Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: hBdaScgu+heVg3QBB0ktfulCvFzi1A+GmdVe2t9FGVE=
Subject key identifier: 52:B9:99:50:F9:37:41:68:F3:18:01:55:8C:B8:72:B6:6F:33:C9:F6
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 01A1DEA7BD2A4D2CA2DFA949E687119D094E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 1201
Signing time: Sun 15 Nov 2026 10:01:37 +0000
Manifest this update: Sun 15 Nov 2026 10:01:37 +0000
Manifest next update: Mon 16 Nov 2026 10:01:37 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: M26PJIZqqv8wPZRnxF2kgbjh53fosYYhTO4MvqLQrcY=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:bd:2a:4d:2c:a2:df:a9:49:e6:87:11:9d:09:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Nov 15 10:01:37 2026 GMT
Not After : Nov 16 10:01:37 2026 GMT
Subject: CN=52b99950f9374168f31801558cb872b66f33c9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:ea:d0:e3:ce:56:63:4c:29:3b:e5:1a:05:
ad:7d:e6:de:65:78:4e:c5:1f:ee:48:fc:43:f1:d0:
4c:ab:ff:2e:c1:5b:63:48:e8:d1:a4:84:68:36:76:
4e:8b:10:a5:72:4b:f8:a1:21:2e:8e:fd:bb:77:b4:
97:fe:c7:44:d3:86:47:92:34:13:dc:3e:57:a3:2f:
1a:df:81:17:a7:99:6a:59:e6:56:61:0f:0e:f9:0e:
52:7c:95:7f:a4:31:9e:fd:cf:8a:ca:5e:21:f8:1b:
f8:e4:02:f6:9f:ed:24:ea:2f:18:98:94:71:05:39:
a4:29:e0:97:59:63:bb:ab:c0:73:55:9c:28:24:18:
17:72:c4:fd:11:48:76:8c:8f:7a:c0:ec:6a:62:fb:
9e:b0:57:55:3f:5b:02:4a:c6:37:00:51:34:39:02:
18:a8:bc:5a:7c:15:12:a2:29:20:7d:39:cd:de:8e:
ee:42:be:60:ee:74:77:6e:6d:5d:dc:03:1f:c1:3c:
0e:cd:b4:2c:ce:ec:33:3d:18:f6:93:a9:f0:1a:02:
5c:59:85:92:a4:d0:90:8b:f6:d9:04:e8:2c:6f:79:
85:66:64:82:10:72:40:53:49:96:0a:8d:79:ad:4b:
b8:5f:18:d2:15:14:ac:e8:67:c2:5e:a1:2a:e5:0a:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B9:99:50:F9:37:41:68:F3:18:01:55:8C:B8:72:B6:6F:33:C9:F6
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:12:31:81:ee:34:a4:1f:9d:35:6d:cb:2c:23:b6:45:b4:91:
a2:59:4b:3a:e4:9d:75:4c:1f:c2:92:8c:82:fa:82:e4:2d:12:
5d:3e:0f:83:a0:b0:2d:ab:60:d7:53:96:d3:af:7c:a0:48:f8:
c0:27:d2:55:7c:e0:38:19:66:93:34:41:38:da:58:db:a5:b0:
7d:41:e8:db:5d:c1:3b:94:70:c0:56:d5:48:c3:8a:60:11:e5:
69:df:a8:b0:c7:d8:51:d7:2a:9a:e2:2f:25:9a:3c:92:03:3e:
67:a3:0d:c0:46:69:f3:43:fc:21:87:9c:44:70:b8:e5:a3:ef:
b5:20:e9:58:f9:b7:90:e3:bc:7d:06:c1:dd:2b:56:5f:cd:37:
49:b7:27:68:35:9a:66:a9:92:a5:9d:cc:e1:97:9b:75:3c:b3:
e1:b1:b7:03:d3:6e:9d:8c:18:b7:60:90:77:04:74:dc:a2:58:
c7:be:b3:8d:e2:ce:d5:f4:f6:b5:c0:f6:1f:58:e3:20:fe:f8:
ac:77:9f:5c:a0:90:99:6f:c5:d9:ae:89:98:52:38:43:cd:17:
b5:c3:66:c1:73:73:95:8b:b9:72:e2:ea:a0:48:10:ed:38:52:
49:f4:34:a7:b9:81:1c:a4:8e:1a:92:83:49:35:37:67:0f:82:
2c:89:3d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:36 2026 by rpki-client