Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: UzG6cgG8uKT4xSrCc1L+fblpq5myEMyViBLPGFg20cc=
Subject key identifier: BE:6B:F7:D8:E6:DB:E2:EE:9D:FA:AF:4F:75:BF:6E:CD:55:16:6E:2D
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 01A1DEDEDC67B425D8D16458FE03DE8771C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 11:01:49 +0000
Manifest this update: Sun 15 Nov 2026 11:01:49 +0000
Manifest next update: Mon 16 Nov 2026 11:01:49 +0000
Files and hashes: 1: 5e54oDyTiKHtp31vWJTP5XM-iV8.roa (hash: CoEKmyPCbM+6ZClHX32yt6+iaogZBQ0nDalNysMTb0w=)
2: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: GW0g+UKFPShlQnOtAO63Nxyo9ZyGdBnqtDJQYPsUFos=)
3: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:dc:67:b4:25:d8:d1:64:58:fe:03:de:87:71:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Nov 15 11:01:49 2026 GMT
Not After : Nov 16 11:01:49 2026 GMT
Subject: CN=be6bf7d8e6dbe2ee9dfaaf4f75bf6ecd55166e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:97:d2:9c:25:aa:89:e8:56:ac:b7:58:61:
4a:74:bb:26:04:bc:3d:ed:bb:7e:1f:f7:f3:97:2f:
4d:b2:7e:b9:b1:57:0d:35:fe:d0:0a:68:3e:27:99:
e1:05:23:b1:b5:a6:6d:fe:03:a5:e3:f1:57:a1:85:
5b:40:4e:ae:56:95:ec:c5:36:64:64:d6:da:11:c0:
5d:c5:6c:c1:52:8b:93:2a:83:97:27:1c:c9:73:93:
5a:e7:1c:c7:fe:78:13:6e:ff:60:82:1b:f1:a6:d5:
b0:97:e1:82:2c:ab:f9:93:e8:e3:9e:1a:f1:19:d2:
64:e8:42:4c:fd:7d:79:3b:50:2d:2b:aa:c7:4d:cd:
fb:4f:f0:f7:8d:82:54:d2:ec:c9:0d:f0:bd:16:88:
37:85:77:27:02:a1:65:82:fa:8c:6e:5f:57:18:10:
e3:cc:4b:44:0c:66:22:e7:33:49:39:cc:fc:55:ed:
c0:4c:c3:8b:15:4a:69:df:aa:cb:80:d9:d9:ee:2b:
5c:18:a5:ca:b2:1a:b4:ff:61:3c:c6:60:95:dd:b6:
97:af:51:59:e7:d0:ce:3b:97:7c:f3:be:b8:a6:af:
99:e4:84:83:38:84:e4:10:8b:37:73:f1:4c:3e:4d:
f2:c1:6b:d0:07:3e:58:2a:b8:bd:7d:0d:95:ea:87:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:F7:D8:E6:DB:E2:EE:9D:FA:AF:4F:75:BF:6E:CD:55:16:6E:2D
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f8:4c:0b:31:c1:77:fb:28:61:d4:63:41:54:e5:17:d1:76:
90:0d:1a:bd:33:25:97:fb:3f:27:96:a1:0a:78:8b:c5:ab:92:
5f:b5:8e:31:f1:41:be:a6:78:4f:a3:bc:1b:bf:e2:79:cd:cd:
0c:7e:a2:4b:41:ee:02:d8:62:81:a8:ea:ae:09:e1:35:b9:9f:
88:cf:6b:74:e6:cd:44:e1:81:b7:a0:03:ca:ed:b2:d7:1f:ba:
25:6d:5c:26:d8:4b:0f:a1:a6:14:16:9d:bf:de:18:a2:1c:c1:
59:47:f2:b2:17:98:80:5a:14:0a:26:21:1c:ed:83:3f:80:6e:
3a:68:bc:e9:72:e9:57:26:c4:5a:92:9a:6e:45:8c:29:2d:91:
bb:d9:31:da:0d:98:95:0e:50:7a:c4:be:15:84:4e:34:b9:67:
f6:1d:0e:f0:f5:bd:49:7b:f3:38:12:e2:46:76:4a:1f:6f:66:
c3:48:03:9e:54:fe:45:74:ac:21:30:96:5a:35:2d:a3:63:cf:
61:5f:e6:4c:23:b7:62:ec:05:b7:46:48:9c:ed:f1:7d:8c:a8:
65:75:20:f3:3b:59:97:cc:a1:09:ec:78:b2:f6:a6:e7:08:a7:
0a:b4:52:39:57:b4:90:b3:03:67:8f:ae:04:a2:f3:6d:03:26:
69:6b:96:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:21:07 2026 by rpki-client