Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: pKsfI8Y2PKaXa/WQrccHhttdT1/hGOKSjMjJWgxKQUw=
Subject key identifier: 1C:BD:1F:A1:6E:BC:F6:C6:43:B0:41:18:6B:37:77:05:1F:38:8E:31
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 01A1DFB9C30FBAB8434168261103EFE3D842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0E5A
Signing time: Sun 15 Nov 2026 15:00:55 +0000
Manifest this update: Sun 15 Nov 2026 15:00:55 +0000
Manifest next update: Mon 16 Nov 2026 15:00:55 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: Stl7v3Usi02lPVXzjJIzQ2SU4Q8G0vjWbC5iStCfAvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:b9:c3:0f:ba:b8:43:41:68:26:11:03:ef:e3:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Nov 15 15:00:55 2026 GMT
Not After : Nov 16 15:00:55 2026 GMT
Subject: CN=1cbd1fa16ebcf6c643b041186b3777051f388e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:50:94:c9:21:a1:24:d9:d7:a1:8f:33:dc:
58:42:e5:ca:1f:65:a0:ea:e7:ca:1f:6a:f9:0e:de:
59:3e:85:29:16:90:df:8e:f9:46:f6:4b:46:13:70:
42:5b:69:92:df:68:c0:2e:5c:84:54:9e:87:26:6e:
d5:c2:a8:12:4e:75:d8:d0:ae:84:bd:a1:37:a4:67:
c0:8e:91:8d:2c:6b:ca:e8:ee:9e:c1:88:d6:75:15:
e3:9a:d3:b0:22:5f:81:32:2d:22:fa:cf:e5:54:ac:
60:9b:57:a3:09:f0:f2:13:b1:34:94:33:50:3e:29:
c9:73:d9:b0:5d:bf:fc:49:cf:93:a2:1f:87:30:32:
f7:f8:ff:bb:88:b2:b9:4a:34:f3:82:b2:2c:63:ba:
51:f9:09:49:8d:39:2a:ff:21:ae:30:ac:91:a8:19:
3e:ad:0a:81:06:28:73:b0:ae:62:62:36:97:b7:f0:
cd:d0:a9:da:5c:74:3b:0f:07:2e:6b:15:03:41:bb:
2f:f1:cd:e2:8c:1f:da:1c:5f:dd:5e:86:a5:37:a5:
50:62:59:fb:bc:37:48:32:5d:22:cd:09:88:c8:df:
9e:49:61:b6:b5:4d:3b:88:0d:06:26:80:20:83:f8:
cb:e7:70:7a:d1:83:dd:f8:fe:d0:89:7a:53:3a:0b:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BD:1F:A1:6E:BC:F6:C6:43:B0:41:18:6B:37:77:05:1F:38:8E:31
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b7:7f:14:57:6c:50:df:29:bf:93:b5:dc:55:ff:11:de:a9:
15:1c:bc:1d:a1:41:6d:e8:1c:5d:a9:36:15:e6:b6:c0:46:84:
52:50:02:2c:38:f5:0e:19:82:23:12:a6:52:01:d0:37:20:c2:
48:77:17:d0:8a:bd:c3:f6:2c:d4:b0:c8:e7:08:ab:75:a0:c1:
c6:52:49:e5:89:81:87:87:90:e0:88:9d:3f:98:1a:22:db:af:
18:ec:9f:6c:b1:b6:5d:74:3a:a3:35:00:7b:fd:3a:54:0f:cb:
42:89:92:ec:4b:fc:25:32:7a:ea:95:99:f6:8f:d6:6c:78:9b:
92:b4:27:55:9c:a0:48:f3:d5:9b:f0:00:58:74:31:69:9f:82:
46:89:c1:04:3a:98:47:68:24:4d:91:15:d6:80:d4:ad:4b:a0:
24:e9:69:cf:fc:88:b4:74:61:29:74:43:f8:f3:d4:38:8a:01:
8f:62:38:fb:14:1d:f5:4e:f4:1a:6b:18:45:d3:79:ae:03:e7:
1f:d2:2a:e9:2b:e2:91:49:41:7a:94:58:46:7d:94:ab:04:ea:
c0:eb:aa:5a:02:7a:36:f1:cf:40:32:e2:43:0d:97:a5:01:d8:
17:b7:60:2c:c6:61:e7:cf:a0:6f:c8:76:ba:f0:eb:e4:40:9e:
c1:f2:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:04:47 2026 by rpki-client