Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: 66UC4CEPthuCq6A03I1lKG/XevG1NhlLMSRHg0EIsnE=
Subject key identifier: DB:7B:3C:DE:75:F8:93:AD:E2:D1:BE:E2:71:4C:66:D7:4F:54:35:D3
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01A1E05F53B91EC6D5C0B16697DFCA8D875F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 0687
Signing time: Sun 15 Nov 2026 18:01:46 +0000
Manifest this update: Sun 15 Nov 2026 18:01:46 +0000
Manifest next update: Mon 16 Nov 2026 18:01:46 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: S4xnaj5SSU1dmipLm6Ro6B71PE0j3b13n2FMTcOkjk0=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:53:b9:1e:c6:d5:c0:b1:66:97:df:ca:8d:87:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Nov 15 18:01:46 2026 GMT
Not After : Nov 16 18:01:46 2026 GMT
Subject: CN=db7b3cde75f893ade2d1bee2714c66d74f5435d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:18:49:0d:80:18:1b:e1:22:62:04:6f:16:
ce:ab:e8:70:c3:a3:ee:aa:3a:fd:33:df:9d:f2:03:
f1:b5:6f:ca:68:65:e6:3e:83:17:95:10:15:cd:f2:
75:d5:d6:01:bc:0a:b2:d0:cc:84:de:15:2e:02:12:
af:62:14:dd:bb:39:09:33:2c:f6:89:8f:55:d0:a1:
2c:a4:5e:28:95:c3:ef:e5:4f:21:c9:7e:e3:7a:6c:
33:b1:6a:90:a8:7e:be:3a:48:74:3f:78:b1:29:d2:
6d:23:73:37:b6:50:b0:12:2f:f5:b8:0e:e2:06:74:
de:c4:3a:97:47:eb:f1:5f:4d:8f:a0:11:14:2f:2b:
b6:e3:83:65:9f:92:4d:09:9b:56:84:05:da:55:db:
2d:49:16:13:e3:dc:4b:6e:7b:1c:f0:77:18:2b:a1:
a5:4b:66:72:1e:2e:c9:9c:3a:aa:de:2f:fd:29:ec:
45:a6:12:49:7e:22:20:ae:3c:7e:79:41:b7:22:7b:
a5:15:a2:9b:8c:10:8c:70:51:01:55:63:27:73:34:
17:56:26:ff:cb:0c:93:bb:4d:5b:ee:54:a5:16:1e:
71:81:1c:84:b2:20:3b:7e:bf:90:92:17:b9:9c:fd:
e0:ef:b7:ca:b4:3e:aa:8d:4b:7e:1f:28:3e:03:2c:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7B:3C:DE:75:F8:93:AD:E2:D1:BE:E2:71:4C:66:D7:4F:54:35:D3
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a1:c6:70:e1:e0:ca:54:a5:9e:58:5f:7b:d9:6d:b0:c5:96:
7f:60:e4:16:11:bf:c4:a3:3d:b2:28:d4:eb:e0:12:ca:d6:f4:
5d:73:c6:fb:ff:8c:2e:bb:76:6d:84:be:38:42:54:8e:6a:df:
a0:8d:97:52:67:ea:60:1e:d1:10:77:5b:dd:1f:31:00:e8:1b:
01:94:e5:71:c7:86:71:5e:dd:a8:89:a8:79:f3:ad:e8:4b:da:
13:4c:e9:fc:32:b9:33:3a:90:97:30:93:05:43:68:7e:90:88:
58:1c:4b:9e:57:5f:36:ea:4c:5f:4c:57:aa:ad:db:82:80:9e:
e4:24:66:d8:9d:44:62:58:aa:c2:9d:2b:b2:4d:9f:59:4c:06:
4c:f9:b6:72:f5:43:a2:54:33:82:59:8b:79:a7:c0:80:4b:19:
d4:44:28:37:4f:41:34:89:03:e4:3d:79:a7:95:16:83:c4:eb:
10:b6:97:a8:fd:39:33:0d:17:8d:71:d4:c0:83:e6:64:6d:b3:
ae:2c:ed:4d:96:1b:64:c5:01:68:42:35:c5:fa:08:3e:a2:01:
5c:ac:ac:56:b9:62:4f:6e:f4:a1:80:ea:e5:e7:91:e4:9c:a9:
b4:0a:5f:1a:4f:11:16:f6:cb:51:cd:f1:45:35:91:83:4b:48:
ff:fc:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:12:15 2026 by rpki-client