Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File: F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier: qMPO/I5tb3127NB+FBSVf3RM6++9Ei9XbeztLy40RDM=
Subject key identifier: 5B:59:23:4F:8E:AD:AE:C5:A3:08:6C:63:1E:9A:43:20:54:63:08:ED
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 01A1DA25AB05FBB53DF84FCF01723EF0E36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number: 1B00
Signing time: Sat 14 Nov 2026 13:01:03 +0000
Manifest this update: Sat 14 Nov 2026 13:01:03 +0000
Manifest next update: Sun 15 Nov 2026 13:01:03 +0000
Files and hashes: 1: 2Z2Mezr_sYt_rFmNrbgtD7JcvRg.roa (hash: uRg8q37DVfZI6yBc5sgrO+ko0WZotW48TPAF7XoPsVE=)
2: DU0N-I5GJvyWrzwUmj2L1_AEZ1M.roa (hash: ZN8fdphiE3XiAL4oyd/tYR38zdzZj+4mwp0ocODidUk=)
3: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: C0uLnFUck4AsGvMq8g2rvKzB5SJjGe5AR4gr1NEejhE=)
4: dzYbEo-cteZ2L-l9SGVqJRtNPn4.roa (hash: nGkk5VkpkEQp3zSwJU2wzLe3I3V3Q1pcrGZeVvvlJsM=)
5: m-2dYhQrAu-81Ydza21n-eRWlcw.roa (hash: yLjz+lgfJ+jDnIJSu5od2TETiCmbT6+DCzdwHtsWayA=)
6: s61yv5KU-MzMgLkWKPoUNVLjQhg.roa (hash: sBkMiUtHAV3ToABJLtfHzQGVeTvCXT0UMs6UHTlwlRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:25:ab:05:fb:b5:3d:f8:4f:cf:01:72:3e:f0:e3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Nov 14 13:01:03 2026 GMT
Not After : Nov 15 13:01:03 2026 GMT
Subject: CN=5b59234f8eadaec5a3086c631e9a4320546308ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:eb:5c:00:13:fb:6b:68:bf:00:7c:d6:ac:
ac:06:1f:5a:db:34:8b:72:a9:3d:3c:f5:9a:1e:bc:
18:5d:59:14:28:d1:8b:b0:ac:b1:d7:8d:9d:8b:db:
b8:f4:bb:13:ea:fb:7b:43:67:ed:4d:e2:fb:49:b4:
f7:3b:6c:fb:ec:d0:e5:04:c5:a4:e8:da:45:83:c6:
7b:69:f3:1a:25:cf:bf:0c:4e:25:43:d9:f1:e0:43:
8d:97:4d:46:e2:f1:df:41:6a:02:a0:7e:da:bd:fa:
a3:7e:14:c0:7f:5d:b7:d8:a1:21:95:92:cf:6a:f2:
23:86:e2:98:0b:4a:8b:71:4d:2b:4d:e6:9c:76:6e:
53:77:43:99:53:b5:63:c2:cc:7c:98:90:92:e9:49:
d8:e9:7b:ba:6b:8b:49:75:26:a4:57:a4:bc:56:4e:
19:f2:81:59:00:97:20:04:3f:bc:36:c0:3b:87:7d:
ea:41:b5:98:9d:b7:20:2b:f0:ca:5c:b9:6c:ab:3b:
14:1d:69:41:f7:bb:64:ee:d3:27:1e:43:56:b6:47:
b4:01:47:9d:10:27:f8:c0:8a:a8:b8:8a:d2:54:47:
95:6a:20:eb:8e:bf:ba:f8:ac:28:44:5a:c1:a0:b6:
e2:bf:21:45:8d:e2:8f:da:e6:25:a8:28:27:1b:3c:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:59:23:4F:8E:AD:AE:C5:A3:08:6C:63:1E:9A:43:20:54:63:08:ED
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9b:7c:d2:cf:f1:e6:e5:8f:09:f8:1b:89:2a:7a:fe:9e:8a:
67:86:97:9a:4f:8b:83:fd:5a:0c:35:07:17:eb:29:b5:a5:98:
31:8c:62:99:54:55:83:46:c9:3c:77:c7:3e:86:ad:44:d9:e9:
40:a5:47:4a:62:10:d1:b0:eb:41:31:e9:d3:c2:b4:3b:32:68:
88:e0:3b:66:6b:92:9b:28:7c:85:40:5c:23:3a:f0:b9:e2:65:
9a:cf:fd:ba:e1:46:d4:9b:7b:97:35:08:ec:e2:e4:63:a9:95:
c0:a0:12:97:95:21:41:b7:25:c6:85:67:09:09:f3:55:6c:b0:
7a:7f:4c:f6:12:1d:19:96:06:46:2d:5a:4d:e5:f3:2a:28:ae:
0f:a4:2a:ac:3e:4f:89:04:90:e4:c3:85:48:c0:3d:bd:cb:f2:
a0:c1:cf:a9:3d:9f:67:fc:9e:32:a7:c9:bd:fe:24:db:47:bd:
52:a5:0b:47:5a:75:5a:87:e1:24:bc:90:90:db:1e:16:31:65:
be:02:77:7c:4f:88:8e:47:ee:8d:3f:69:15:0f:88:4e:0d:fd:
01:c2:bd:9f:df:7d:15:a2:00:dd:77:1f:12:54:e6:0a:e3:27:
f5:21:10:4d:cb:72:6d:1c:f9:44:98:32:14:dc:8f:75:72:22:
71:90:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:53:46 2026 by rpki-client