Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File: 5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier: KvhM3O9W85dRnj/jJk35uM1EZ2sHKqImIUi9sc4AxR0=
Subject key identifier: 9F:9F:E2:95:B9:C8:7D:DE:D5:45:43:AC:F5:E3:8B:5E:6F:7A:05:BE
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 01A1D9EF391D3BBB4B6B2AB8F3A605DC27D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number: 17AA
Signing time: Sat 14 Nov 2026 12:01:35 +0000
Manifest this update: Sat 14 Nov 2026 12:01:35 +0000
Manifest next update: Sun 15 Nov 2026 12:01:35 +0000
Files and hashes: 1: 1-WcsQwPSxiGC7Lf3CEMo6I_R-T8.roa (hash: r4s/pYFFvl0PuU1Pc1ZEalLcMszU2nIBrtcNDifNzEc=)
2: 59Qy54NWnnaF0UonsrF_AIsT2AM.roa (hash: fe8mUsn7ORXLXCy47FezO3nIOf1E6XAt4wFRWRU6mf0=)
3: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: wHzmFNuK3yXGEC36WimqXgMfZbqhIi9DmkHIaw5tEqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ef:39:1d:3b:bb:4b:6b:2a:b8:f3:a6:05:dc:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Nov 14 12:01:35 2026 GMT
Not After : Nov 15 12:01:35 2026 GMT
Subject: CN=9f9fe295b9c87dded54543acf5e38b5e6f7a05be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:a4:13:6f:9c:76:ef:27:7c:0b:80:e5:09:
26:72:0e:3b:02:99:78:46:c9:6a:6b:98:60:24:d7:
00:df:71:32:4d:c5:d6:38:48:ef:67:d6:cc:38:68:
af:8a:8b:44:4f:15:05:d2:70:ae:15:4b:69:15:0c:
fb:3c:20:f6:a8:b2:8e:62:9c:b5:49:22:18:04:74:
d2:32:18:f9:20:f0:86:d7:a3:83:e4:66:62:58:9c:
06:a6:b0:1e:9d:0d:29:52:a4:3d:17:d8:60:b7:38:
e3:70:ff:d7:39:24:ea:95:c9:5f:f6:af:ed:b3:c9:
52:88:4e:32:4f:c2:63:98:fa:12:ed:ee:96:5c:b5:
db:66:d2:f7:5b:6a:d4:f9:21:ac:31:4d:8a:e1:3a:
08:c8:66:16:13:cd:d7:5e:ee:66:3b:50:40:53:e0:
5d:61:11:df:3d:3e:be:ab:49:60:4d:d8:d9:34:e0:
3b:2b:b3:d5:4e:2c:00:9d:b4:ae:1f:2e:69:b6:44:
28:64:fe:da:57:4c:17:2a:81:f6:55:5d:36:6e:16:
46:67:09:c2:ae:09:0e:a0:b2:22:fb:94:72:35:22:
7c:01:c0:a5:a1:2a:b8:fd:7f:5f:93:52:0c:cf:2a:
cb:2a:1a:da:61:b8:cc:9a:d6:57:c0:95:1d:e4:0d:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9F:E2:95:B9:C8:7D:DE:D5:45:43:AC:F5:E3:8B:5E:6F:7A:05:BE
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:40:35:6d:cc:73:ed:89:0a:a9:36:45:3b:7c:10:75:0b:13:
89:ee:63:57:74:77:16:0a:34:e0:76:29:70:b6:e8:79:3c:66:
32:02:e3:ae:f4:e5:e2:61:29:7c:83:2a:7d:81:ae:cc:84:f1:
45:3e:8f:ad:ff:59:11:7b:3d:dc:85:34:c2:10:73:c5:3f:9a:
04:56:5e:ff:2c:37:b6:64:8e:72:f7:6e:d4:18:b8:fc:0a:bc:
48:23:4d:5f:1e:f7:7a:c7:e8:8c:b5:ee:da:04:de:e8:f5:00:
ed:73:42:01:ec:37:b6:cd:fc:a9:09:56:d6:f2:8f:08:da:bd:
16:f8:95:30:b2:f9:6d:c8:de:a7:b7:64:92:64:19:5e:35:bf:
ef:82:7c:f5:98:d5:da:e7:b0:ea:d1:d7:b4:93:3e:cf:9d:27:
c7:3c:37:88:be:d7:74:e2:bc:8e:d8:fb:eb:86:13:03:14:50:
78:62:c3:76:6b:23:1b:8d:4f:83:d8:c6:d8:6b:5e:c4:66:9f:
c9:09:99:87:c6:be:e6:e6:97:fc:ed:be:1f:e5:e8:b4:35:97:
48:aa:65:3f:a1:06:0d:35:ec:73:30:d6:8f:49:5d:25:5c:3b:
92:cb:c7:89:2b:6b:bc:c1:1c:87:80:ab:13:bc:72:c7:0a:99:
7f:d1:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:40:59 2026 by rpki-client