Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: f3mQ9ag0GzkoozMbGOntia+ehPM4ang5Uc6z6HaODSA=
Subject key identifier: EF:61:4B:6C:D2:2A:85:43:A5:77:04:A1:43:FF:9C:16:24:B9:54:39
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 01A1DE03348AA1535E1091DCD02702C9A5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 07:01:54 +0000
Manifest this update: Sun 15 Nov 2026 07:01:54 +0000
Manifest next update: Mon 16 Nov 2026 07:01:54 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: QsnhAJiMVwqDWs4/CvMuCWKRUlVfGFk1Ph9VwjspgE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:34:8a:a1:53:5e:10:91:dc:d0:27:02:c9:a5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Nov 15 07:01:54 2026 GMT
Not After : Nov 16 07:01:54 2026 GMT
Subject: CN=ef614b6cd22a8543a57704a143ff9c1624b95439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7f:65:dc:29:73:78:51:e3:dd:2b:2d:0d:f1:
40:bd:a6:9e:57:1f:a4:5f:40:6e:c3:db:04:5e:22:
8d:45:70:d8:6c:6c:f4:03:dd:c7:26:83:a1:fd:0d:
8e:65:89:f4:99:b6:8a:05:66:ed:58:8c:2a:d9:15:
c7:17:a9:be:ba:00:9d:b0:0a:32:72:5b:24:91:39:
3a:ed:05:25:88:cf:1e:b5:11:3a:a0:b8:f1:ca:3e:
b0:a2:88:51:b0:ca:be:ab:cd:7d:6a:ff:86:88:b6:
cb:dc:79:e3:c2:c9:88:3e:89:8c:d4:3a:19:d7:9c:
07:63:92:28:68:70:e1:df:1c:84:0d:01:25:5d:46:
fb:74:78:bf:a4:d8:24:34:fd:9b:23:d5:ca:af:12:
6b:04:77:44:95:fc:8f:a3:5a:59:18:16:d0:a2:5e:
a7:ee:07:ba:5e:31:53:58:9f:fc:09:b5:62:b0:26:
ff:6d:94:50:6a:16:9c:89:e0:86:6c:12:65:76:3c:
2a:e0:57:0c:85:b4:5d:a6:7e:bb:82:05:e7:c5:b9:
b5:2e:d7:12:5e:ff:a3:62:8b:0c:c3:c4:83:52:20:
92:bb:69:56:e5:c3:b9:a7:d3:8b:b7:cf:08:36:96:
d3:6f:c1:ec:90:4e:d6:bd:c9:8f:55:55:2e:53:d9:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:61:4B:6C:D2:2A:85:43:A5:77:04:A1:43:FF:9C:16:24:B9:54:39
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4c:98:27:6c:31:c6:ab:f1:b2:2f:44:f5:7e:96:a6:d3:8e:
30:22:de:04:d6:7f:e9:12:c4:e7:b3:36:35:34:ac:dd:54:83:
60:23:d2:d5:e2:59:44:14:c8:0c:8b:7f:1f:49:02:34:d3:1c:
47:70:6b:f0:54:36:0a:9c:3c:82:c5:ba:08:60:b7:27:d2:cd:
a2:0f:0a:69:86:db:ae:68:d2:59:4a:8c:21:72:da:81:e8:d8:
2b:fb:fb:7e:3c:a3:44:89:0e:ec:40:75:8a:f9:a9:13:fd:fb:
86:6a:a7:51:db:34:af:c5:ee:62:99:25:b9:4b:09:5b:05:df:
15:7b:92:79:a5:3b:eb:79:8e:b3:5e:9a:7d:c3:64:65:c6:cf:
b3:27:6b:50:b5:46:f6:19:95:8d:5f:0c:1f:ab:33:71:62:cd:
28:6e:e5:9b:99:02:c9:15:94:85:b9:5f:0b:60:cd:f0:76:bd:
40:fe:37:24:f8:00:01:92:d6:5c:ae:99:2d:fa:ad:62:ab:48:
f6:8c:02:0d:16:b5:bd:65:bc:95:56:42:7d:42:68:f7:44:b8:
60:07:c4:f1:c1:e3:af:56:31:ac:ab:9b:8c:98:1f:8d:1c:02:
c8:c6:39:80:d8:28:67:ca:13:b8:dc:d9:71:1d:5a:ba:a1:ad:
10:fb:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:43:57 2026 by rpki-client