Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: VpXnD7DLDBOjCUgP7d+ZwJwDb0VMQ6nbn2qakacA80Y=
Subject key identifier: 26:E3:97:E6:D1:A5:1F:CC:68:6B:2F:0C:5F:06:E7:FB:80:6B:5B:05
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 01A1DD94CA8B71D651931092E9C228F55C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 05:01:18 +0000
Manifest this update: Sun 15 Nov 2026 05:01:18 +0000
Manifest next update: Mon 16 Nov 2026 05:01:18 +0000
Files and hashes: 1: AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa (hash: vV3sJH5TnYIMyxRcZZhNX1B1hLvxAZFKHPAv1rfCpfU=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: DEIo+bBW0jY4G5J7RgyHwQYtjCb7UCpLcKhNRpjz2zw=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:ca:8b:71:d6:51:93:10:92:e9:c2:28:f5:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Nov 15 05:01:18 2026 GMT
Not After : Nov 16 05:01:18 2026 GMT
Subject: CN=26e397e6d1a51fcc686b2f0c5f06e7fb806b5b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:97:5b:b5:cc:ad:37:f2:8d:3c:97:8e:89:9b:
64:0a:03:18:08:f4:ff:b2:a9:3f:16:17:94:b2:b9:
46:ba:ec:ee:6d:0b:7f:16:54:aa:c9:ad:25:84:9b:
af:25:6d:c8:d4:0d:5f:ec:b2:6e:c0:6c:91:64:a8:
c3:6d:3d:90:b2:c1:46:aa:99:c3:8c:77:63:e5:e2:
d7:44:92:d3:93:17:ec:ae:1e:c4:cf:31:1e:ec:9d:
78:05:95:fc:27:80:14:1b:e4:7b:52:ef:8d:fa:b4:
b0:93:56:66:54:23:cb:03:d1:51:75:6c:ca:41:55:
d7:88:f5:e2:cd:68:c9:c8:45:02:9c:49:11:f4:37:
4a:c5:de:e3:09:0e:31:44:81:10:66:c0:f8:08:91:
94:c3:98:32:b1:19:1a:bd:c8:6d:bb:f9:ce:46:14:
52:09:16:98:f5:d6:88:65:d3:85:84:9b:0d:c6:ef:
0c:68:0f:25:ab:8b:e9:aa:cb:8d:01:95:91:36:49:
ae:70:3c:91:bf:a0:6f:88:48:b3:87:61:38:13:ec:
72:62:d7:50:da:73:0f:d4:e5:19:24:e5:ce:1b:d6:
f7:e7:e4:29:b2:e6:c9:1d:a3:46:42:27:c2:bf:5d:
55:62:23:8d:30:8e:82:a6:a9:b0:a3:b4:9d:34:18:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:97:E6:D1:A5:1F:CC:68:6B:2F:0C:5F:06:E7:FB:80:6B:5B:05
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d6:73:08:3a:69:71:c2:9f:c4:fc:d3:e1:c4:9c:3a:7b:c2:
2b:4e:cb:e1:7e:ba:56:e0:06:64:eb:96:14:04:23:e0:c4:14:
31:0f:0e:36:e1:6a:3d:45:6b:11:29:4a:47:2a:f8:d4:a6:1e:
db:e5:ab:de:3f:c8:21:9f:c7:be:ef:db:8a:7b:00:c1:5c:2a:
56:bc:16:97:b7:be:dc:46:6f:72:18:5c:be:56:db:9b:c5:0c:
24:fa:3b:5f:cf:00:2d:0c:2c:f8:26:6b:4a:94:c5:51:1e:88:
70:71:f1:eb:6e:b3:52:5b:3d:4d:73:bf:b3:e0:aa:a6:a3:c6:
b5:b5:cb:0e:a9:47:54:73:90:4c:74:b9:46:c8:97:4b:b9:c4:
7a:f2:83:f9:a0:02:05:5e:13:6b:a5:a1:6f:67:ef:4b:c5:45:
04:4a:66:96:cc:93:0b:54:15:4b:3d:27:cc:a4:7b:df:88:f6:
df:f3:29:dd:d9:df:ea:0a:64:aa:e7:ce:c6:22:cc:d4:40:10:
8c:34:29:de:d5:3d:a7:48:6b:00:a8:28:ac:b8:0d:f3:b1:ab:
7c:11:07:d9:af:7b:e0:90:5b:21:80:74:81:ba:0e:5c:a4:49:
d4:08:d3:58:3b:d1:bc:3e:73:fb:d9:5d:6a:19:38:0a:17:27:
3e:9f:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:43 2026 by rpki-client