Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: AofJU+08PUEwvvqIvb10OB+/6Keu8M5zUmpc2WEjQoU=
Subject key identifier: 32:79:83:01:E8:BB:2D:DF:89:30:85:12:F4:9B:88:F8:52:FB:17:BF
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 01A1DF1553377F4F4F26E46493CEE5BBAF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 12:01:18 +0000
Manifest this update: Sun 15 Nov 2026 12:01:18 +0000
Manifest next update: Mon 16 Nov 2026 12:01:18 +0000
Files and hashes: 1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: iYr93wdx1wGUls6/gc0tlSJ1vC8fEEHf7egc5/cUbPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:53:37:7f:4f:4f:26:e4:64:93:ce:e5:bb:af:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Nov 15 12:01:18 2026 GMT
Not After : Nov 16 12:01:18 2026 GMT
Subject: CN=32798301e8bb2ddf89308512f49b88f852fb17bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:07:75:20:1f:b5:01:b5:5d:b9:8e:23:cb:
2f:1c:07:ed:f3:5b:6b:64:21:34:eb:15:04:22:a7:
cc:f6:a3:7f:20:2c:49:77:c9:1c:d6:6f:aa:a8:ca:
c3:88:32:aa:99:99:02:0b:4d:16:78:b6:47:80:ca:
06:ef:f3:99:58:60:ad:87:00:38:55:a4:14:74:24:
0e:b0:28:b4:2f:ad:c6:85:39:86:03:c5:6f:bf:f0:
c5:d0:2c:70:2c:40:fe:22:42:ef:dc:55:cc:0b:55:
71:06:01:50:30:6f:87:f2:38:9b:6c:98:99:64:de:
3a:06:8c:9a:3e:26:4e:3b:10:ad:0c:85:7a:a2:4b:
1d:55:d8:18:7c:e3:59:b7:b7:9a:3a:9a:33:31:9b:
93:36:e4:9b:ea:d4:64:47:13:d2:15:3c:f9:89:8f:
47:c3:15:8d:6e:6b:36:42:2e:2f:35:35:3a:81:03:
28:17:28:a0:34:4a:9f:a4:1a:0a:be:8c:5c:bc:d9:
64:94:41:8d:20:33:8a:12:36:f9:b3:9a:df:29:16:
74:94:23:c2:5a:8f:fc:9b:f9:13:69:3a:18:b9:06:
6d:c9:09:19:07:35:e3:de:87:43:bf:1b:aa:5d:4d:
b2:dd:65:e6:68:45:e2:46:dc:4d:3b:e8:5f:a4:72:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:79:83:01:E8:BB:2D:DF:89:30:85:12:F4:9B:88:F8:52:FB:17:BF
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:22:f6:d4:32:30:a3:cc:b5:74:c8:aa:b8:2b:cd:b6:b1:17:
c7:0f:82:0a:44:48:61:97:08:4c:28:91:29:f0:f6:32:eb:41:
76:48:56:98:37:7a:1e:92:87:34:af:1e:30:7a:36:32:bc:80:
7c:86:ae:da:e1:b8:c1:ea:e8:d4:be:08:5e:cb:9a:e4:5b:63:
ae:fa:d9:11:12:4c:91:83:a6:fb:97:2f:be:8e:2d:08:c7:ac:
14:07:8e:4e:32:17:12:4a:19:fc:7b:df:c6:d3:7f:e2:e3:be:
4b:92:96:f0:c0:5e:93:c0:7a:fa:ec:f8:7f:b0:f4:54:d5:83:
42:d9:20:e5:9a:15:5b:56:3e:ca:1d:f2:ae:99:05:f7:08:04:
0c:92:4b:0d:90:ab:3f:01:8a:25:4e:82:83:55:a1:4a:30:8a:
42:2c:66:99:c4:20:7d:35:61:7c:5f:4a:79:54:a7:71:61:4b:
2d:4a:fb:87:66:f1:9b:08:51:7e:f4:ad:aa:bb:6c:88:b6:a5:
bf:cc:a5:48:c5:96:79:79:a2:d5:16:5e:b4:d5:70:7f:23:b0:
0d:f1:df:b3:f0:b9:89:ec:9a:aa:61:29:e8:48:40:b8:7b:33:
5d:59:3a:56:e3:1d:88:43:d2:11:08:df:42:dd:b7:2d:91:30:
f5:db:59:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:11:30 2026 by rpki-client