Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: hfxwIhqgADCHpyI80AgRALgnVPWzC/2LIT49DWD05sU=
Subject key identifier: EB:29:A0:F7:B6:5F:A7:5C:FA:D3:A2:E8:CB:FA:7B:2E:9D:82:44:4B
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 01A1DDCC418F87F18DDD63954A202C6E9E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 1488
Signing time: Sun 15 Nov 2026 06:01:53 +0000
Manifest this update: Sun 15 Nov 2026 06:01:53 +0000
Manifest next update: Mon 16 Nov 2026 06:01:53 +0000
Files and hashes: 1: H1ayDIygYNIOiS92j6cNtqBQm1c.roa (hash: zAMEhxkwZgHjIWB7MVVQZowg1h/HvADUtVLj69PryUA=)
2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: CaQ2bljwoBsXE3WMyHWLnEKZ1/WD/fd/tN5HsrcW+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:41:8f:87:f1:8d:dd:63:95:4a:20:2c:6e:9e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Nov 15 06:01:53 2026 GMT
Not After : Nov 16 06:01:53 2026 GMT
Subject: CN=eb29a0f7b65fa75cfad3a2e8cbfa7b2e9d82444b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:ef:82:43:24:84:31:12:e0:1a:8b:c6:bd:
cd:27:26:89:8f:39:82:1c:ee:e0:05:b1:68:74:5e:
6e:7c:91:89:ea:6f:c1:ac:11:4a:80:9c:6e:3a:cc:
8b:71:18:81:75:13:58:db:54:df:c7:52:a1:67:95:
76:0a:dd:83:46:63:15:c4:fd:b6:43:15:7a:3b:3e:
b5:00:00:d3:10:88:85:7b:98:fb:68:a6:fe:d3:66:
a1:c9:a4:d5:68:ac:9a:40:5d:72:37:f2:32:8b:ab:
be:34:33:f2:6f:99:53:0d:7f:19:03:27:5f:3d:69:
bd:43:de:4a:7c:03:e2:f2:f8:d4:a7:02:7d:24:58:
5d:f7:81:45:72:08:01:ca:50:50:09:7b:b4:74:83:
55:93:4f:5c:c0:17:c9:a1:1a:30:c0:d5:2b:f2:51:
fd:7a:45:26:03:e9:46:74:3a:29:8b:9b:99:47:61:
9a:ab:c4:01:ea:45:74:fa:27:46:f6:4b:5f:5a:0a:
a7:c1:45:7f:d0:51:7a:42:c8:b0:7a:3e:66:67:98:
70:93:e1:73:e5:54:61:52:8e:7c:9c:52:1e:36:46:
aa:69:6f:6a:50:f6:b1:8e:e6:b6:3f:b6:75:36:31:
a0:1a:08:84:6b:ae:83:7a:67:fe:ed:ad:64:65:a1:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:29:A0:F7:B6:5F:A7:5C:FA:D3:A2:E8:CB:FA:7B:2E:9D:82:44:4B
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:94:39:c4:3d:25:15:86:54:5a:1e:95:dc:b8:4e:6c:48:b4:
ec:f5:cd:d1:84:ec:18:76:e2:fa:0b:69:6e:d6:8f:c5:f8:88:
f0:93:20:7c:e8:02:44:7c:e0:e7:7d:80:bb:b9:17:5f:1c:da:
4e:62:ae:5d:eb:1d:1c:d1:92:ab:9f:8d:a4:ce:5e:04:33:46:
13:fb:bd:02:4d:2a:e4:a9:f4:5b:64:bc:76:66:ad:74:cf:5f:
a2:16:02:4d:eb:2c:f5:2a:88:c1:2b:e2:ce:59:9d:0e:5e:08:
ca:02:da:b4:85:1e:b3:4f:da:65:33:b9:0f:eb:af:c8:ae:80:
2a:c7:14:5b:2c:16:af:1c:49:db:0f:2d:db:b4:ca:31:63:fe:
74:27:c5:64:aa:cb:88:8d:cc:aa:02:c4:ab:78:5f:13:65:c7:
e1:01:dc:df:63:8b:0b:e0:c9:20:70:92:2e:7e:1c:6d:3b:b5:
2e:90:16:ad:36:f7:0a:25:08:29:e7:75:6b:46:4a:54:38:3d:
b0:f8:1b:e6:d5:a4:b5:4d:41:45:e9:12:95:f7:97:15:a4:52:
ce:a6:af:f6:1f:52:1f:9f:8f:48:3c:0d:b4:cf:a0:5a:3e:87:
78:8b:33:03:d8:67:9a:83:dc:7d:7f:e1:2f:cd:0d:7b:99:54:
5d:86:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:12:15 2026 by rpki-client