Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File: f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier: fMrBrKIX7gYq+xzM0WHQ7bm0g0+nBnq2RGUOv8Ixmi4=
Subject key identifier: 29:9E:0A:D9:0C:6C:A7:13:C9:6F:36:21:5F:03:B8:C6:A7:30:95:D0
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial: 01A1DE704C310A1ABD0F2C5A5D8F175BE490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number: 10D7
Signing time: Sun 15 Nov 2026 09:01:03 +0000
Manifest this update: Sun 15 Nov 2026 09:01:03 +0000
Manifest next update: Mon 16 Nov 2026 09:01:03 +0000
Files and hashes: 1: IOcF50Y84C4oKw5VOWTp952lF7M.roa (hash: CZcs5hE+0oCeK7HT7IK0YGkLS5J2tvkXaJDHUf2w8IA=)
2: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: JiXJbcgSUlmd+kJraHiOqzy4p2tlVybCTveRf+/AU/s=)
3: xuPytDWWOm0n5Q8kqhQeYQRc770.roa (hash: nV8TEsZ35qIOpq9/LxSQCX5axEhmxxpZi06Zd6Qworo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:4c:31:0a:1a:bd:0f:2c:5a:5d:8f:17:5b:e4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Validity
Not Before: Nov 15 09:01:03 2026 GMT
Not After : Nov 16 09:01:03 2026 GMT
Subject: CN=299e0ad90c6ca713c96f36215f03b8c6a73095d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c7:ba:0c:6e:30:4d:f6:7c:5b:98:59:c4:f4:
f5:d4:87:30:56:9b:f0:5e:67:d3:10:77:bc:4c:94:
68:ab:b5:22:a2:9b:52:74:37:db:47:ca:31:25:de:
f2:0a:fc:7e:1a:e6:34:54:6d:21:53:33:39:36:38:
67:78:b7:1b:75:d9:65:69:5d:e4:3a:7c:d0:b5:99:
cf:7c:f4:54:29:c9:ae:e1:d7:ea:29:51:59:ee:41:
bb:3d:ec:9a:4b:20:fb:af:db:84:a9:0b:bd:58:b7:
83:e0:de:08:2e:9b:23:a0:ed:f2:81:2a:39:f3:44:
6a:f1:81:91:4a:e4:98:9b:c8:1a:c3:f5:f2:ac:7f:
db:7b:ae:04:48:03:3b:0a:ee:c8:0f:22:d0:5c:1b:
b3:fd:2d:68:c7:91:a3:4c:f3:89:2a:4c:51:d2:41:
bd:b5:84:80:40:eb:c7:f3:0a:a9:af:dd:33:8a:8d:
fa:d6:72:2c:6f:1d:a5:2f:2e:b9:fd:07:45:25:4b:
8d:39:cc:4e:b8:1f:b7:2f:41:ed:60:8c:a2:e6:6b:
1b:ec:86:d9:35:d6:b5:28:0d:70:d9:f4:f9:b3:6e:
1d:32:68:98:8d:72:99:af:83:19:b4:98:11:41:b4:
a3:ac:a9:90:e3:b4:c1:7e:5e:4b:75:f5:49:50:dd:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:0A:D9:0C:6C:A7:13:C9:6F:36:21:5F:03:B8:C6:A7:30:95:D0
X509v3 Authority Key Identifier:
keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2b:1d:f5:90:eb:60:81:1c:f3:8a:e1:40:d0:27:cb:e4:6a:
c9:3a:72:8b:c7:6c:29:e2:4c:f8:56:12:09:db:9b:1d:ab:f7:
bd:55:a0:b2:24:38:ef:6d:98:61:39:7b:f4:2c:21:e3:7f:cd:
ab:55:42:f4:9a:67:66:4a:d9:bf:eb:b5:27:75:87:19:cd:25:
59:da:76:bb:0d:7d:17:b5:2a:88:84:6b:66:63:c4:31:d4:05:
87:18:21:0b:b1:e4:aa:82:78:71:df:8f:bb:e6:cd:73:79:c7:
0a:27:55:2a:ac:aa:51:d6:95:6f:25:1e:e2:c3:be:7d:c0:45:
27:67:69:36:12:63:e5:ec:40:1e:db:0f:28:04:8c:f8:2c:0d:
35:11:27:d3:56:73:e3:df:a7:98:e1:86:77:78:36:70:ed:5a:
c8:d2:01:83:06:26:a4:6e:02:c3:6c:ad:79:72:54:0d:d2:2a:
8d:af:31:b6:88:e1:e7:de:66:85:fa:7d:19:c9:fb:26:6a:df:
2d:ef:3f:a1:fd:98:92:c3:16:05:0d:18:ce:e3:6f:50:bf:8a:
b8:a5:0c:79:c4:78:dc:db:13:ef:d2:b2:b0:89:1f:41:ad:0b:
d5:db:52:bb:dc:c2:8c:8a:eb:07:d1:02:f5:e6:cd:bf:fe:be:
44:fc:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:52 2026 by rpki-client