Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: m8FXhs++4bUxaZlVdnWRpScGV2jfwgNgwGdXoA6duUo=
Subject key identifier: 21:94:46:93:17:49:01:60:02:7E:DE:FF:6A:6B:C7:45:52:34:E3:ED
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 01A1DF82E61A67E3FAFB18E615FB62DE6F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 1ADB
Signing time: Sun 15 Nov 2026 14:01:00 +0000
Manifest this update: Sun 15 Nov 2026 14:01:00 +0000
Manifest next update: Mon 16 Nov 2026 14:01:00 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: PIohfX+94zIgWGYFC3wPyyjIrI4WXdLFvTlGEgjZORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:e6:1a:67:e3:fa:fb:18:e6:15:fb:62:de:6f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Nov 15 14:01:00 2026 GMT
Not After : Nov 16 14:01:00 2026 GMT
Subject: CN=2194469317490160027edeff6a6bc7455234e3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:43:df:c6:e5:e1:b0:a7:19:48:2c:2b:93:
64:bf:21:1d:b1:2b:17:27:39:49:92:ce:a8:41:5f:
6e:71:08:87:22:75:dd:d7:e7:2e:de:63:36:95:62:
b2:d6:79:88:14:a0:79:80:7e:be:fe:bf:f8:3c:4c:
fb:80:29:3c:43:1a:9c:1e:0c:49:a7:24:d4:c0:3d:
0f:f3:47:3c:d6:ef:45:87:79:50:b2:95:e5:5a:99:
9d:32:f0:dc:6e:86:5e:ae:c3:ea:f4:2f:0a:fc:07:
71:a1:9f:12:c7:e6:ef:da:3b:e4:15:9a:53:b0:cb:
32:92:f1:9a:e6:22:38:0c:3a:7e:42:f7:18:5d:3c:
0c:f7:2c:b8:5b:f3:a6:db:b2:8f:e9:01:d0:7b:62:
5e:13:3f:b0:9d:ae:6f:a5:75:48:2a:54:ef:56:8f:
e8:90:47:c9:c4:75:f0:51:9e:2b:be:57:1f:e0:ba:
21:74:83:81:5d:23:c3:7f:17:d0:7f:7b:71:77:7e:
34:7e:5f:5b:1d:e5:f2:5d:6b:02:32:d7:d8:9a:a6:
f9:92:7a:b4:5c:0e:82:fe:b1:f6:a5:5d:51:46:05:
e6:dc:9b:dc:dc:12:0a:48:73:d5:34:3b:16:8b:0f:
75:9e:68:c9:9d:3f:b3:84:75:68:5c:5c:1e:e1:b2:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:94:46:93:17:49:01:60:02:7E:DE:FF:6A:6B:C7:45:52:34:E3:ED
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b7:cc:5d:cc:30:e0:e9:28:6f:49:49:4c:15:24:0d:94:ea:
c3:b2:fe:ef:0b:99:bf:69:cf:fa:35:d9:2f:12:a6:aa:29:a5:
7f:12:0b:f3:06:a9:fe:b4:ff:ea:b8:6c:89:42:c3:15:7e:ee:
b5:cf:8c:07:45:39:aa:17:60:31:08:24:06:71:30:10:34:c5:
4c:d3:81:b2:71:8d:ba:06:53:3f:f1:df:39:90:9d:93:8c:2c:
38:82:70:ad:45:9c:0f:f7:50:80:62:3d:52:52:ca:20:a8:86:
e6:e9:26:72:ad:f4:c4:3e:ea:62:a3:cf:ed:e7:3d:cd:50:70:
cf:90:2c:36:18:b4:fb:1b:4a:42:f5:e0:8c:e2:23:ef:c8:46:
cf:99:72:90:b9:47:19:6f:36:f1:fd:5c:75:74:74:94:70:2d:
75:c2:b5:d5:ff:7d:e6:e2:83:4b:05:39:72:e6:ff:8f:38:71:
ce:f9:71:33:89:14:24:3e:df:69:be:08:be:15:3a:b4:7c:2a:
0c:48:71:df:39:03:d8:fe:89:11:69:ca:66:22:3b:69:51:88:
70:c3:73:56:31:ad:3d:4a:12:7b:07:ad:3e:48:21:a6:77:11:
0d:49:d0:27:69:a9:1a:57:11:8d:ca:40:c0:5b:76:51:82:82:
cb:43:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:40:58 2026 by rpki-client