Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: FRSKiITxqi6wc8mWoBRBbmfTVE+GKAgrMBBsLoipeY8=
Subject key identifier: 02:21:81:1B:47:3A:03:37:16:33:36:88:3E:40:68:84:2C:5E:83:14
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 01A1DCF03CBD82308B40A50827305ACAF144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 1121
Signing time: Sun 15 Nov 2026 02:01:34 +0000
Manifest this update: Sun 15 Nov 2026 02:01:34 +0000
Manifest next update: Mon 16 Nov 2026 02:01:34 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: uaK5/eVhR7BdlsDQwL8QSOKGPckndd5h9VmJQnD81Mw=)
2: quAV4eYcasGlgRODEpBGamYZ6h0.roa (hash: xcRHN39YJK/QeKfoe37h6fY7xr+CzjZ9Q02OAtdg1cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:3c:bd:82:30:8b:40:a5:08:27:30:5a:ca:f1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Nov 15 02:01:34 2026 GMT
Not After : Nov 16 02:01:34 2026 GMT
Subject: CN=0221811b473a0337163336883e4068842c5e8314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:81:c6:8e:33:df:44:86:d3:78:98:73:5a:
20:f4:a4:87:af:95:15:3c:08:d5:93:e6:e6:17:66:
d3:87:35:c8:56:d7:79:dd:a0:6d:fc:61:0f:e9:9e:
1d:52:67:90:0b:5c:19:cb:73:13:ba:b8:7d:2e:4e:
ee:05:77:19:7e:2e:15:e4:22:7e:60:9f:ce:78:ef:
7e:70:b8:db:6b:e3:c8:5d:54:d6:f4:18:e0:f8:58:
ba:20:0c:db:23:7b:01:64:2e:c5:9a:14:74:39:eb:
9a:47:03:f4:22:ae:5c:a1:ef:cc:18:3c:25:f3:91:
dd:00:56:25:f3:30:b6:33:1c:a6:f4:0a:6f:d3:6b:
df:26:d0:f4:64:78:41:66:cd:48:ec:d5:ab:45:9b:
6e:37:eb:cf:a0:1f:cd:88:ed:92:8a:90:d8:ae:9a:
77:9e:74:43:c7:1a:b7:15:e2:f8:cc:12:57:82:f9:
ae:d3:d3:e8:76:65:cd:33:05:2b:1c:c3:24:cc:a6:
19:56:1f:9c:c2:29:e6:50:c3:0d:93:52:06:c5:f8:
b0:b4:c8:f0:7d:f0:eb:aa:fa:26:f0:9f:ab:07:7b:
e2:0b:6c:5b:be:b2:7a:7d:67:55:a2:60:b0:f1:59:
3e:18:11:a4:3f:cb:d5:23:12:ac:e0:8d:82:e6:19:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:21:81:1B:47:3A:03:37:16:33:36:88:3E:40:68:84:2C:5E:83:14
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:52:da:69:33:76:27:f5:c7:69:a4:76:57:e9:36:f2:03:58:
c9:1a:97:7e:f5:fa:66:7b:4e:bb:ce:ca:d0:da:16:aa:3e:d5:
6b:86:81:91:0f:23:56:ea:3c:85:15:d6:98:88:5f:9f:1d:df:
43:90:85:b8:47:79:b6:0a:ad:bb:fb:b9:fa:3f:4d:d2:5f:fd:
b5:6c:bb:2b:09:0e:6f:31:78:b2:8f:ef:3e:2d:02:c4:de:23:
18:da:64:fc:6c:ce:50:e0:b9:1a:05:e3:b5:48:73:27:61:b7:
bb:fa:cc:f5:b5:8b:77:55:4e:f1:39:36:f5:13:07:e9:94:43:
9d:96:03:d4:3d:fc:1e:56:0d:b8:5c:8a:84:82:cc:06:91:c7:
2f:4c:58:0a:42:b1:79:cf:81:ac:a7:bc:59:ab:6d:8e:75:ca:
69:2f:73:0f:e4:d8:64:8e:50:f8:c6:60:38:cd:5d:52:1d:2c:
0f:61:54:ca:ce:ea:0c:f0:bc:33:70:19:e1:6c:1a:6c:26:61:
60:50:3e:97:45:2d:8c:9a:ef:9d:12:a3:3e:7b:e6:dc:1e:1a:
65:c5:3a:7c:70:48:d9:e7:f5:fc:f2:28:a8:2f:17:8a:36:05:
2d:3e:4e:b2:34:48:08:49:a6:91:b2:f7:41:ca:5b:07:82:2d:
ae:c6:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:47:19 2026 by rpki-client