Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: JbdIpLJOdH7T1s6dVGo7BwaUHx83hmvuoApragvua+A=
Subject key identifier: 40:0A:5B:F2:11:12:F7:20:D2:AD:12:59:FC:46:97:10:C2:14:D3:5E
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 01A1DFBA159265A7A0A8E33032F7EF9BB224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 1AB1
Signing time: Sun 15 Nov 2026 15:01:16 +0000
Manifest this update: Sun 15 Nov 2026 15:01:16 +0000
Manifest next update: Mon 16 Nov 2026 15:01:16 +0000
Files and hashes: 1: Ccm4qTaFVoeEBQGq7AdHkms3sbE.roa (hash: sNTPIkd73n/EU/DbG6UaXBNfki1s2gEUwvwhofodNus=)
2: O_JWRj5Djic4pjl6umhJDPP7BuI.roa (hash: oXNGdNb1x3OVweYzH4oXuC+MRGHHCd9nwAtXQGgCLxw=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: 8NImNCuubFQUeamxnoWgZlySgW64QKyz8Yd4OKb739s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:15:92:65:a7:a0:a8:e3:30:32:f7:ef:9b:b2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Nov 15 15:01:16 2026 GMT
Not After : Nov 16 15:01:16 2026 GMT
Subject: CN=400a5bf21112f720d2ad1259fc469710c214d35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:43:4c:2c:b3:e7:cf:2a:47:39:eb:0b:1e:
82:6f:cb:9d:f8:bd:f1:67:1f:40:74:a3:dc:f7:cd:
f2:2f:5d:0c:6d:9f:c2:e9:3e:06:b6:3a:a4:09:bf:
bd:0c:56:19:7a:66:5c:cc:50:41:f3:69:4c:5b:54:
00:ec:91:44:d1:97:cb:86:8a:33:5a:31:81:36:94:
cd:f1:cc:15:4f:de:90:30:f6:e9:f4:6e:df:b3:42:
78:b3:ef:c2:8c:e9:8f:97:a4:26:8e:1b:e3:32:f7:
36:73:51:4a:8d:e1:30:4a:4b:2b:ae:ae:79:cf:7f:
52:08:41:0c:0f:63:a9:88:25:53:39:79:2b:6d:b0:
97:b5:e3:e3:bd:21:c1:d1:3a:f5:fd:74:c4:a2:20:
0b:2e:d8:f9:a0:9d:ef:f8:a5:f1:85:7f:15:96:05:
10:77:7c:86:a0:a9:56:54:77:5f:2e:c5:6b:c6:95:
9a:24:54:5f:87:ae:f2:5f:df:6c:1e:9a:8e:cb:e2:
21:08:d4:79:98:9a:28:4b:6b:ff:55:40:10:77:c6:
af:79:d0:0c:14:f3:78:48:ec:a3:9e:c9:a8:06:aa:
bb:5f:a1:48:d7:76:ce:0f:34:75:0d:42:1b:15:3f:
7b:01:05:6c:f6:68:86:fa:49:52:24:c6:19:52:d6:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:5B:F2:11:12:F7:20:D2:AD:12:59:FC:46:97:10:C2:14:D3:5E
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1f:eb:af:ed:fa:18:ff:1e:1a:87:51:7c:00:8c:a2:c8:32:
bf:e5:ea:20:94:bc:72:fb:d0:b1:f7:a4:63:53:b2:e3:76:57:
78:93:f6:5d:15:5a:83:7c:02:bd:4e:95:cb:8c:c9:67:0e:48:
91:b1:c8:f4:7b:14:da:a5:46:c3:9c:dc:24:5e:cc:74:b3:7a:
f8:f6:4d:dc:49:c6:84:c9:44:08:ec:e4:0c:bb:94:e7:90:7b:
fc:59:b5:2f:58:73:c0:f2:1e:27:f3:ce:1d:07:8a:da:a3:ec:
95:76:bb:c3:97:03:2a:e6:ab:1b:2e:7d:9d:a2:e4:1d:73:24:
14:ab:fb:90:d1:b4:a1:93:fb:50:a5:5c:58:a9:fc:0d:cd:3d:
c4:a6:4a:c0:83:dd:05:ea:21:1c:54:d3:df:50:f8:e3:63:a1:
ec:8c:d8:62:70:e2:d9:7f:90:92:05:ab:18:fc:48:2f:10:fc:
d0:cf:ab:a8:76:bc:87:b3:b9:8b:a8:9e:18:13:66:8f:c5:8b:
05:d0:da:91:b5:6e:7b:31:26:ab:db:8c:c4:35:8d:b4:ec:69:
12:6f:e9:58:d8:e4:52:8c:74:b8:a9:fc:a9:e8:d2:10:23:89:
11:ec:9c:ff:f4:f6:71:bf:74:25:25:67:4a:c7:00:74:7f:f5:
7d:f9:48:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:10:28 2026 by rpki-client