Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: HMVMaO1T7L24zb/zaqs7AFxETxtKWPNmxyDZFCsMd/I=
Subject key identifier: A9:A2:AF:13:0E:D8:5A:41:29:B7:45:82:9A:4B:37:9F:D3:27:93:90
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 01A1DD5E119C75556FDFC379A6893C98E6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 04:01:31 +0000
Manifest this update: Sun 15 Nov 2026 04:01:31 +0000
Manifest next update: Mon 16 Nov 2026 04:01:31 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: p39pK/p3+hz491eJLgkW5a3QioHLitBoiaMon/IxWB0=)
2: LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa (hash: hLgQdqBGoRGoVp14crN6xd2B0BaQtU78dsrL7Dz6tOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:11:9c:75:55:6f:df:c3:79:a6:89:3c:98:e6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Nov 15 04:01:31 2026 GMT
Not After : Nov 16 04:01:31 2026 GMT
Subject: CN=a9a2af130ed85a4129b745829a4b379fd3279390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:b4:b0:11:37:fc:7f:97:8f:8b:b1:67:86:
55:d1:00:5f:36:56:79:bd:75:06:c7:f7:79:b5:e0:
43:4c:52:dc:6e:4e:1c:a0:cf:b8:7c:a3:2c:92:34:
8d:78:b0:9e:52:bd:ac:e1:64:8f:4b:a5:8e:6a:87:
75:30:26:78:59:32:86:98:67:4f:12:f0:e5:71:64:
08:cd:37:e6:0b:f6:6e:92:f8:b8:de:f6:6f:6b:d9:
0b:c0:95:cd:11:1b:67:ce:f8:9f:50:97:e8:c6:70:
7d:68:a1:7a:27:23:a2:f0:c3:c4:5d:33:5b:d9:c5:
8e:46:ec:32:fe:a2:f7:e3:08:69:d0:93:ae:df:e0:
46:ee:e9:c9:a3:86:0b:e2:b9:46:5f:95:48:90:10:
57:36:fb:3c:94:66:d6:7b:96:ae:28:cc:e9:fb:19:
0c:bd:ea:b8:13:3f:7e:39:30:b8:9f:b4:d1:4a:5e:
6d:41:70:43:02:48:06:72:02:c6:f3:71:1c:47:ef:
36:95:41:f8:3f:fd:5b:9b:f2:5e:46:9b:9e:4f:81:
bc:a1:db:11:a9:bb:22:40:c6:48:6a:02:1e:c0:c2:
be:da:f7:1e:cc:b4:54:81:ef:0b:43:de:a2:d8:71:
1e:27:98:2e:4f:7b:aa:d8:aa:b4:c0:47:b0:d2:54:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A2:AF:13:0E:D8:5A:41:29:B7:45:82:9A:4B:37:9F:D3:27:93:90
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:e2:a2:45:49:b9:0e:85:74:8a:18:8e:e5:fb:be:6c:3f:
4d:75:65:1f:f2:95:95:dc:2a:ee:54:4e:2a:76:e8:54:98:d2:
72:58:2a:20:75:c9:a7:ad:30:d4:0d:5f:fa:5c:72:53:89:c4:
d1:28:a8:54:9d:66:fb:79:fd:b2:0e:ec:3d:6d:a6:b8:1c:d5:
f5:53:78:99:6c:cb:b6:eb:02:cd:27:8d:fc:ce:f9:78:e8:31:
6f:a4:4f:a8:cb:76:c0:ab:b8:18:79:75:41:a5:4b:0d:14:af:
64:b7:5f:b7:af:43:d4:6e:50:8e:09:97:6f:7f:fb:14:d1:7a:
55:88:91:9c:ef:bc:78:2e:7d:a2:90:5f:41:f8:92:49:5d:68:
ba:2f:ca:ac:ef:1b:c3:44:3a:74:81:7e:9f:d9:f9:81:a0:b4:
7d:ec:4f:d8:6a:21:83:e8:9d:27:60:a2:f8:1d:80:36:42:10:
3d:2b:d2:c4:05:72:cd:e8:69:20:22:64:8b:78:b2:c5:b5:6c:
86:da:15:d9:53:07:77:4d:ca:e3:1b:c9:08:78:05:f8:94:93:
83:90:71:94:24:a4:86:a5:c6:30:97:c3:35:ab:de:af:07:c0:
2b:5c:6c:e9:44:e5:f1:a2:1d:23:61:55:18:f9:d0:7a:ed:f5:
5d:c0:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:03:24 2026 by rpki-client