Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: efDl/di50tjRZhtjb4ScgMBJQ2+kuJsV+oIq2VpsNTQ=
Subject key identifier: 1E:6B:E6:A8:14:4E:5C:F1:48:D8:5D:AA:90:6C:42:7F:F2:DF:E4:0D
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 01A1E05ED99CF9F190D97DC1CFC59F0BCB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 10A5
Signing time: Sun 15 Nov 2026 18:01:14 +0000
Manifest this update: Sun 15 Nov 2026 18:01:14 +0000
Manifest next update: Mon 16 Nov 2026 18:01:14 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: 2fbA5p/rWkGiP+PXVGIf6ara6WD5jbU0jhbMhMHArL4=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5e:d9:9c:f9:f1:90:d9:7d:c1:cf:c5:9f:0b:cb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Nov 15 18:01:14 2026 GMT
Not After : Nov 16 18:01:14 2026 GMT
Subject: CN=1e6be6a8144e5cf148d85daa906c427ff2dfe40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:ca:27:ef:5e:59:64:0b:b0:c9:bc:8c:ae:
a3:b2:a6:aa:d0:91:9a:df:14:25:46:96:65:46:f5:
89:31:51:04:6c:d7:d1:61:3c:9a:be:11:c7:3c:9b:
0b:af:a3:fd:b0:26:ca:3a:15:08:1c:a6:34:d6:ea:
5f:98:dd:e9:47:da:a7:1c:6a:e3:2d:63:15:3c:0b:
f6:90:bc:58:f4:77:65:c1:75:26:93:5a:1a:3e:18:
da:5d:02:a4:1f:89:55:30:d9:82:80:7d:ba:bc:04:
a8:10:87:1b:58:71:11:da:ce:12:43:59:81:bb:8d:
13:7c:74:8a:c6:71:6f:0b:5d:0b:06:cb:a0:b4:9e:
3e:df:e1:cb:08:40:1d:3c:64:bf:47:a0:2a:6c:5d:
4b:89:b0:e2:e5:bb:6e:ee:45:14:2d:fa:57:a1:21:
ee:b9:50:84:1e:d5:1b:7d:1d:1e:e1:83:9b:16:4a:
e5:49:39:48:8e:8b:f8:98:88:9f:58:c4:aa:9d:f8:
f9:61:1c:dc:2e:b8:28:2b:07:ba:6f:5c:e5:1d:89:
9f:0f:78:fb:36:76:c2:55:9c:4d:b1:b1:7f:a3:c0:
38:04:af:ff:2f:8d:01:ab:3e:df:c1:e2:b3:f8:67:
ea:d4:dd:62:c6:7f:3d:cd:f8:b8:f3:eb:f3:5c:6d:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6B:E6:A8:14:4E:5C:F1:48:D8:5D:AA:90:6C:42:7F:F2:DF:E4:0D
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9c:ea:03:00:93:3c:29:d7:a1:70:27:2a:75:94:8b:c1:81:
37:00:b8:71:1e:0e:c2:20:d3:9d:cb:9d:5c:4e:c0:2a:7c:af:
20:ed:c8:88:d6:35:2a:b3:1a:4a:d5:01:ba:61:13:7f:fe:f6:
82:cb:ba:3b:fe:61:c8:11:ee:2b:ca:39:94:c8:7e:ce:df:2b:
22:d9:61:4f:71:aa:ba:35:a0:2f:2b:3e:4c:49:36:4c:f6:f3:
8a:31:8c:4d:e7:8e:81:7d:b9:67:1f:c1:e9:aa:0f:18:9f:56:
11:b1:c7:b8:2d:aa:d0:bd:2b:43:ef:5a:f1:26:eb:c4:1d:b8:
c7:f1:6e:d8:71:cf:23:c1:f3:ff:6d:94:7c:54:d9:1b:85:aa:
23:9e:e5:4a:54:9e:b0:ec:f2:36:cb:9e:90:91:cf:2a:90:de:
f8:d8:78:c2:78:df:42:b3:b4:95:7f:e0:f1:4c:9d:1f:13:ac:
fc:c2:65:b0:08:1e:7c:6a:4a:26:fa:20:5f:7b:59:90:50:a2:
54:82:66:1d:51:d6:78:94:55:63:0c:43:3d:77:d0:11:b2:66:
dc:f5:f8:a8:09:c0:6f:ea:84:e0:57:e3:22:bf:ba:c4:8f:1d:
86:45:cd:e3:ed:9a:94:d3:0d:b0:dd:2b:b9:af:c4:8c:0f:8e:
65:c1:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:26:40 2026 by rpki-client