
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File: t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier: UyyVE4xpuZnU050SkuVmZcedacNGiYVeJIo0KXho5gk=
Subject key identifier: 79:01:13:55:79:DF:4A:E8:DF:6A:2C:0F:BE:BA:AC:EE:65:FC:DD:12
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 01A1DD94F1D4DC1B3EDBCB5A0269A7D99F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number: 1B3A
Signing time: Sun 15 Nov 2026 05:01:28 +0000
Manifest this update: Sun 15 Nov 2026 05:01:28 +0000
Manifest next update: Mon 16 Nov 2026 05:01:28 +0000
Files and hashes: 1: 45NB0bvYOHCNaT8tSSBDKWKQT7E.roa (hash: gCInVKvSkE/iCzoL7dPNSLyjJ5f9UjgQbqyeMZPo0Q8=)
2: IEHhAsm6Xmdej2oCP8axb9PFCII.roa (hash: HMNMX3CTbZjbh0WFm8CFNKQuDtEwRiZo1B5DzDBXjYE=)
3: QH92-KbfL63ctZl3QrX0nIExypM.roa (hash: aa3zpeOKy0KyaOR31LacRMZS9fLi4Tzjtg5JgfAnbwk=)
4: bEcjbcp-y9JIahihmtoi9EK0TiQ.roa (hash: ASxCyz+NX/m3cMBGmbT/xXqWc8knXBuHgU1BoVV8rW4=)
5: dkEx4YNEDY49gU4Bi8O4shVb0qE.roa (hash: 1Zg+GYUEr0f6jb4dD/9ZTpGvZlRVE8LmcxRY4Ssltp0=)
6: fljhoa-vFJrGSmV3e20cUcKDsk4.roa (hash: d+2zQov75PllQNpGPcXHZc6/b346mk3Kl228kjZURvw=)
7: iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa (hash: kcjtUwCY22q3aM/qdCSkN7N8FHGs5xCi5hpXiJukyWQ=)
8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: +6tIXQq9NEPs/Zj0QaxSTtc2RNL1Xx3skUmv+7U+F2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:f1:d4:dc:1b:3e:db:cb:5a:02:69:a7:d9:9f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Nov 15 05:01:28 2026 GMT
Not After : Nov 16 05:01:28 2026 GMT
Subject: CN=7901135579df4ae8df6a2c0fbebaacee65fcdd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:74:62:c5:1c:25:32:fa:7f:55:61:75:71:
f2:f3:17:7c:b3:4e:38:42:6d:d4:79:12:58:cc:ec:
87:91:a5:ee:60:81:07:08:e6:91:d5:20:9d:59:a5:
6d:69:4b:4f:ef:74:a2:73:ba:89:33:be:37:2f:8f:
f4:1c:9a:87:42:9c:54:5d:51:06:b4:c7:46:19:39:
2a:bd:ca:b9:aa:8f:4b:f9:3e:1a:05:65:93:31:27:
e0:5d:9e:2d:32:31:10:c9:d0:e7:e5:5f:f9:78:cf:
bb:16:2e:ea:23:57:2b:02:60:f1:8a:55:5d:67:e3:
3c:19:90:9a:39:dd:92:67:27:43:65:e7:4f:03:3d:
1e:d6:6f:8f:a9:56:c1:bb:c5:ad:86:68:d0:1c:44:
eb:0e:25:9b:0f:38:7e:9b:4b:a6:d5:3e:dd:00:b5:
37:b2:3b:40:81:fe:66:e3:c4:b9:76:37:04:db:fc:
cd:dd:99:b1:c3:0c:02:fc:ba:43:24:c3:10:9c:57:
c2:c4:2e:04:2a:eb:04:e9:b2:a0:a9:59:b3:e9:eb:
53:fd:61:46:23:46:ee:97:a3:a9:65:e6:ae:96:6e:
98:0e:38:c7:aa:ea:b7:61:a4:5d:30:31:ed:d9:fa:
02:3b:f1:dc:ea:1b:c1:b1:97:7a:88:b5:1a:8f:ae:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:13:55:79:DF:4A:E8:DF:6A:2C:0F:BE:BA:AC:EE:65:FC:DD:12
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:12:cf:99:c4:84:c3:26:e6:13:ae:68:01:0e:b9:73:92:
8b:bf:2b:13:cc:66:08:e8:e5:78:b7:66:53:cc:59:f2:a3:7e:
de:c7:08:d5:6d:4f:52:fa:c2:29:fc:fe:3b:53:ec:8f:69:46:
48:bd:f0:53:a2:a3:d5:f9:02:1a:59:9f:73:94:cb:78:83:6d:
1c:78:b4:97:e4:12:1c:ed:70:ec:20:c5:37:e9:e2:ec:0c:b9:
58:41:37:85:e0:48:cd:0f:8c:b4:24:f9:78:61:f1:de:1f:cf:
73:4d:40:78:78:9e:3a:38:b2:a8:9a:49:42:82:fc:d2:58:d1:
05:d4:a2:67:5b:bc:93:9f:8d:39:57:37:45:fa:04:30:c8:0b:
04:8d:b9:9c:ec:1d:ba:22:5b:dc:2f:f6:77:56:2b:49:00:68:
fa:9d:ba:5a:b7:ad:a2:71:7d:35:7b:3e:f8:9a:e5:0e:0c:4d:
fd:e6:05:eb:f3:90:54:44:fb:ed:be:5a:ad:18:d5:fb:97:cd:
bf:b0:05:76:6e:6e:83:76:fc:04:6f:11:7d:ee:b1:40:a6:77:
39:ee:3a:fd:c4:d3:50:46:28:f2:65:b7:77:6d:38:01:d4:09:
04:6f:1e:54:12:43:48:56:f8:ce:8a:84:d1:ce:82:91:63:4e:
04:da:9c:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlPHU3Bs+28taAmmn2Z+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx
MTQ1YzcwHhcNMjYxMTE1MDUwMTI4WhcNMjYxMTE2MDUwMTI4WjAzMTEwLwYDVQQD
Eyg3OTAxMTM1NTc5ZGY0YWU4ZGY2YTJjMGZiZWJhYWNlZTY1ZmNkZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlB0YsUcJTL6f1VhdXHy8xd8s044
Qm3UeRJYzOyHkaXuYIEHCOaR1SCdWaVtaUtP73Sic7qJM743L4/0HJqHQpxUXVEG
tMdGGTkqvcq5qo9L+T4aBWWTMSfgXZ4tMjEQydDn5V/5eM+7Fi7qI1crAmDxilVd
Z+M8GZCaOd2SZydDZedPAz0e1m+PqVbBu8WthmjQHETrDiWbDzh+m0um1T7dALU3
sjtAgf5m48S5djcE2/zN3ZmxwwwC/LpDJMMQnFfCxC4EKusE6bKgqVmz6etT/WFG
I0bul6OpZeaulm6YDjjHquq3YaRdMDHt2foCO/Hc6hvBsZd6iLUaj66oswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkBE1V530ro32osD766rO5l/N0SMB8GA1UdIwQY
MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt
NDIzYWZjMmI2OGI4LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4
LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRoSz5nE
hMMm5hOuaAEOuXOSi78rE8xmCOjleLdmU8xZ8qN+3scI1W1PUvrCKfz+O1Psj2lG
SL3wU6Kj1fkCGlmfc5TLeINtHHi0l+QSHO1w7CDFN+ni7Ay5WEE3heBIzQ+MtCT5
eGHx3h/Pc01AeHieOjiyqJpJQoL80ljRBdSiZ1u8k5+NOVc3RfoEMMgLBI25nOwd
uiJb3C/2d1YrSQBo+p26WretonF9NXs++JrlDgxN/eYF6/OQVET77b5arRjV+5fN
v7AFdm5ug3b8BG8Rfe6xQKZ3Oe46/cTTUEYo8mW3d204AdQJBG8eVBJDSFb4zoqE
0c6CkWNOBNqctQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:12:47 2026 by rpki-client