Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
File: 15eF3mLc-eeTC6vXsdOcWFPRlE8.mft (raw, json)
Hash identifier: LCX0O5gGZ+z34uzsQGbF5KzJr/RvZUwgMqX1clddFiI=
Subject key identifier: 82:1E:2A:AC:8D:18:F9:E6:96:7B:A7:97:B9:B6:02:58:09:D7:2F:12
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 01A1CAB29A3E667A8EC224703CD83315E402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
Manifest number: 1AFE
Signing time: Wed 11 Nov 2026 13:01:04 +0000
Manifest this update: Wed 11 Nov 2026 13:01:04 +0000
Manifest next update: Thu 12 Nov 2026 13:01:04 +0000
Files and hashes: 1: 15eF3mLc-eeTC6vXsdOcWFPRlE8.crl (hash: MnhGDmeWOpxXEhr6ipAeWjQnkYbwNPwZ+zLn3cdAPhM=)
2: 5S25SMI8E9JaR6e1K9PJzYPwzq0.roa (hash: NJujagGkJiaBOJNgPviLVr7Rb2pzjvY77Oqt5qKgVjY=)
3: PHmeAWFFkKXBgymR37GK6QvhrCY.roa (hash: /Zgxh895ZAIwexVdKt7yfvsXzhRHS6wWMCxO8hY8aNA=)
4: QrcFbOR4DAAMYD0DDghoqF2GSfM.roa (hash: QGtHb51hChbBqYUnbm9bBQhfbbGCgb2yzMdOBCNMB48=)
5: k9s4R_RCGnHtZOrjWKzCzH64VJE.roa (hash: SxnRh57fnfNIfp40e+jDqO9RBa+XdPWJgmj+azEX9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:b2:9a:3e:66:7a:8e:c2:24:70:3c:d8:33:15:e4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Nov 11 13:01:04 2026 GMT
Not After : Nov 12 13:01:04 2026 GMT
Subject: CN=821e2aac8d18f9e6967ba797b9b6025809d72f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:44:10:b1:94:99:b4:c8:d2:9d:4a:b1:44:
d2:60:07:b8:9c:da:a4:69:dc:f7:43:21:c4:91:ab:
0f:50:02:9e:76:dc:81:16:b2:b1:9a:e3:d6:9e:58:
db:81:4c:dd:de:f5:e0:35:c4:22:87:f6:47:53:7f:
1d:d1:56:09:c3:e6:d8:10:b7:38:d8:3b:a0:ed:1a:
23:b8:d7:f3:d6:ca:60:36:cf:bb:88:cd:63:fc:58:
24:ec:68:6f:40:eb:2f:cb:65:2b:9d:aa:95:65:23:
08:5e:7e:40:81:f3:1a:5a:d7:d0:b8:e0:28:79:f5:
5d:ec:6a:b7:e3:b8:8c:70:96:f1:c0:2b:22:da:86:
a0:a3:6a:89:da:99:5f:45:85:6c:fe:b9:1f:cc:80:
03:e6:9b:f1:59:08:fb:fa:ed:d6:49:fd:e7:df:ec:
64:9b:4a:9d:8f:90:af:29:b3:51:57:8f:c9:a9:3a:
4c:a4:8d:4c:e9:c6:f5:a2:07:ed:a9:db:19:ea:ac:
2c:40:21:c2:13:13:88:76:c3:1c:ae:54:c3:3e:8e:
53:9d:71:ea:ce:59:9f:90:5b:cf:1e:16:75:60:2c:
1b:ff:f8:d6:c3:38:7c:94:a8:9a:38:bf:22:ac:11:
5d:12:f5:f0:31:b4:cb:2d:ae:50:a5:48:fc:c1:e2:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1E:2A:AC:8D:18:F9:E6:96:7B:A7:97:B9:B6:02:58:09:D7:2F:12
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6f:90:17:b9:51:bf:ca:19:cf:91:3e:8b:2c:5a:44:c0:c4:
79:ca:ff:0f:aa:67:95:86:be:1b:9e:65:08:dc:45:78:7f:97:
84:47:f8:4a:fb:a3:65:4e:07:b1:3c:e6:b3:7a:0b:23:31:a9:
e5:dc:36:84:4c:35:91:0a:31:59:88:47:ca:9f:a3:c5:ec:72:
23:c6:2c:ac:af:69:33:c9:17:3c:2a:37:94:4e:2e:f4:76:40:
18:47:7b:cd:c6:8e:e2:00:00:a8:6b:f2:c4:74:86:3e:f8:ca:
00:00:6d:4a:41:82:cf:e1:43:9f:bd:c7:4c:6b:a9:8b:19:79:
4f:ac:8a:09:be:eb:22:47:11:b5:69:c1:f5:83:b8:d6:c7:5d:
67:7f:78:f9:e0:a2:99:e7:c1:34:d4:89:80:e5:05:98:f0:9e:
85:a3:2c:b5:8d:9a:04:90:0e:59:3d:50:75:32:01:d1:0f:62:
99:bb:bc:f1:1d:37:7c:80:53:87:3c:b0:2c:64:76:1f:ae:d2:
79:c0:a6:d6:67:92:8d:72:98:55:41:81:ae:81:dc:c6:c2:f2:
96:cc:c3:fd:6c:d0:5b:17:42:e4:08:3c:71:d9:9d:f3:0e:f4:
22:59:e8:03:34:4f:59:8d:9a:51:b8:9d:3f:36:ef:5b:57:97:
55:7a:d4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:37:08 2026 by rpki-client