Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
File: f5fak4IA5C6oDDSCgLD2IW2dBFg.mft (raw, json)
Hash identifier: /YsPjAvHAOiey+Fy5ioGUyZ+/UqC0mh2NB2njkD/XZ4=
Subject key identifier: C0:48:ED:79:51:CB:89:E4:5B:AE:95:AB:14:A4:F5:42:47:0D:4E:85
Authority key identifier: 7F:97:DA:93:82:00:E4:2E:A8:0C:34:82:80:B0:F6:21:6D:9D:04:58
Certificate issuer: /CN=7f97da938200e42ea80c348280b0f6216d9d0458
Certificate serial: 01A1CDEA0348123016CE638BB68CC6A89CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
Manifest number: 40
Signing time: Thu 12 Nov 2026 04:00:27 +0000
Manifest this update: Thu 12 Nov 2026 04:00:27 +0000
Manifest next update: Fri 13 Nov 2026 04:00:27 +0000
Files and hashes: 1: 7YMqYmtUJ4_Y0Wq2iJ-eIKvQ0NU.roa (hash: Y8RJARbtiP6gnbhn+dWW5386wCY8cNnyD8nuruEw4Jg=)
2: _sh4thc09FjUhaJ-CIlOqE5ACws.asa (hash: gGKwfbzOsuFNMjqj35SauYDnxOtxjx9w9YhsbYtE8Zs=)
3: f5fak4IA5C6oDDSCgLD2IW2dBFg.crl (hash: /zLSIaCDRtnmWgy3SNuqZauC46Ai/DARZZjhZZaDWPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cd:ea:03:48:12:30:16:ce:63:8b:b6:8c:c6:a8:9c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f97da938200e42ea80c348280b0f6216d9d0458
Validity
Not Before: Nov 12 04:00:27 2026 GMT
Not After : Nov 13 04:00:27 2026 GMT
Subject: CN=c048ed7951cb89e45bae95ab14a4f542470d4e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:d4:a9:73:1b:0c:e2:ef:5a:f0:17:26:e2:
3f:80:d2:86:06:b6:d7:68:eb:0f:d3:5e:bc:c4:8e:
99:b2:5a:fa:54:b6:71:26:a4:79:8e:42:22:ff:42:
ec:0c:56:4b:0e:12:bb:52:42:90:a3:a3:6d:d7:38:
46:4e:4d:1e:10:b0:ef:e3:34:6e:4c:c0:43:b1:a6:
4d:ab:6f:29:df:de:cc:ae:09:19:ce:ed:98:ab:24:
78:71:5f:a0:c3:ab:34:b8:c3:01:cf:4e:7f:d3:2e:
dc:cb:7c:c9:e2:bd:1d:3b:f5:b7:36:cd:b5:60:03:
53:d1:67:a6:38:2d:f3:01:0b:33:a7:9a:62:e5:1e:
3c:59:7e:0a:61:f5:b4:0d:ab:d2:35:02:34:75:b5:
bb:f7:41:9c:ac:5b:b6:60:96:24:7f:34:b8:ba:41:
69:1b:7a:da:15:5c:db:9c:d8:60:fb:17:5b:85:55:
ce:a4:e9:5a:9e:3f:b8:b4:d6:28:ea:dc:43:87:01:
f0:f2:c2:49:8c:42:9b:08:4f:4e:22:a6:85:c1:e7:
14:37:4a:17:5f:77:a2:c9:b5:83:21:1e:1c:01:71:
ff:ca:6e:61:ec:f2:27:52:58:16:48:3b:36:35:5f:
85:1d:ef:82:f4:2c:d4:8a:92:0b:5e:28:8b:f9:54:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:48:ED:79:51:CB:89:E4:5B:AE:95:AB:14:A4:F5:42:47:0D:4E:85
X509v3 Authority Key Identifier:
keyid:7F:97:DA:93:82:00:E4:2E:A8:0C:34:82:80:B0:F6:21:6D:9D:04:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5fak4IA5C6oDDSCgLD2IW2dBFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e9bd2-e8a4-434a-bce2-e30809fc2f4f/1/f5fak4IA5C6oDDSCgLD2IW2dBFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cb:02:42:92:1f:c1:ce:30:c3:dd:2e:0b:8c:27:27:ba:66:
2e:66:2e:79:f2:6d:03:8a:e6:34:02:65:13:fa:0c:e0:08:c3:
32:86:2f:7c:ac:17:04:3e:38:ea:9b:81:33:fa:80:e0:47:63:
3a:d5:d9:ca:40:71:ee:cf:5d:98:c0:5a:d1:58:de:e5:93:50:
4d:2f:69:8c:38:c8:c0:70:f3:81:c2:44:7b:8e:6c:72:bd:8c:
62:ac:ad:80:35:0c:89:6e:07:cd:7c:80:90:06:0e:2e:25:d1:
a7:62:9e:df:60:d5:ed:b2:ae:bb:ca:d3:97:31:fd:57:4c:39:
6b:9a:19:b6:27:77:94:66:f4:da:50:ea:62:ff:71:b6:93:d0:
17:a0:c7:bd:e9:8e:05:8c:a3:d1:03:c8:2f:c7:cb:1f:d2:7b:
a6:a0:40:09:b2:08:91:d1:ec:f5:0e:2b:29:32:69:56:e5:b7:
53:93:2d:52:08:7a:4a:4b:ec:66:6a:71:e5:8f:b2:60:54:9b:
f3:6f:93:7a:e9:9b:4a:2b:7b:4d:73:1c:76:b0:df:69:fb:29:
24:5c:74:69:44:f0:26:fc:eb:fb:78:29:2b:20:24:a1:b8:d4:
3d:f3:7c:a4:d9:0e:fb:6e:15:8d:d4:5a:dd:a8:8f:0c:7c:64:
30:4e:ba:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 10:28:21 2026 by rpki-client