Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: PjH3F/db8Tu1R23cekY4csaVlAW/vJhGpwbkCKckJFU=
Subject key identifier: DC:29:D3:CE:24:F9:C2:34:D0:5C:B2:20:EC:34:18:EC:B7:59:C2:19
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 01A1DF4C0A69EA424E5046B569C617D3C01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 13:01:04 +0000
Manifest this update: Sun 15 Nov 2026 13:01:04 +0000
Manifest next update: Mon 16 Nov 2026 13:01:04 +0000
Files and hashes: 1: C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa (hash: KjPNPOXZwVjnuKWDEKGdvD1QS5oO9ubnZY9SVeLWd9M=)
2: LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa (hash: k5Vr4nHqfxcqa1n3ZsAMJk6uHu5H4HSOAsJXgQNi+cQ=)
3: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: ohqhZygnGts1A2BTjZm3LUy4ujLsyePPU6tXAbn54Mc=)
4: eu9ae3eLYSM_cPxuWpcvPn92OU8.roa (hash: HOeGxAKohjtOD7Ke0LKRStGG+xTv10n59udd9QSjFEw=)
5: v52ZTcdolNoppoOrn38Ym0qTh6M.roa (hash: qxbDlAOHfwm8HgM041yuk5h+Fnz9xMLxo2BwLuu0zHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:0a:69:ea:42:4e:50:46:b5:69:c6:17:d3:c0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Nov 15 13:01:04 2026 GMT
Not After : Nov 16 13:01:04 2026 GMT
Subject: CN=dc29d3ce24f9c234d05cb220ec3418ecb759c219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:49:d0:bb:ae:82:d6:04:c6:f6:c2:46:4f:
4f:ad:9c:49:5d:57:cd:51:fc:60:c3:35:df:b7:f2:
cc:fc:f7:12:47:38:bf:e4:15:1b:9b:9c:a6:c5:fa:
d0:65:ae:73:30:65:f1:cc:09:d7:37:05:6c:0e:2c:
7c:de:4e:bc:f2:b8:de:35:2f:4a:d6:dc:7d:15:3c:
9e:41:14:ee:2c:5f:f8:9b:73:3a:e9:cf:27:6e:0b:
fb:98:69:75:d4:28:00:22:5a:96:80:5d:4e:10:15:
00:67:dc:46:fc:1d:05:4f:81:ac:39:5a:e1:5a:bd:
92:ee:d3:b0:2f:8f:d5:03:be:47:01:26:ba:f1:97:
4b:3b:4d:30:df:eb:d5:3d:d2:8f:91:43:62:6b:16:
57:8f:20:82:9f:f1:18:fb:67:fa:fc:98:84:75:7a:
03:2b:43:60:35:e4:ae:52:1f:95:d7:6f:60:d7:0a:
17:d9:44:cf:df:ac:03:4c:82:24:f0:cf:62:9c:6c:
cb:b2:ec:73:3a:78:50:99:8f:f7:ef:fc:28:86:6f:
e8:88:60:8c:26:de:87:70:c0:db:4f:28:e8:68:d6:
2a:59:14:59:04:71:26:0b:cb:db:40:86:e2:22:f8:
73:20:a1:ec:a4:89:93:73:b5:80:5d:94:28:a5:33:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:29:D3:CE:24:F9:C2:34:D0:5C:B2:20:EC:34:18:EC:B7:59:C2:19
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:29:98:ab:8f:8d:bc:7f:64:01:c9:40:27:f7:40:38:b8:76:
ac:e0:2f:70:d3:c1:c3:b5:fc:0c:9f:13:86:b1:fe:79:60:8a:
07:68:a5:4c:3c:87:41:c7:0b:63:61:e1:56:a2:da:ac:f5:bf:
dd:5c:b2:9d:a8:b7:22:84:40:9c:6f:dc:bd:f3:c8:c4:38:30:
cf:e8:ba:46:1f:1d:25:1a:13:2e:27:e7:c9:76:49:fd:19:65:
d4:a4:44:71:00:42:69:9c:e6:68:2e:06:f5:4b:43:e1:24:cb:
76:df:6c:ce:b2:6a:30:fb:ef:fc:10:6d:0e:ed:a5:0e:84:e2:
93:e1:9f:d1:68:d1:3c:32:1d:aa:89:06:33:77:5f:4b:29:cf:
fb:a3:92:c9:be:37:d6:2b:77:c8:c4:9b:bc:22:6a:21:eb:c9:
72:b5:38:3b:51:6a:ff:b7:b8:b9:79:79:b6:62:97:83:04:aa:
7d:4f:92:94:3f:10:32:02:99:14:67:f8:63:a5:c8:14:97:f8:
73:6e:b1:1b:d0:2f:a2:62:b4:bf:83:34:5e:d3:35:0e:b2:89:
43:a8:15:21:83:6b:1d:99:cb:af:0c:be:1e:5f:22:85:fe:c4:
73:a2:83:02:28:10:4b:51:af:ea:7f:92:00:7b:f6:ae:f4:75:
22:cf:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:53:59 2026 by rpki-client