Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: IVdxWZ/vGQ14NsqajMClmGigE6v/VsNSuddEr5Y0eTw=
Subject key identifier: AA:F4:31:A4:81:D5:D8:10:1E:0A:97:54:51:B9:B9:36:EA:FF:01:01
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 01A1DC14B82E1E3CFB188FEB7395B08BF83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0D03
Signing time: Sat 14 Nov 2026 22:01:47 +0000
Manifest this update: Sat 14 Nov 2026 22:01:47 +0000
Manifest next update: Sun 15 Nov 2026 22:01:47 +0000
Files and hashes: 1: E3jz9qmqTjg_zIJIvHv94CK6zsY.roa (hash: 0Lk+ZfoyEeeu5e++mGbGnXSf6tV5iYmorQKGtAl1EXE=)
2: GIL9uqecVqs2J_KF2ar2nbKLRYY.roa (hash: R/5DgAUg2cp6Uj0SCyngsXoMIJaoy6aqdVqAoNaJ2f8=)
3: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: mZMgBtkODgX6Ty2NUF8LhIC1EIluQGmXstutIVpfq9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:14:b8:2e:1e:3c:fb:18:8f:eb:73:95:b0:8b:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Nov 14 22:01:47 2026 GMT
Not After : Nov 15 22:01:47 2026 GMT
Subject: CN=aaf431a481d5d8101e0a975451b9b936eaff0101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:43:c6:a2:5d:06:07:e7:fe:c8:0f:c9:de:
2f:29:57:81:00:45:38:7c:74:3e:71:4d:15:d5:0c:
8a:97:2a:6e:4e:90:80:63:16:8f:bf:81:bf:42:fb:
f8:c7:bc:65:5a:22:e0:7c:27:1e:cd:a4:e7:05:08:
78:66:dd:53:1c:b4:31:23:db:b5:96:ad:7e:c7:97:
94:78:c5:e3:07:7e:4b:d6:0b:b3:b3:f2:e6:f5:ab:
93:26:7e:fc:8d:5a:b8:01:02:6b:5e:02:1f:0c:35:
af:7f:0e:a1:37:5b:61:08:15:ae:d0:87:62:15:32:
37:ad:a2:b3:57:9e:0e:b7:e7:61:50:0f:ae:83:83:
cf:be:6d:ad:80:81:57:ad:46:98:22:3e:f2:11:de:
9f:2e:5c:71:39:b5:9d:30:0b:ce:8d:46:3d:84:54:
38:40:2f:fc:8a:34:26:e6:de:14:c3:8b:c4:ce:e8:
97:13:bc:6d:43:ca:46:31:09:ed:d9:3d:2a:4d:3b:
38:21:b5:1e:4d:91:07:e3:a4:76:58:0a:0d:4a:13:
bd:fa:03:92:34:b1:ed:79:d1:d4:ca:8e:b1:0e:14:
75:7f:58:9b:9c:7f:85:4c:07:ac:e0:19:9b:3a:a4:
cc:44:71:a2:78:78:b8:6c:aa:07:88:22:9e:5f:c0:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F4:31:A4:81:D5:D8:10:1E:0A:97:54:51:B9:B9:36:EA:FF:01:01
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:1e:8a:cd:f8:33:58:34:3e:12:03:19:54:08:77:24:a5:
89:f5:1a:46:cc:d4:89:41:21:c6:95:f0:57:46:55:5d:59:ee:
12:c7:ed:81:dd:bb:db:d6:13:07:7e:a0:b6:eb:de:b2:5f:82:
c7:23:a1:4a:ec:df:e0:c2:15:8d:49:32:02:16:2a:9b:de:d2:
fa:49:d4:e7:46:29:38:4e:7d:21:20:49:af:51:28:d2:8b:64:
86:b1:36:c0:36:b3:1d:ea:25:c3:08:df:5e:7f:c5:36:b4:a3:
95:8a:73:80:fe:7e:04:ec:02:f0:3d:cb:76:e9:d0:b4:7f:25:
7a:2b:b3:af:d9:7f:99:29:ef:7e:37:94:0c:01:a0:08:11:fc:
f6:48:6c:cb:49:36:1b:b3:f0:52:bf:2a:32:f9:d7:6e:ef:90:
a0:b1:8e:e6:e4:a8:78:46:77:07:57:0f:a3:db:44:ce:c2:1d:
a7:25:97:dd:b5:f2:b7:77:62:17:27:ee:45:9f:f6:bb:5c:ce:
10:03:c7:49:e7:64:55:2d:ba:64:9e:da:41:90:04:cb:18:0c:
4d:47:47:b7:f4:0d:c3:62:75:f2:08:1c:6f:74:89:f8:98:2f:
66:10:8c:34:ba:e6:5b:38:f6:76:61:99:fc:b7:3d:3a:3d:2b:
33:05:34:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcFLguHjz7GI/rc5Wwi/g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGU0ODc3YjQ2NGU0ODllOGUxZTYxYmU1N2I4YmJlOGU1
MGU3OTkwHhcNMjYxMTE0MjIwMTQ3WhcNMjYxMTE1MjIwMTQ3WjAzMTEwLwYDVQQD
EyhhYWY0MzFhNDgxZDVkODEwMWUwYTk3NTQ1MWI5YjkzNmVhZmYwMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXVDxqJdBgfn/sgPyd4vKVeBAEU4
fHQ+cU0V1QyKlypuTpCAYxaPv4G/Qvv4x7xlWiLgfCcezaTnBQh4Zt1THLQxI9u1
lq1+x5eUeMXjB35L1guzs/Lm9auTJn78jVq4AQJrXgIfDDWvfw6hN1thCBWu0Idi
FTI3raKzV54Ot+dhUA+ug4PPvm2tgIFXrUaYIj7yEd6fLlxxObWdMAvOjUY9hFQ4
QC/8ijQm5t4Uw4vEzuiXE7xtQ8pGMQnt2T0qTTs4IbUeTZEH46R2WAoNShO9+gOS
NLHtedHUyo6xDhR1f1ibnH+FTAes4BmbOqTMRHGieHi4bKoHiCKeX8Cm/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr0MaSB1dgQHgqXVFG5uTbq/wEBMB8GA1UdIwQY
MBaAFH5OSHe0ZOSJ6OHmG+V7i76OUOeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYt
MGFmMjZiYzc2NDIxLzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYtMGFmMjZiYzc2NDIx
LzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQAeis34
M1g0PhIDGVQIdySlifUaRszUiUEhxpXwV0ZVXVnuEsftgd2729YTB36gtuvesl+C
xyOhSuzf4MIVjUkyAhYqm97S+knU50YpOE59ISBJr1Eo0otkhrE2wDazHeolwwjf
Xn/FNrSjlYpzgP5+BOwC8D3LdunQtH8leiuzr9l/mSnvfjeUDAGgCBH89khsy0k2
G7PwUr8qMvnXbu+QoLGO5uSoeEZ3B1cPo9tEzsIdpyWX3bXyt3diFyfuRZ/2u1zO
EAPHSedkVS26ZJ7aQZAEyxgMTUdHt/QNw2J18ggcb3SJ+JgvZhCMNLrmWzj2dmGZ
/Lc9Oj0rMwU0cw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:03:44 2026 by rpki-client