Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: zJHiXLk/DNcfewcBW9ygeOR2RIc6aGp0MOQEVNQ18h0=
Subject key identifier: B0:6B:AC:0E:E3:64:CF:6E:B4:70:0E:A2:3A:2A:A8:FA:D2:EC:75:64
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01A1DD5E3007BE1C270FC8AC4869892ADF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 12C7
Signing time: Sun 15 Nov 2026 04:01:39 +0000
Manifest this update: Sun 15 Nov 2026 04:01:39 +0000
Manifest next update: Mon 16 Nov 2026 04:01:39 +0000
Files and hashes: 1: UFbjBTsIq_Jh6cTKxAGjZJHsdWY.roa (hash: G2BFc4ULBStlGzEFBPIqV+Zix6zfMY/aRgxI8WKNu+w=)
2: VOjaP0vPiACD0uS-bICx9WGuZeI.roa (hash: 9j4hZQlNE98hodvZ6eidQ8K7TvDH7tzFrNjO5UbEpFU=)
3: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: Jj/U+N9UqytsX4rbZBx7lXbHPpUbnh+6VAr7PoQJc64=)
4: jFpXUQdW_8WooLIc_r8NHAOFq5I.roa (hash: QNhPW7mwEoqlv0FVLXTOe8Hyk9HQZ4btsFGqykx+UXs=)
5: mp-VpswUBjza82Vpf1GOWZIhrlQ.roa (hash: ae9rTRwpHTYdLNVU2WmOKxDNxm6rN9lNU5zvZm8mMAI=)
6: p44R9aBxQO7JC_wcBvLLtT2BAHI.roa (hash: QtL9TzZVKn2Ri3VPmqwHzl7WNoEfyFSnlYeoaCtNsMA=)
7: sRWGiXxA4JOaPGQ536fC0vH4Lng.roa (hash: 9M2mMIK/kiYHNa6sUQGeuvDN6oEmyqZDuG41AmFeY7A=)
8: uhHeHXNeCyzmj1k6kMiJskketXc.roa (hash: EELczVceDY0fkVLK0a/I+9PonFXjhdu2dOYRHw98c2c=)
9: ztSs7zmKYYrvh6ddsY39F_uOKEk.roa (hash: /k/b9/O5jpdDOIMSaJIPt2QCSI1+oOFC4DFoJBolsYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:30:07:be:1c:27:0f:c8:ac:48:69:89:2a:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Nov 15 04:01:39 2026 GMT
Not After : Nov 16 04:01:39 2026 GMT
Subject: CN=b06bac0ee364cf6eb4700ea23a2aa8fad2ec7564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:b2:b7:35:f5:21:9a:30:bc:f4:16:6b:17:
f0:e8:8e:a3:97:30:d7:dd:8b:11:5f:a9:93:eb:c4:
f7:09:67:7e:ca:0b:c5:07:b5:90:29:82:21:05:88:
27:dd:71:0a:46:32:1f:1f:c6:bf:05:85:18:e1:e3:
81:bd:f3:79:68:41:3e:d3:bc:a7:f4:d4:cd:e3:47:
d1:38:f6:36:e0:34:ef:b0:73:12:6d:7a:63:ce:77:
bc:8f:69:ac:b0:5d:e1:6a:ee:df:89:73:c9:47:e8:
58:9b:e0:b9:61:b7:d1:fb:3a:50:46:f6:53:7f:84:
33:22:12:ff:38:61:a0:e9:31:57:56:b0:32:52:74:
e5:01:2f:3a:89:94:e4:eb:e4:d7:e6:27:1e:f3:9e:
b1:2c:98:a2:1a:97:a2:c1:6a:b9:00:45:98:66:22:
6a:fe:4a:bd:86:30:1b:c0:b8:b5:e4:82:fd:24:41:
02:2f:21:9d:75:4a:07:b9:bd:ab:45:bb:09:06:3c:
42:99:38:8c:de:27:c7:30:ab:b6:ee:a3:a9:bf:9f:
76:4d:41:2c:58:51:e5:60:f1:f4:83:2d:8b:6e:5e:
cd:9c:ba:91:1f:da:e0:4e:c0:be:e3:02:30:43:ef:
9e:b9:79:9a:9e:05:fe:1f:bb:dd:07:fd:f5:83:4d:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:AC:0E:E3:64:CF:6E:B4:70:0E:A2:3A:2A:A8:FA:D2:EC:75:64
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f9:27:fe:af:c0:0c:c6:8f:40:d8:de:86:8b:c0:3d:92:28:
ec:47:d4:1e:0f:96:44:a1:a3:d3:45:f9:28:91:09:76:3f:f7:
40:6e:2b:39:08:b5:f3:ee:52:d4:1c:bd:50:34:3e:15:6f:f3:
a9:c7:48:99:31:66:4a:6e:cf:5a:8c:b2:a5:9f:6e:61:4a:d5:
47:47:24:31:52:1b:f3:9f:d1:8c:60:63:9f:1e:bb:25:df:28:
26:da:72:60:86:6b:e9:e7:5b:02:cb:3c:17:17:a6:d7:42:25:
de:60:69:a0:0b:c1:57:8a:8b:04:fa:6f:67:26:2f:8e:7d:40:
1a:cf:bb:23:70:07:81:58:a7:6d:e2:0b:c1:81:a6:ff:b6:29:
2c:15:46:3c:ab:db:3e:07:1f:b8:f1:2c:5a:07:df:dc:0c:fb:
5a:e2:8e:f6:be:d6:63:f9:57:e8:5c:47:d8:2e:ed:f1:e1:8d:
f9:81:b5:f6:d0:fa:af:c1:4e:05:89:48:d6:46:47:ed:c7:dc:
3f:31:ee:0d:ed:6b:3e:96:1b:b2:b5:ad:dd:de:0d:f9:46:8a:
4e:18:dd:32:c8:1d:4a:0f:cc:01:fb:83:9f:bb:c9:bf:19:e6:
41:3d:de:a9:c3:fd:b3:a1:eb:fb:66:b1:80:3e:d1:77:35:3d:
b5:78:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:45 2026 by rpki-client