Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: udGwN32xjS2AUmTcTZ9k+zBsXWnkao12RjaZoEWt7fM=
Subject key identifier: 96:14:01:E9:7A:DC:3E:E9:4B:79:31:40:4E:86:02:F8:96:46:E6:77
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 01A1DEDECD180C1D07D96BF7EA2DCA4FB83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 11:01:45 +0000
Manifest this update: Sun 15 Nov 2026 11:01:45 +0000
Manifest next update: Mon 16 Nov 2026 11:01:45 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: OG2iziKbF37h6IjQppA6xAWriFS9ZzCce+sR5WloHls=)
2: 8n1cP-EeM_0aPON8tQRs5t94Tcw.roa (hash: oWMSKnzC7MzhiIiFzW+fvutsE0+XNV6RpmpSUYLiCP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:cd:18:0c:1d:07:d9:6b:f7:ea:2d:ca:4f:b8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: Nov 15 11:01:45 2026 GMT
Not After : Nov 16 11:01:45 2026 GMT
Subject: CN=961401e97adc3ee94b7931404e8602f89646e677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:2b:20:98:50:84:ca:57:19:1e:42:8a:11:
1d:9c:53:09:04:24:35:71:af:8c:08:27:f7:a6:7a:
33:32:95:c0:92:6d:d0:1c:4f:c8:1a:62:9b:2d:a8:
f8:9e:c8:d1:10:b7:fd:af:77:ab:e0:f2:38:0a:c6:
4c:57:38:40:7d:58:fc:df:83:ab:2e:a4:c1:f1:fe:
8c:33:b0:0c:98:84:b9:82:72:2f:e2:6b:8b:06:72:
ff:02:79:91:9d:4d:76:b0:9a:1a:8b:ec:88:30:60:
7c:8c:6c:18:1a:59:8f:20:3f:84:56:c7:5d:6a:f8:
92:fd:ed:03:5a:f5:ee:a8:aa:64:4a:c3:e5:54:d2:
60:87:45:3b:de:25:a3:b6:d0:58:22:9e:a7:ff:0b:
8b:52:9a:19:33:5a:4d:7e:f2:bd:65:64:5d:14:26:
49:17:31:60:e5:a0:56:1c:51:c9:17:62:7d:77:78:
fb:6a:b4:df:73:5b:e4:c3:f1:10:f9:db:53:77:71:
76:ec:1d:d7:c7:36:7c:32:69:9c:7d:bb:73:71:53:
3d:bd:76:1f:bb:39:f2:f2:55:d1:10:09:ec:86:c6:
a6:b4:4c:47:e6:5b:56:7b:f1:f9:b7:d8:6e:65:6d:
80:cf:a0:f6:97:98:77:05:b5:20:d5:95:a8:c5:b2:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:01:E9:7A:DC:3E:E9:4B:79:31:40:4E:86:02:F8:96:46:E6:77
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:90:76:7c:69:59:ac:e1:ee:41:86:5f:ba:64:61:ca:ea:83:
fa:a7:22:e9:c7:e0:61:06:12:bc:1c:2d:2d:45:2d:84:43:46:
09:f9:05:95:a7:d9:0f:b4:68:13:a7:a8:2a:d6:e5:22:be:f0:
4b:ee:85:c8:a7:52:db:5a:30:94:17:59:01:81:97:62:5a:28:
28:b0:e7:3d:86:69:c3:9f:d4:e4:d0:bf:d9:af:e7:bd:b3:f4:
6f:33:b7:e3:00:1b:03:6e:63:45:42:95:28:74:b2:d6:b4:fb:
c5:9b:5e:c5:32:9c:b1:73:d5:37:43:3e:ac:21:f3:af:fd:74:
7c:ac:cd:04:b8:40:c8:ca:d8:ec:96:db:38:b0:0c:39:5e:29:
ad:63:28:98:4e:ae:a3:4e:f3:5e:45:f2:02:b2:58:f2:ed:06:
aa:21:d1:55:6d:ad:17:de:b4:8f:29:4f:89:bc:c2:3b:bb:bc:
ad:82:06:f4:9b:3b:c8:36:66:da:46:55:90:06:be:5f:c9:aa:
b9:ad:3f:61:1e:92:9e:5a:0e:1c:3d:d8:d6:78:fb:81:db:14:
ee:77:a8:38:00:b8:1b:7d:d5:2e:17:84:9e:47:11:7e:03:33:
79:41:7e:e7:8c:fa:e0:7a:bb:54:88:96:be:d7:00:73:ad:34:
15:02:e6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:56:13 2026 by rpki-client