Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: MjMAtT3wnH7j1pMKWSi5e0YrDIu7csmp6A/EhYS/ds4=
Subject key identifier: F8:F0:E7:44:2B:D3:7E:D1:A3:61:89:E3:5B:45:3D:14:A2:56:CB:7C
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 01A1DF4C43014BADFB01089FB964A6740812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 13:01:19 +0000
Manifest this update: Sun 15 Nov 2026 13:01:19 +0000
Manifest next update: Mon 16 Nov 2026 13:01:19 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: 8EGI7fGzVlFqYucgct7KJ3j2s3KWWreLagueKIwHmyE=)
2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:43:01:4b:ad:fb:01:08:9f:b9:64:a6:74:08:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Nov 15 13:01:19 2026 GMT
Not After : Nov 16 13:01:19 2026 GMT
Subject: CN=f8f0e7442bd37ed1a36189e35b453d14a256cb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:3b:41:1a:35:bf:a9:5f:f0:4d:04:a1:ba:
ed:97:01:7d:cf:76:99:ca:e9:13:57:4f:96:25:ef:
3b:fd:d9:a5:b6:6f:34:5d:cf:06:93:19:e1:e5:cc:
cb:85:33:80:9c:21:52:4c:7f:2c:5b:06:29:99:9b:
c7:dc:b2:aa:bc:b1:61:14:e2:79:58:37:b9:9a:68:
6b:1f:ca:c9:0a:36:53:53:b2:ac:19:f6:76:b9:78:
6e:dc:6a:ce:bb:4f:ae:79:2c:f9:a7:99:e8:2b:c2:
d4:e0:df:31:2b:fc:02:c8:b1:33:59:02:78:fb:73:
ac:5f:7e:e1:03:5e:73:35:40:a7:ac:9e:e1:5f:f1:
00:60:28:c3:27:9d:e7:0e:2a:26:d4:14:2d:10:84:
c5:de:f3:fe:f4:3b:1b:36:77:7d:65:f1:41:b4:82:
30:4c:2e:2d:b1:c2:4f:a2:d3:19:14:25:b8:e2:ea:
35:e4:84:45:d1:a6:43:9d:40:0a:e3:6c:3b:82:ad:
5d:87:74:c3:34:a6:69:8c:5d:3c:49:25:dd:33:73:
7f:a1:3b:f4:38:95:6b:01:5f:a0:6c:b2:6e:f1:41:
d0:97:9a:73:0d:25:2f:14:91:49:ac:31:eb:fe:95:
68:a7:f8:4d:85:7d:c6:59:15:c5:f2:b2:2c:b9:5d:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:E7:44:2B:D3:7E:D1:A3:61:89:E3:5B:45:3D:14:A2:56:CB:7C
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e6:62:0b:b6:15:f9:2c:b9:95:3f:27:ae:38:9c:4a:09:e7:
d8:75:b2:bb:6e:c3:43:3f:9e:ff:48:93:d4:a1:ab:c5:24:06:
73:65:de:d9:e4:3c:a7:9c:97:47:a9:ac:be:13:be:2c:c0:bd:
1b:72:4b:8a:8d:7b:b6:b5:2a:ff:1c:db:00:1a:24:16:4d:bf:
87:d6:f2:43:89:77:d2:98:2f:aa:2a:73:a4:55:2e:32:a5:4f:
35:05:55:b8:4a:75:0e:2e:ba:c5:06:18:87:79:97:d1:d4:6c:
a5:14:4c:9f:50:23:c0:51:a0:06:e3:c6:05:d2:4e:65:00:f2:
86:23:9a:f7:f9:5a:8d:b0:1b:75:c2:29:66:55:e8:f3:49:9b:
f7:34:8c:65:58:6f:61:fb:d1:7e:9e:6c:66:42:bd:f1:5a:f5:
1e:5d:25:01:58:22:33:aa:14:e9:20:d1:d4:f1:e4:9d:1d:07:
a9:5a:ce:b3:1a:1e:0c:7b:90:be:d5:b9:69:cb:60:c3:82:17:
b3:45:c2:c8:ae:17:68:4b:92:d2:51:ec:2e:fb:f2:10:90:14:
79:cf:d0:eb:98:95:75:8c:2b:4f:a9:70:85:2a:1f:d3:17:b0:
2a:8b:c9:f9:c9:42:f3:45:0d:7d:32:3f:95:51:57:2e:7f:fc:
d9:ff:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:32:57 2026 by rpki-client