Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier: C36/4Nb0pSW4JrM3jYldOy/GWTboENbgVQfpViSVpfo=
Subject key identifier: 4D:E1:D5:B2:AB:46:42:0B:CC:AC:71:5C:71:82:D0:AA:5D:9E:43:02
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 01A1DD26CC8FA41346C2D9D55F1DA814BC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 03:01:09 +0000
Manifest this update: Sun 15 Nov 2026 03:01:09 +0000
Manifest next update: Mon 16 Nov 2026 03:01:09 +0000
Files and hashes: 1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: dXVBTF34T9tHUIVQoNHPGbmoChX7SCGVrzRpurulZcw=)
3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:cc:8f:a4:13:46:c2:d9:d5:5f:1d:a8:14:bc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Nov 15 03:01:09 2026 GMT
Not After : Nov 16 03:01:09 2026 GMT
Subject: CN=4de1d5b2ab46420bccac715c7182d0aa5d9e4302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:7d:40:7e:c6:4a:91:53:8f:c4:4e:11:e5:
2b:7e:94:92:a7:7d:55:c0:5d:07:49:d1:5d:27:84:
94:3e:e0:1c:b2:98:20:37:e1:dc:36:a3:55:ad:e6:
90:36:ae:1a:d2:6b:69:49:2b:85:89:e9:38:f4:19:
9e:78:6f:16:3e:ab:d8:2d:a0:ca:92:f7:1f:e5:f6:
79:30:53:d1:b1:a6:4c:6d:58:e0:33:c1:54:2f:7d:
70:bc:87:ce:6b:be:d0:bc:ab:08:f6:e6:34:a8:be:
9c:7d:6f:3b:cc:0e:47:fd:02:e8:ca:e6:68:65:92:
48:3a:1b:28:eb:bf:f6:b9:e2:6e:29:e9:f5:ac:85:
7c:b3:bc:76:3c:c1:20:d9:fe:d8:3a:b8:f1:b2:f9:
78:af:00:47:63:55:f0:05:98:de:6c:6a:3f:70:2b:
d9:d0:e8:82:3b:2f:f7:f9:98:28:a3:55:73:98:33:
ed:fc:a0:40:fc:62:d2:63:33:d5:5b:50:5b:93:55:
4b:74:85:bc:ac:3f:b7:12:61:1e:0b:c2:3c:cb:a8:
c3:ff:25:d6:d5:1b:1b:07:bc:36:26:bd:0b:ff:4c:
80:f6:7c:2d:16:22:2f:56:ac:83:b6:65:eb:39:50:
1d:26:d2:36:47:da:03:36:f9:05:2c:a3:b1:7b:92:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:D5:B2:AB:46:42:0B:CC:AC:71:5C:71:82:D0:AA:5D:9E:43:02
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:50:e8:6e:b7:ac:83:86:05:1e:88:ef:71:7c:4d:ee:fc:61:
6e:0a:de:e0:e0:bd:af:cc:3d:ea:35:71:43:0c:e6:c8:7e:e1:
84:26:08:6f:bd:00:a9:6e:7d:a6:d9:7e:35:07:c9:fe:e9:13:
1b:a7:74:f9:24:80:ae:c7:91:fb:3c:c1:4b:61:f1:b1:61:e0:
55:62:23:aa:90:fb:df:e9:9d:02:29:97:8f:68:91:a9:b5:93:
13:ec:f6:16:ac:6f:04:54:9c:10:d9:2b:8a:47:ce:84:20:7c:
29:2f:1d:41:55:bc:37:75:4a:74:ad:d7:7c:26:49:81:a7:79:
16:62:09:06:b1:be:46:93:48:ec:87:bd:18:63:b0:5a:3e:a6:
b3:35:ec:40:1a:3c:29:7e:07:54:cf:1e:d9:41:66:70:35:2b:
e2:df:c7:dd:10:67:df:b5:93:b8:23:54:84:71:de:46:d9:fc:
3e:d5:29:ae:fb:7a:4b:7c:77:ee:79:84:69:78:39:62:c9:66:
0d:f6:bb:09:96:4d:8f:c7:9a:e0:76:e5:bf:57:f2:27:ad:00:
60:dd:96:26:c2:91:0c:cb:4f:50:d4:bc:c7:41:f0:f2:1e:2c:
a6:20:b1:73:5a:20:78:55:34:02:1c:f8:7c:a5:74:2e:f6:f2:
d3:19:9f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:29 2026 by rpki-client