Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: YJwzInW8tKaD2vtGFDBWTNXPQBEkWwbqqIrHq04TC20=
Subject key identifier: D5:2B:EC:E3:9E:5B:3F:F9:57:73:7D:B5:60:A8:0F:78:8C:AE:97:0B
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 01A1DD5E23ABE8ED39A3A8F73158172E4520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 16F1
Signing time: Sun 15 Nov 2026 04:01:36 +0000
Manifest this update: Sun 15 Nov 2026 04:01:36 +0000
Manifest next update: Mon 16 Nov 2026 04:01:36 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: 74iISRWpcD4dWYdZQkFXh/zFprVobYVjlaoar5M9IR8=)
2: DJletBM0tIFFFJ-dypu-DHrFceU.roa (hash: bByHr5fnzYQ5KdGrvk8CzGr4/2zv/8Vt4xxo1eVu+A0=)
3: Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa (hash: lv1y9n6SxRqEqaqKtDtqJfGE7WxXtWgMt7j43NvbuS8=)
4: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:23:ab:e8:ed:39:a3:a8:f7:31:58:17:2e:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Nov 15 04:01:36 2026 GMT
Not After : Nov 16 04:01:36 2026 GMT
Subject: CN=d52bece39e5b3ff957737db560a80f788cae970b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:5d:d9:d9:fd:37:79:5e:f6:eb:1b:c6:bf:
48:62:38:be:8f:8a:59:4f:12:57:62:01:2e:1e:f8:
24:e7:86:68:a0:85:e0:ba:96:43:c9:86:77:a4:3d:
50:3a:c3:dc:ee:7d:26:a3:19:33:39:f6:16:da:dd:
11:f9:c5:5f:44:f8:e3:83:cf:ca:df:92:e0:18:37:
6a:58:9a:1a:25:22:0d:89:45:18:64:66:57:2d:65:
19:bd:9d:c7:4b:99:15:ff:7c:af:87:99:b7:a2:50:
d2:3e:90:9f:fb:f0:9c:2b:33:f0:ce:03:80:4c:d8:
b1:63:97:2a:ea:59:8c:ea:97:68:85:0a:d4:9b:b0:
2c:2e:07:6d:c4:28:2c:a6:ea:d6:41:7c:35:9f:37:
c8:5c:34:30:19:08:04:0b:09:74:d9:05:12:01:9d:
30:cd:df:24:1c:02:ac:5b:8d:b3:3a:da:39:89:0e:
91:34:33:b1:a2:aa:fe:f6:da:b3:e9:7f:6c:5a:c8:
16:84:a0:0f:1a:ab:a1:66:59:79:b7:42:f5:5e:95:
75:89:9b:17:fc:5f:9f:bb:71:6f:ed:c0:17:79:f0:
de:b0:02:d6:d5:b2:24:26:6b:50:f8:3d:f2:24:97:
3e:0d:d9:49:98:57:71:88:9f:68:24:6a:8e:01:17:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:EC:E3:9E:5B:3F:F9:57:73:7D:B5:60:A8:0F:78:8C:AE:97:0B
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cb:1d:7d:4e:80:ae:ee:ad:d9:25:e0:32:d9:18:46:7e:1e:
84:c9:26:7a:d2:a9:91:82:57:26:6c:4c:6f:f0:98:7e:3b:a7:
3b:58:64:6d:aa:f1:f2:e2:0c:0e:2e:33:b1:ab:d5:ba:7f:5a:
be:4f:b2:58:58:57:66:28:18:3f:bc:b9:24:60:33:6c:fd:99:
0f:0a:0c:4f:96:96:4d:c4:6e:67:17:5f:c1:45:cb:b2:b7:7b:
88:ed:b9:dc:40:d9:0a:46:11:a8:d6:f4:33:fb:1d:ef:ba:e3:
77:5d:33:b2:e9:30:bc:0b:ed:b8:6c:85:41:79:d3:2d:43:02:
27:81:51:27:00:06:f0:10:f4:61:07:0d:45:3c:4b:31:e0:30:
ee:7d:4d:28:61:60:11:f1:08:32:bf:d9:80:38:d6:e2:7e:22:
63:63:71:8f:51:8c:c5:f3:21:17:d0:70:57:37:fc:88:82:e5:
59:59:40:e9:1b:61:09:e2:75:d1:6f:81:e8:60:c2:46:69:89:
26:9e:a9:74:57:b0:f9:ed:09:d6:22:19:be:fb:ac:b5:50:a6:
38:61:8f:96:6d:5f:a2:4e:f2:7f:96:f9:a9:df:36:96:c6:8e:
ba:30:a4:db:52:d0:1e:a1:ff:93:ba:82:6e:14:b0:69:38:bf:
76:ba:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:15 2026 by rpki-client