Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File: pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier: BA6LhzM65PVQMr3NI72R7U4SKErS1/34CI1tzVeXLsk=
Subject key identifier: BE:9F:8A:3C:4C:5E:66:AC:8C:2C:ED:26:0D:3C:80:51:93:EB:EC:20
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer: /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial: 01A1DC82852FC652A8AD7AA603735ACA6831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 00:01:43 +0000
Manifest this update: Sun 15 Nov 2026 00:01:43 +0000
Manifest next update: Mon 16 Nov 2026 00:01:43 +0000
Files and hashes: 1: 7y0LOepFUcA8OxNwETjP06eOGqo.roa (hash: FtFNn3fJLuNl3O3fnntEfGbv+32KsAHr3SqeYeHUCL0=)
2: CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa (hash: UAHd42O2KjlmEGP6gn2QJSSuqJWzfTB5HZHwnRpiaVs=)
3: _UUS3q5BecQsPN01euTz6ZXEA3I.roa (hash: /n6cdrP+/xfyaY1mRVl4Rp3lZj1gk+c55nEDkiLkTlI=)
4: makv0shcZ5kNgnoatV93mdzUDzA.roa (hash: pcme59je8U1s3r4CfES9LEZanBL2hRJGysIwX84CTmo=)
5: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: 3IxvX//KO0THTg8y5xF/cLfgDKofGyNKAPK2M/8SPHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:85:2f:c6:52:a8:ad:7a:a6:03:73:5a:ca:68:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
Validity
Not Before: Nov 15 00:01:43 2026 GMT
Not After : Nov 16 00:01:43 2026 GMT
Subject: CN=be9f8a3c4c5e66ac8c2ced260d3c805193ebec20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:d9:bc:d6:f8:a9:f8:15:a1:b7:73:82:12:
19:71:83:19:3c:b9:a2:a1:07:80:ef:ea:29:e2:e5:
b6:4f:ee:71:c9:8d:e2:34:5b:01:66:c3:13:6e:d6:
ff:df:d7:2e:6e:73:13:07:02:88:73:69:14:7e:ae:
c8:7e:3b:66:6c:21:8f:16:d0:70:33:d7:1b:38:1e:
94:82:3b:91:10:62:03:50:cb:b4:99:76:62:9b:c7:
12:89:8b:6f:ab:37:72:14:87:4a:92:fa:c8:56:15:
45:08:5f:60:e8:31:14:cb:cb:1c:db:a5:48:75:8d:
1e:c3:05:cf:08:7d:52:19:6a:2f:98:96:af:d0:4a:
8e:27:18:41:ba:b8:d0:c1:38:16:8f:7f:dd:aa:46:
60:c6:a7:68:03:61:1c:54:34:b9:20:e6:76:8a:49:
21:72:a6:58:ff:a8:85:eb:14:56:29:d3:36:f1:52:
a7:18:5e:71:8c:a5:1f:f4:9b:13:1b:0a:41:71:5b:
64:88:99:e3:ad:39:28:85:0d:c7:90:e2:8a:f9:ac:
ae:31:57:7e:aa:f6:78:ad:77:89:b9:24:33:ba:d5:
4a:c3:4a:17:bd:0a:3a:91:40:15:c5:ac:6f:ef:01:
db:7e:07:72:8b:fe:92:d7:a2:9a:58:11:e9:39:d4:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9F:8A:3C:4C:5E:66:AC:8C:2C:ED:26:0D:3C:80:51:93:EB:EC:20
X509v3 Authority Key Identifier:
keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:35:d4:03:88:c1:4d:1b:e8:86:17:a6:e3:33:47:0e:5e:0f:
f4:5f:a1:e1:64:eb:58:65:85:f4:5a:8a:63:ae:b3:8b:e3:81:
db:d2:99:d5:02:92:5d:2d:c9:e7:13:d7:cb:b5:bd:3c:41:28:
bb:f8:5c:cb:1c:bb:d9:81:60:55:a9:3a:39:70:8e:d7:b3:66:
d5:f0:9d:86:e7:df:ae:5c:fb:52:f2:30:8d:09:5c:6e:b6:0a:
21:e3:23:17:60:6a:c3:f6:4b:ed:b5:f9:55:90:b5:81:ba:a2:
0d:91:d6:e0:c3:86:e2:ff:18:c3:3a:41:a8:c9:33:2e:e5:b2:
03:bd:9d:fe:c1:b1:46:a6:9d:53:ee:a7:bd:71:bf:b2:cc:d1:
1a:64:c3:c5:83:80:53:4f:f0:ea:dc:6c:c7:7c:e8:4a:05:ad:
be:72:ba:6c:49:db:c5:4c:8f:08:7e:d5:be:02:86:e0:a1:4c:
a1:e4:f5:69:0b:72:10:5c:fe:d4:1d:c8:ac:98:0c:1e:cf:70:
31:c2:2c:e9:fb:3a:ec:02:ef:23:c2:32:5d:c8:26:57:d0:e5:
79:76:02:4b:03:5f:0d:97:09:53:24:b8:04:ec:c7:2c:83:19:
9e:27:66:84:0b:ed:c9:7b:06:aa:f2:21:5a:01:fd:59:07:6e:
f7:b6:85:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcgoUvxlKorXqmA3NaymgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjZkODMzNzc3NmM5ODc0NmJkMjMxZTY5ZTE4NWRiMmE5
YTViZTIwHhcNMjYxMTE1MDAwMTQzWhcNMjYxMTE2MDAwMTQzWjAzMTEwLwYDVQQD
EyhiZTlmOGEzYzRjNWU2NmFjOGMyY2VkMjYwZDNjODA1MTkzZWJlYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMjZvNb4qfgVobdzghIZcYMZPLmi
oQeA7+op4uW2T+5xyY3iNFsBZsMTbtb/39cubnMTBwKIc2kUfq7IfjtmbCGPFtBw
M9cbOB6UgjuREGIDUMu0mXZim8cSiYtvqzdyFIdKkvrIVhVFCF9g6DEUy8sc26VI
dY0ewwXPCH1SGWovmJav0EqOJxhBurjQwTgWj3/dqkZgxqdoA2EcVDS5IOZ2ikkh
cqZY/6iF6xRWKdM28VKnGF5xjKUf9JsTGwpBcVtkiJnjrTkohQ3HkOKK+ayuMVd+
qvZ4rXeJuSQzutVKw0oXvQo6kUAVxaxv7wHbfgdyi/6S16KaWBHpOdR3XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6fijxMXmasjCztJg08gFGT6+wgMB8GA1UdIwQY
MBaAFKVm2DN3dsmHRr0jHmnhhdsqmlviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgt
MWI3NTg2N2U4ZGZmLzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgtMWI3NTg2N2U4ZGZm
LzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjXUA4jB
TRvohhem4zNHDl4P9F+h4WTrWGWF9FqKY66zi+OB29KZ1QKSXS3J5xPXy7W9PEEo
u/hcyxy72YFgVak6OXCO17Nm1fCdhuffrlz7UvIwjQlcbrYKIeMjF2Bqw/ZL7bX5
VZC1gbqiDZHW4MOG4v8YwzpBqMkzLuWyA72d/sGxRqadU+6nvXG/sszRGmTDxYOA
U0/w6txsx3zoSgWtvnK6bEnbxUyPCH7VvgKG4KFMoeT1aQtyEFz+1B3IrJgMHs9w
McIs6fs67ALvI8IyXcgmV9DleXYCSwNfDZcJUyS4BOzHLIMZnidmhAvtyXsGqvIh
WgH9WQdu97aFdw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:47:36 2026 by rpki-client