Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: pLv6sUiAf90qlWj/ZUbmtgxj4UoIeq/gCtGReVRjPrg=
Subject key identifier: C3:AE:C6:97:D5:F4:C8:1F:24:AB:39:3C:67:C8:D5:E9:3E:1C:EB:D4
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 01A1DDCC17134DD64391C03860852F8207BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 06:01:42 +0000
Manifest this update: Sun 15 Nov 2026 06:01:42 +0000
Manifest next update: Mon 16 Nov 2026 06:01:42 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: V+0Zkk0N/NtLSjk/dhaqPocr7mUMFXJDIZ+ONLlTtU0=)
2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:17:13:4d:d6:43:91:c0:38:60:85:2f:82:07:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Nov 15 06:01:42 2026 GMT
Not After : Nov 16 06:01:42 2026 GMT
Subject: CN=c3aec697d5f4c81f24ab393c67c8d5e93e1cebd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:bd:a2:f7:6e:a5:11:c8:d1:8d:fc:99:2b:
f9:50:1f:6d:6a:c0:75:27:fe:cf:d3:c1:2c:90:fb:
b3:c5:0c:2b:b5:5b:25:e2:aa:9d:8f:f9:f8:02:a6:
d5:e4:8e:01:df:ed:15:82:cb:94:f0:21:b2:92:8c:
30:5e:bd:be:14:1a:ef:2e:90:12:ad:23:2c:d9:d0:
99:b8:66:1b:dc:b8:e7:e1:00:60:6d:de:e3:8c:95:
98:55:21:ac:0d:b7:29:d9:65:1d:91:81:d4:4c:d4:
7f:ed:33:35:36:31:b8:db:d5:c6:47:87:eb:21:0c:
da:53:c9:ba:bf:4b:37:ef:16:95:9e:9f:79:9e:3e:
1d:60:f2:74:9e:4b:d8:81:f8:53:53:d8:76:a7:00:
29:9c:3f:35:94:f2:49:f3:f5:6c:04:b2:e5:00:59:
61:20:0d:2f:a2:e8:32:0f:6c:85:aa:30:b7:ed:76:
5c:cf:25:be:fb:e3:e8:ca:47:4e:28:9f:9d:30:95:
90:e4:1c:2a:a1:85:49:b1:c5:97:05:2d:41:a3:c4:
4d:63:42:3c:da:40:4a:aa:3e:01:f1:a0:93:69:74:
1d:23:32:9e:49:93:4e:c7:71:cf:e9:14:79:fe:cf:
2d:40:46:0f:35:ba:01:37:d7:a1:4f:87:8f:bf:0f:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:C6:97:D5:F4:C8:1F:24:AB:39:3C:67:C8:D5:E9:3E:1C:EB:D4
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3c:6c:80:39:41:de:d2:3a:ab:71:63:38:1d:00:67:5b:c4:
59:38:d7:4c:24:d7:c0:ee:cf:a0:8f:f3:18:c0:ff:8e:d4:25:
ea:d7:c5:38:58:f5:e3:c2:3d:6c:73:8e:d0:3b:db:43:59:ed:
b8:1d:2b:f2:f6:86:f6:ac:a0:44:7a:77:d3:c1:db:1b:0c:62:
4b:1c:0e:53:ae:7d:0d:7f:97:54:6a:e7:0c:0d:5b:b4:d4:2b:
0c:d6:db:d4:a0:ef:81:c2:9a:1c:c0:ec:c7:c8:49:fc:9b:7b:
64:97:bb:cd:65:55:92:b3:89:69:dc:6e:68:96:23:85:7f:dd:
5d:5c:ed:6b:51:2b:27:0c:b3:3f:91:5d:ab:a6:b4:9b:21:54:
1c:45:06:96:7d:68:8c:00:75:cb:cb:70:c8:f5:0c:78:2c:64:
f2:cc:37:16:d8:e0:66:31:48:43:45:95:b2:31:29:a2:9a:3a:
6d:df:23:f2:b8:d7:51:87:37:b1:76:b2:58:e8:5d:cf:26:b4:
c4:f2:10:ea:1d:3f:ee:74:f7:a4:0a:78:96:a2:d8:a5:50:cc:
98:75:69:1f:19:25:3e:78:cf:8d:55:b8:31:f7:19:95:38:de:
dd:29:3b:d1:83:32:10:7d:2d:0e:96:a6:c1:75:ec:25:f8:40:
0b:f8:69:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdzBcTTdZDkcA4YIUvgge/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NWQwYWRjMjk0ZGQzNjZkZjZhZGE4ODAxMzRkYmQwZTY4
OGNjZjcwHhcNMjYxMTE1MDYwMTQyWhcNMjYxMTE2MDYwMTQyWjAzMTEwLwYDVQQD
EyhjM2FlYzY5N2Q1ZjRjODFmMjRhYjM5M2M2N2M4ZDVlOTNlMWNlYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys29ovdupRHI0Y38mSv5UB9tasB1
J/7P08EskPuzxQwrtVsl4qqdj/n4AqbV5I4B3+0VgsuU8CGykowwXr2+FBrvLpAS
rSMs2dCZuGYb3Ljn4QBgbd7jjJWYVSGsDbcp2WUdkYHUTNR/7TM1NjG429XGR4fr
IQzaU8m6v0s37xaVnp95nj4dYPJ0nkvYgfhTU9h2pwApnD81lPJJ8/VsBLLlAFlh
IA0vougyD2yFqjC37XZczyW+++PoykdOKJ+dMJWQ5BwqoYVJscWXBS1Bo8RNY0I8
2kBKqj4B8aCTaXQdIzKeSZNOx3HP6RR5/s8tQEYPNboBN9ehT4ePvw8zjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOuxpfV9MgfJKs5PGfI1ek+HOvUMB8GA1UdIwQY
MBaAFORdCtwpTdNm32raiAE029DmiMz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgt
ZmUyNzM1OWZkN2VhLzEvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgtZmUyNzM1OWZkN2Vh
LzEvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTxsgDlB
3tI6q3FjOB0AZ1vEWTjXTCTXwO7PoI/zGMD/jtQl6tfFOFj148I9bHOO0DvbQ1nt
uB0r8vaG9qygRHp308HbGwxiSxwOU659DX+XVGrnDA1btNQrDNbb1KDvgcKaHMDs
x8hJ/Jt7ZJe7zWVVkrOJadxuaJYjhX/dXVzta1ErJwyzP5Fdq6a0myFUHEUGln1o
jAB1y8twyPUMeCxk8sw3FtjgZjFIQ0WVsjEpopo6bd8j8rjXUYc3sXayWOhdzya0
xPIQ6h0/7nT3pAp4lqLYpVDMmHVpHxklPnjPjVW4MfcZlTje3Sk70YMyEH0tDpam
wXXsJfhAC/hp0A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:44:41 2026 by rpki-client