Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: RjL23y71nNDoKoM67kwCwBbwyYsNwoc65cx3matdMZg=
Subject key identifier: A7:91:F1:F7:08:DB:56:DA:F5:83:3C:4E:12:18:86:8B:8C:53:4B:9E
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 01A1DE024DBC75D93EEF57DF00BA2E87435E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 14A3
Signing time: Sun 15 Nov 2026 07:00:55 +0000
Manifest this update: Sun 15 Nov 2026 07:00:55 +0000
Manifest next update: Mon 16 Nov 2026 07:00:55 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: k4/j1HnSAWKbivPR5tfIYtZJDg0POGNf8CGMw2h/K+I=)
2: DhpDBX_7AhUzL9AP6J2bnK3aQ1o.roa (hash: CBUZxcykEIqcfYCfDpxjg7qtOjik95UqEoINbP51Nd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:4d:bc:75:d9:3e:ef:57:df:00:ba:2e:87:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Nov 15 07:00:55 2026 GMT
Not After : Nov 16 07:00:55 2026 GMT
Subject: CN=a791f1f708db56daf5833c4e1218868b8c534b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:e3:b8:20:78:d4:d0:03:c0:83:8e:4e:e4:
b3:5a:b7:80:01:11:70:a5:c4:20:b0:1b:89:c6:df:
bd:13:ed:e7:9a:df:7c:8f:11:7f:11:6d:70:cd:a2:
27:a4:f5:70:66:e2:1e:68:de:7f:4b:c2:81:f2:49:
f8:9f:e3:6b:da:17:87:e8:64:8d:d6:83:a3:4e:93:
ab:8d:a3:69:50:32:8a:59:a7:fd:db:e9:f5:14:51:
02:5c:0c:6f:a7:95:3a:7e:72:df:fc:98:41:44:29:
2a:02:21:3c:1f:48:95:09:b4:25:e5:33:01:97:f5:
60:37:12:bf:7b:86:ec:61:6f:89:4e:50:fd:82:de:
71:04:f7:86:bf:98:a6:66:d6:b7:14:e5:b4:f5:34:
1c:18:14:d9:2c:ff:9d:e7:bb:b3:32:a0:8f:ec:20:
07:30:37:84:98:3d:4f:9b:60:91:ee:61:45:ba:9f:
e7:83:a5:2c:3b:38:a3:c7:a8:09:e9:5d:9f:9e:3c:
5d:64:98:c3:dd:a9:d8:5a:00:eb:1f:a0:87:bc:51:
ee:9a:1e:34:32:fc:29:95:30:18:be:e5:81:ae:b7:
93:15:25:ff:86:a4:bb:06:8c:6b:c9:cd:36:ea:3a:
18:b8:9d:be:03:3c:00:c8:5c:db:f5:26:6a:0f:f5:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:91:F1:F7:08:DB:56:DA:F5:83:3C:4E:12:18:86:8B:8C:53:4B:9E
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:91:f9:05:64:c3:e6:72:9f:3f:f0:25:0e:6b:75:a3:cb:39:
f5:48:07:c0:8f:3b:06:28:0e:12:eb:51:5b:05:c2:8e:9d:32:
6b:66:4a:06:ed:e2:ce:5a:88:be:8d:73:47:3e:82:a1:6b:69:
8c:70:f2:83:b0:fc:cd:33:36:64:71:cb:db:68:ed:cd:72:6c:
b7:54:2f:53:96:8c:64:7f:d9:e0:4e:84:be:29:81:de:c9:5e:
8d:04:02:17:a7:b1:f9:b9:75:d3:66:6b:5d:01:88:51:3a:c8:
00:5f:2c:b6:c2:a4:9d:c4:b5:5d:5d:08:7e:ac:ec:0d:2c:09:
e0:d0:51:da:ce:b0:56:43:77:2b:b7:1a:df:b4:2a:df:22:3b:
85:ea:c5:fc:5f:ba:89:b7:ed:db:be:69:34:b8:e1:b4:40:24:
07:f0:f6:2b:77:9a:10:2f:fe:95:99:a9:58:48:9e:f9:5e:ee:
5e:54:bb:ff:cf:e5:5e:ea:d9:88:a6:30:40:bb:18:fb:bf:b7:
1c:49:6e:6e:af:f0:6d:82:bf:a8:69:e7:71:3c:de:ac:c0:94:
46:29:d8:3e:a3:9d:6b:29:84:0d:62:de:74:84:de:64:37:1c:
a1:6c:43:04:07:c5:bb:8f:a3:01:98:91:a8:e9:1d:1d:3a:ae:
48:03:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:34 2026 by rpki-client