Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File: 5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier: LGmyFbSaHbB/L9JZd76TYf9mbM5r0lzXpe0kX7xgnKk=
Subject key identifier: F8:7B:A5:CE:D6:39:18:E1:38:F8:72:E1:D7:E8:8B:2A:33:06:13:92
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer: /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial: 01A1DFF0CB7D57C00ACEACB488A28DE8D067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 16:01:02 +0000
Manifest this update: Sun 15 Nov 2026 16:01:02 +0000
Manifest next update: Mon 16 Nov 2026 16:01:02 +0000
Files and hashes: 1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: y2L5JzhQ1vI3sNL/8jJdXyC1cEs4QWrkTK+KWrqhBkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f0:cb:7d:57:c0:0a:ce:ac:b4:88:a2:8d:e8:d0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Validity
Not Before: Nov 15 16:01:02 2026 GMT
Not After : Nov 16 16:01:02 2026 GMT
Subject: CN=f87ba5ced63918e138f872e1d7e88b2a33061392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:c7:5b:8c:61:07:63:13:89:bb:78:8c:fd:
d5:cd:85:f9:3d:c3:4b:df:f0:5c:be:52:35:a1:be:
65:78:d5:a3:21:37:24:ad:ed:6f:99:b6:0b:46:3e:
07:63:bd:59:f4:6a:99:7d:fb:ac:ef:be:4b:4f:22:
cc:d8:21:65:75:b3:e9:4d:b7:56:dd:4c:5f:b1:cf:
6b:2e:18:2f:49:31:1f:7e:c1:8f:27:7b:8f:91:27:
84:a0:1e:69:b6:8a:ed:4a:8a:1e:19:8d:18:3d:0d:
21:b0:1f:f2:74:2c:5f:6e:54:74:eb:01:69:02:08:
6a:ab:6e:d4:4b:3d:58:80:da:8e:4f:d6:72:c0:7f:
80:ec:b7:e1:01:79:6a:7a:b4:8d:2c:3c:27:d1:23:
48:a6:76:20:e7:59:be:f2:f4:bb:d4:f0:99:45:aa:
f0:7b:98:54:dc:cf:a8:34:4c:63:4b:64:4a:34:1f:
43:37:9c:09:96:b3:a3:3d:19:22:f3:a0:3c:0b:49:
84:4a:9d:4c:52:e0:e2:ba:93:55:fe:4d:9d:2d:ba:
27:5b:79:4d:89:6c:05:22:1c:fe:1b:96:0e:8c:28:
22:54:77:54:2b:de:af:b2:63:20:d3:f7:c1:dd:05:
da:07:94:29:89:bb:f2:00:09:1c:5c:e4:b2:0a:16:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:A5:CE:D6:39:18:E1:38:F8:72:E1:D7:E8:8B:2A:33:06:13:92
X509v3 Authority Key Identifier:
keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ba:38:4c:13:16:cd:38:b7:f4:64:e1:6c:8a:e1:5f:40:65:
0d:ff:c2:a2:9b:21:cd:b3:ce:2f:26:f7:da:a9:51:d9:78:70:
30:01:48:a1:64:98:46:3c:43:db:a7:78:52:fe:47:d7:3f:16:
c4:bb:97:9c:ee:c9:ef:61:30:13:64:e6:7a:44:7d:36:f6:f3:
e8:b6:e5:05:1a:f9:4d:7d:c6:20:dc:3d:6f:d9:2d:d7:0f:8f:
eb:b4:ac:cc:00:be:e0:6c:46:50:7d:a5:a9:7e:92:c6:52:0b:
dc:fd:64:77:53:da:5b:0e:06:cb:29:af:4c:8d:fd:07:30:8c:
fb:79:a9:66:68:b8:8e:1a:83:4c:f2:84:22:5b:1c:6b:cb:5e:
7e:3b:83:94:e5:71:bc:f3:1a:6b:ea:60:9a:22:1f:98:4a:42:
5d:e3:e6:e9:fd:85:bf:92:0d:8e:c8:a3:c9:54:33:f9:fb:68:
07:d6:4b:21:bf:60:73:6c:75:cd:ee:3f:2f:95:f1:31:d8:b0:
63:6d:7d:be:9c:c1:0d:1e:89:9b:c9:e8:9e:4e:4d:c9:04:cd:
87:51:27:80:e0:3b:02:41:0c:56:74:07:e6:08:12:e4:b9:a2:
4e:3b:bc:fe:fe:c2:d6:78:a8:dd:d1:53:93:71:78:ad:de:10:
cf:a3:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:23:28 2026 by rpki-client