Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: B94OrpmltXkZ9XLCjZCCvvdGJrT9qWdQMQXh+1Tts7g=
Subject key identifier: 5E:28:DF:66:20:21:B4:E7:B8:52:75:C1:BB:47:57:0C:0D:DA:A9:2A
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 01A1DE39E1F509E63CFF87DD456FEE08A42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 08:01:37 +0000
Manifest this update: Sun 15 Nov 2026 08:01:37 +0000
Manifest next update: Mon 16 Nov 2026 08:01:37 +0000
Files and hashes: 1: 1-aCnSCh2k6EoO6v8K8YGH6-ZFag.roa (hash: TXqm016RQPYqrirzt4ClgfgwS79aUK1qbegI6yBDVqc=)
2: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: Hxhko55BkfK3d1YM5Oay0eT/9oqy6T/1MbWZQj5rSFU=)
3: uhXgdMnU2sK7rATt-_JTycGnweE.roa (hash: oOHRvsricrI0IDhV5HO6fjuBbrjUqImOQ3QUZQn7MEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:e1:f5:09:e6:3c:ff:87:dd:45:6f:ee:08:a4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Nov 15 08:01:37 2026 GMT
Not After : Nov 16 08:01:37 2026 GMT
Subject: CN=5e28df662021b4e7b85275c1bb47570c0ddaa92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:84:9b:95:52:4d:c4:10:ca:07:13:9e:56:
1e:2e:23:1d:46:f7:42:87:3c:53:02:02:44:53:c9:
9a:26:9d:a4:dc:22:51:8c:b3:e1:90:2c:48:43:fe:
d3:ed:c2:b9:00:f8:da:a7:ef:5b:7d:99:a1:22:31:
c7:fb:9a:8c:b2:e1:4e:92:76:d4:08:52:b8:ce:da:
b8:f8:fa:eb:fe:b6:ce:fa:41:5b:aa:b1:2a:44:59:
b5:ea:55:ff:17:a4:27:8d:27:b5:e5:e6:71:23:91:
2b:35:93:1b:24:07:ad:e9:fb:b1:6d:fb:b9:fc:22:
0f:21:53:f4:29:76:f1:49:4f:ef:9f:1c:6d:f5:06:
3d:1a:9b:c4:7a:1e:c0:ea:2f:5e:34:2b:f0:5c:6e:
14:13:b1:7a:ae:cf:4e:81:2a:07:82:1c:f4:46:4e:
80:ba:25:b8:1a:2a:92:a7:37:40:a5:9d:f5:45:6f:
46:69:ed:38:ba:65:c5:6a:21:a3:2d:33:e0:da:3b:
e3:48:d4:67:6f:3e:fc:06:91:51:1c:14:ca:33:b9:
f8:56:06:6f:fa:01:95:dc:1e:f1:94:22:fb:cb:2c:
56:7c:1c:e7:a9:cb:e1:64:64:00:92:b9:85:a3:3b:
39:3d:f8:e3:3b:0e:53:4a:b4:f2:0c:8a:83:a6:6d:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:28:DF:66:20:21:B4:E7:B8:52:75:C1:BB:47:57:0C:0D:DA:A9:2A
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f3:b2:d6:64:39:be:37:9f:2b:f7:47:12:0e:af:4d:44:68:
37:0a:de:c4:c8:f7:4c:4f:86:03:6f:5e:b2:de:eb:4a:67:94:
e2:77:e5:ac:10:99:de:14:e5:53:eb:51:00:b3:23:d0:b6:86:
2e:ac:d3:b9:d9:f4:32:ae:51:24:64:19:1d:86:ab:aa:0a:2f:
2b:cd:cf:28:2b:dc:5c:ec:91:2d:26:e6:1a:fa:0f:b6:14:a7:
b6:47:4d:f0:33:8d:80:30:55:4f:ab:48:ca:9a:13:ed:99:d4:
f6:fe:b9:1e:c2:f5:59:a3:a4:2e:cb:46:d2:2d:1f:32:48:db:
30:d4:37:fd:2f:2f:47:93:11:8c:d7:e8:58:54:1f:46:c4:1e:
3e:6e:5c:56:cf:1e:dc:04:7c:87:24:2b:0c:d4:6f:73:24:15:
e3:19:ad:be:5e:a7:d0:ec:05:39:08:81:07:32:5c:85:d1:94:
49:ff:45:67:44:94:25:04:fa:f7:ba:e4:af:00:a0:3a:ba:8b:
27:18:0c:c7:a3:26:f0:3e:aa:2f:80:d4:8a:f1:73:6b:67:31:
94:00:0d:c9:59:ad:64:08:b8:67:72:53:07:85:f0:3a:6a:56:
eb:31:0e:8f:4b:21:7f:f5:41:1b:a6:2f:87:e1:3b:84:ef:a5:
11:ed:40:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:34:40 2026 by rpki-client