Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: nXvN5WL09mAXkeR+5V7/Sxg/Oc12qiyXBdgRYizG6Qk=
Subject key identifier: 7B:87:7F:CC:3A:76:0E:FB:5E:E7:FA:42:92:C2:6A:2E:25:75:EC:FD
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 01A1DEDE5A8E7615FB1F97D840B56FA3BBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 11:01:16 +0000
Manifest this update: Sun 15 Nov 2026 11:01:16 +0000
Manifest next update: Mon 16 Nov 2026 11:01:16 +0000
Files and hashes: 1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: s3KLA3VuxP/bYrMhH0bMPQ53WOh29tJDPFMW8/jhxxQ=)
2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:5a:8e:76:15:fb:1f:97:d8:40:b5:6f:a3:bb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Nov 15 11:01:16 2026 GMT
Not After : Nov 16 11:01:16 2026 GMT
Subject: CN=7b877fcc3a760efb5ee7fa4292c26a2e2575ecfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:56:56:af:bd:01:79:55:3b:72:28:29:16:
fe:00:fa:86:a1:09:b7:aa:56:69:56:5f:cf:f1:cc:
f1:f9:5c:7e:86:5f:fa:9a:96:db:f7:6a:10:1e:70:
5c:84:f7:08:0d:ac:a7:ba:68:46:1c:2f:3d:64:86:
82:ce:8a:1a:5b:b0:9e:0a:8c:7d:1a:dd:49:5e:2a:
bb:5b:0a:81:c4:aa:6d:4d:6c:df:d0:68:8e:29:e6:
a5:44:85:b7:9b:69:59:96:36:a8:2e:80:ac:8b:e4:
ba:2e:11:79:83:92:8e:84:fa:17:a2:87:52:5b:88:
bb:3a:08:80:0c:1d:11:61:c4:f4:8e:55:85:e5:df:
c2:85:e4:b8:1c:83:62:04:81:27:8c:2a:ac:6d:d4:
84:1c:e1:d9:0c:21:e7:14:33:eb:89:a7:e0:5c:3e:
2e:41:e9:d6:a4:d6:96:5c:6a:ba:5b:47:e7:1e:f8:
31:d5:1d:52:09:03:4f:3b:72:1b:30:b8:6c:51:99:
79:ee:40:14:6e:63:09:40:53:ee:9e:82:a5:5f:92:
d0:1a:5e:8d:4e:3c:83:cf:b3:e1:a3:4b:41:bb:b7:
d3:10:f9:a6:d1:c6:65:fb:df:4d:3d:5e:bd:dd:dc:
fa:8d:79:9b:a4:7c:93:98:4b:24:e9:ee:de:79:1e:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:7F:CC:3A:76:0E:FB:5E:E7:FA:42:92:C2:6A:2E:25:75:EC:FD
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:66:ba:8f:6a:8c:5b:ff:5f:c0:77:21:4a:d1:61:45:d8:66:
84:5e:8a:85:4d:bc:cd:e8:66:77:5d:fc:f8:90:fe:3c:4e:e9:
4f:15:45:55:b0:7f:73:33:4d:d4:c7:f0:b1:d8:eb:4d:f8:30:
b0:ea:a6:1d:cf:51:1f:aa:c7:25:d9:1b:9f:42:dc:ab:ca:fd:
32:ac:e2:db:4d:93:48:9d:1c:ce:49:5d:44:e7:ca:31:8f:70:
91:66:d5:2f:8a:2d:ec:84:7e:c7:03:91:8f:ec:58:e9:82:cd:
19:ba:8e:c3:dd:3f:48:27:a6:d5:72:e9:e6:12:a5:50:c4:50:
11:c7:f4:57:61:cc:e4:f0:28:bf:96:83:00:49:f3:26:b5:2b:
6a:3f:87:ab:14:97:31:43:40:02:0d:31:7c:81:87:68:2e:35:
9c:00:b4:6a:db:4e:2f:df:1b:90:a3:69:0e:5c:81:b2:74:e3:
1d:c5:8f:1b:76:29:2a:0f:ee:9e:2e:b6:51:35:52:ca:e3:50:
f6:2e:42:ea:56:72:34:fe:86:8e:ff:1a:73:ac:3c:a5:81:41:
04:6e:11:b4:23:21:66:ed:4e:56:a6:e8:01:56:a2:6f:c7:ab:
23:cc:ef:42:e6:6d:6e:d7:ca:7a:ad:13:9f:7e:3b:0f:c3:e1:
7b:e8:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:22:32 2026 by rpki-client