c4:dd:bb:41:67:70:b8:a2:83:c4:4e:
7b:66:e1:8c:2b:98:da:22:70:95:77:0a:16:20:71:
0f:02:e5:30:7e:9e:f8:d3:ac:19:27:e0:76:7e:25:
a1:45:70:cc:b4:de:47:0b:8f:0c:19:30:6e:8b:22:
51:ac:ee:63:28:75:6f:c4:91:5c:97:f7:f0:83:95:
b0:37:fb:8f:02:4b:d1:69:95:03:b5:d9:67:ff:d4:
93:c7:bf:9b:65:6f:e6:1f:25:f0:d8:cf:5b:d3:f4:
fe:02:5f:5d:f9:06:d1:bd:6d:1e:a4:34:a1:5d:b4:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:66:75:DF:9C:AB:43:DF:D8:DD:F3:C4:7E:B6:95:03:90:2D:49:27
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5a:1a:ee:cd:12:7f:39:45:6e:5f:b4:e1:34:21:09:ac:4d:
dc:15:4e:f3:f1:2e:8b:13:24:5f:c5:ef:db:99:7e:c8:85:43:
6f:c7:93:c0:c4:ca:03:4c:5a:ee:71:34:be:34:be:4c:4c:36:
72:9f:39:23:64:15:03:b3:4d:f9:27:a7:6c:03:23:bc:fa:a5:
3a:3d:ab:36:95:a4:29:db:78:05:21:1b:f5:0f:54:d0:c6:be:
68:67:49:c0:a1:7e:b0:e3:a2:88:ef:7a:ac:be:72:22:c5:1f:
a8:45:b5:d8:49:4c:06:b9:83:4f:39:5a:ad:7c:80:22:12:1b:
53:ac:23:0c:2e:32:4b:15:41:47:24:cd:0e:58:21:06:7b:3c:
dc:2b:8a:45:0d:95:fc:df:6f:0d:bb:be:40:85:60:e5:9a:9d:
c0:c1:c4:c7:06:99:04:46:ec:82:e6:35:6c:89:f6:e9:69:26:
4e:19:0e:9c:94:6e:bc:23:46:55:c9:b8:a3:30:4d:60:63:61:
11:a1:b3:2d:f1:ec:91:4d:37:bb:36:2a:29:85:70:01:76:e2:
cf:42:79:6e:16:01:7e:2b:7d:f8:fe:6b:e1:00:b8:a8:cd:f8:
99:ba:ff:2e:e6:b0:36:39:08:0a:f6:e2:28:5a:43:1b:01:33:
6a:9d:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:37:05 2026 by rpki-client