Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: i8rSqKpRKPYyr5kzAS9k6egnRiu4+SJ86sOtQQqUTZM=
Subject key identifier: FA:42:E9:7C:E5:16:1F:AC:69:D2:E9:71:21:7D:CD:F5:CD:2D:9D:AC
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 01A1C28AD3176FFEB0DF8728DF5AABC81B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 0ACA
Signing time: Mon 09 Nov 2026 23:00:40 +0000
Manifest this update: Mon 09 Nov 2026 23:00:40 +0000
Manifest next update: Tue 10 Nov 2026 23:00:40 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: rtNSvBXOGLwcg7d72Rrr51DzSvP1Sg5Ntd98SVxNowM=)
2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:8a:d3:17:6f:fe:b0:df:87:28:df:5a:ab:c8:1b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Nov 9 23:00:40 2026 GMT
Not After : Nov 10 23:00:40 2026 GMT
Subject: CN=fa42e97ce5161fac69d2e971217dcdf5cd2d9dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:0c:dc:5a:a4:0d:74:b6:4c:4c:e0:55:35:
ee:7d:f6:05:73:b1:45:1d:31:f4:0d:1d:ef:1a:e9:
16:bd:bd:e5:2b:55:73:b9:6c:c2:f0:2a:01:3c:83:
86:e8:c7:3b:63:7b:2d:7d:81:af:5e:cd:30:dc:bd:
92:09:eb:54:bc:21:97:24:68:37:ec:3d:e7:f8:4e:
dd:fd:17:b1:db:21:a3:5f:1c:30:7b:2f:c4:8a:74:
6f:31:69:7e:eb:5d:a4:e3:9f:31:c3:0c:19:e8:60:
4d:c3:70:7c:9a:80:48:bb:40:35:8e:a5:8b:d4:b7:
2e:e9:73:7c:79:da:47:31:d1:c8:5e:82:2b:f2:59:
80:1d:7b:6c:68:df:d4:18:c4:da:f3:a5:4f:d5:e0:
d6:f2:f2:4a:cf:e7:98:3a:75:19:8a:e6:7a:d5:92:
f7:8d:03:04:c1:28:cc:50:1b:a9:d9:48:f8:ef:0a:
40:b5:73:33:fd:6b:04:66:1a:9e:13:4d:a0:ff:d7:
cb:76:03:f9:ef:f3:82:09:d3:84:0f:1d:40:27:bb:
79:b1:ac:45:c9:63:6f:23:df:8f:9c:21:3c:6d:81:
2e:c3:c5:81:63:8f:de:6d:9b:57:3a:66:cb:65:0e:
b0:69:0c:74:82:ce:dc:95:29:84:19:b2:5c:1e:9f:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:42:E9:7C:E5:16:1F:AC:69:D2:E9:71:21:7D:CD:F5:CD:2D:9D:AC
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2e:aa:70:0a:d6:11:5d:00:ab:50:ca:9f:11:9c:a2:2c:1b:
02:14:22:a9:29:2b:78:4b:a2:cb:5b:59:91:bd:4e:b4:c0:90:
b5:e6:55:eb:a4:03:88:f3:c7:00:df:72:ca:c8:5d:d1:e6:9c:
55:20:d8:f7:e7:00:30:ae:e5:5b:44:0a:14:54:94:c9:f6:7c:
aa:98:06:2d:1b:81:98:9d:35:e6:97:01:1b:36:92:cd:86:92:
3a:94:03:02:30:d5:2e:18:76:b8:98:09:23:09:59:9c:a4:b7:
92:d2:22:7c:48:11:a1:38:11:79:fb:88:7d:30:2f:0e:29:09:
fe:85:16:f5:63:4b:75:da:70:64:0d:c7:f9:67:36:45:bc:98:
21:20:18:c5:09:0b:b7:34:b3:23:5e:73:53:ed:66:55:a0:e2:
ce:a3:1a:7e:09:78:41:61:2b:56:27:c2:17:59:48:f9:26:60:
b3:3f:fc:96:da:0e:e0:d9:ca:1f:a8:2d:1b:53:1d:aa:55:f7:
a6:1c:56:77:d0:ba:f1:51:75:bb:e7:df:3a:d5:10:32:f3:da:
49:fc:ce:41:69:76:4b:d0:86:cb:93:ad:52:50:50:0c:f0:67:
09:0c:17:f7:7f:d8:98:05:74:3a:d9:40:17:b0:30:a8:4a:1b:
2d:a6:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 04:49:01 2026 by rpki-client