Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
File: f5fak4IA5C6oDDSCgLD2IW2dBFg.mft (raw, json)
Hash identifier: ugrmY/EYSlzOwyPMpXSvmWDSFQqzDlYieOQsQSV+XMY=
Subject key identifier: 5F:30:54:0B:2D:6D:90:DE:22:EC:F7:5C:87:07:3D:7B:BA:37:2B:16
Authority key identifier: 7F:97:DA:93:82:00:E4:2E:A8:0C:34:82:80:B0:F6:21:6D:9D:04:58
Certificate issuer: /CN=7f97da938200e42ea80c348280b0f6216d9d0458
Certificate serial: 01A1A93A04B5A3F1D7D708DA1D608F48568B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
Manifest number: 2D
Signing time: Thu 05 Nov 2026 01:01:54 +0000
Manifest this update: Thu 05 Nov 2026 01:01:54 +0000
Manifest next update: Fri 06 Nov 2026 01:01:54 +0000
Files and hashes: 1: 7YMqYmtUJ4_Y0Wq2iJ-eIKvQ0NU.roa (hash: Y8RJARbtiP6gnbhn+dWW5386wCY8cNnyD8nuruEw4Jg=)
2: _sh4thc09FjUhaJ-CIlOqE5ACws.asa (hash: gGKwfbzOsuFNMjqj35SauYDnxOtxjx9w9YhsbYtE8Zs=)
3: f5fak4IA5C6oDDSCgLD2IW2dBFg.crl (hash: 5ZtJ59haaQHA/Rs+gW6I2AT9JSQWg2BHbqTxO2SDUrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:3a:04:b5:a3:f1:d7:d7:08:da:1d:60:8f:48:56:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f97da938200e42ea80c348280b0f6216d9d0458
Validity
Not Before: Nov 5 01:01:54 2026 GMT
Not After : Nov 6 01:01:54 2026 GMT
Subject: CN=5f30540b2d6d90de22ecf75c87073d7bba372b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:fc:f8:61:9e:f0:d3:19:4b:12:bf:5f:48:
e8:c0:2c:ba:50:83:32:9d:03:0d:7a:f0:34:4a:6e:
29:4e:3a:be:be:df:4c:05:9d:bf:ea:20:a0:ec:19:
5c:54:ac:95:40:71:5d:a4:ed:f1:d1:9a:8e:73:7a:
47:81:51:7c:4b:d2:0a:58:78:11:e8:12:9f:ae:fb:
e1:81:68:27:17:9e:61:40:2e:17:f0:eb:00:b1:5d:
5b:6e:74:16:b8:70:6b:a2:84:41:20:1e:4e:d6:8b:
88:98:cf:76:97:ec:7b:0f:8e:e3:58:32:a4:39:65:
c5:d9:04:82:c4:af:fb:dd:a2:82:f1:a0:19:76:2a:
bc:02:bb:b6:74:89:e5:66:b9:cb:a8:e0:f3:74:88:
31:05:08:ac:fc:5d:f3:4c:29:7a:55:58:ac:8d:95:
50:f8:d4:82:81:27:6a:46:6d:f1:4e:7a:32:a1:80:
01:97:5a:2f:d4:a0:62:fc:55:bb:4a:f1:f6:17:02:
5c:10:e8:57:13:f6:76:f3:5e:5b:c7:2b:66:9e:fa:
6c:cc:07:a0:10:3c:04:13:d8:93:c6:3b:8f:0c:62:
7d:91:22:93:34:72:60:fc:81:8e:92:89:bf:8d:3f:
67:6d:99:82:5a:f1:c1:f8:13:d0:01:7c:d0:41:d2:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:30:54:0B:2D:6D:90:DE:22:EC:F7:5C:87:07:3D:7B:BA:37:2B:16
X509v3 Authority Key Identifier:
keyid:7F:97:DA:93:82:00:E4:2E:A8:0C:34:82:80:B0:F6:21:6D:9D:04:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:35:e4:ed:98:1b:e2:c2:10:4d:d3:46:20:52:7c:3a:ad:60:
54:6e:bd:c0:4c:74:63:5e:90:34:3a:48:69:70:88:64:67:a2:
68:18:f2:c8:2e:09:13:24:92:31:5a:c8:85:af:9a:24:bf:10:
45:12:bd:58:09:40:88:fa:d0:bb:8b:1d:58:97:89:5c:37:86:
c2:4c:25:18:a3:78:86:44:75:24:19:11:4f:61:ad:96:18:4a:
45:a4:26:99:8b:df:6c:0b:00:f1:16:41:db:a2:2e:89:09:f4:
21:61:8a:78:9a:af:83:98:33:99:54:69:59:e0:20:32:58:4e:
d1:a1:f2:22:62:1b:51:58:13:fc:7a:90:82:67:69:5e:a3:8b:
9b:91:5b:bc:73:59:30:49:91:3d:b8:77:b6:43:3b:b3:70:9a:
bc:32:cb:62:25:2a:b7:7c:8f:e8:2e:63:10:f9:35:c8:5b:83:
57:39:b4:c0:f5:58:3c:15:2a:a6:11:94:a1:b5:cb:c0:8b:da:
f6:a5:4f:93:2b:c4:47:cb:aa:56:33:ee:05:ec:c7:a7:c9:b4:
0b:4a:dc:67:4a:80:89:ca:d5:ba:ae:32:e6:16:d7:e4:7e:15:
f3:4a:61:f7:e0:1c:cd:ca:ad:c8:de:0a:ba:7d:f1:ac:5f:63:
c7:9f:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:56:20 2026 by rpki-client