Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: 7jmL57Q8xT5b90DGELY1zIUTce0pbeo1r2InHNLboQE=
Subject key identifier: 6A:32:99:9A:34:F8:B8:C9:43:44:A4:8E:58:5A:27:47:B0:11:EB:49
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01A1E027CD2C33182A18A456DC8FCC098487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 17:01:07 +0000
Manifest this update: Sun 15 Nov 2026 17:01:07 +0000
Manifest next update: Mon 16 Nov 2026 17:01:07 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: pnyGM4gd2kF8EJkO5gWZ9jeoyF0.roa (hash: 6XnmhOJq3GAmn5wQEuoQfthOvhyAwUf459ZiJFQdrrM=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: Blde51i4DIPS2eLsBX+eOIWVb4RE7AYuaGqr2iIGJLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:27:cd:2c:33:18:2a:18:a4:56:dc:8f:cc:09:84:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Nov 15 17:01:07 2026 GMT
Not After : Nov 16 17:01:07 2026 GMT
Subject: CN=6a32999a34f8b8c94344a48e585a2747b011eb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:bd:1d:e2:22:72:7d:ed:79:32:1c:30:5a:
a3:00:98:a7:76:d1:63:18:c4:06:c9:c6:33:ce:2e:
25:1e:99:7a:2d:4c:69:b4:b6:52:19:a1:cf:6e:c4:
01:ba:fa:6b:9e:4d:19:ae:c0:5f:e4:57:46:07:56:
95:16:e5:79:ec:1f:9a:76:cc:c7:7b:5e:05:ad:f1:
be:a6:a4:06:40:69:e2:10:f9:cb:e7:9e:0b:7b:1e:
ec:15:0c:98:9a:dd:a0:b2:37:11:74:3e:7c:bf:96:
63:67:0f:dd:31:ab:81:1c:ab:e4:22:76:75:2f:8f:
bb:59:85:61:34:89:71:b8:47:64:22:fd:f8:3d:b5:
dd:f0:f1:57:6d:a0:1b:62:18:2b:81:68:dc:4d:38:
37:c8:e6:d8:b3:43:cc:23:a4:09:4e:26:30:01:0a:
4f:7f:9b:6f:2b:72:e8:1a:3d:42:e8:f2:06:62:b9:
5a:a7:71:56:47:68:44:8c:90:0b:76:1f:a7:62:9a:
b1:d7:05:a4:40:0d:af:ab:ef:f7:76:64:22:5f:2b:
c0:5c:0f:d5:42:78:2e:aa:e2:99:bd:6f:64:db:9b:
b2:dd:0b:b6:41:21:78:f9:08:2a:21:07:a2:63:8f:
93:de:fb:82:35:fb:c5:f3:c1:0a:a0:02:2d:98:77:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:99:9A:34:F8:B8:C9:43:44:A4:8E:58:5A:27:47:B0:11:EB:49
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f7:24:f6:27:29:6d:35:e5:3b:61:ee:6b:9c:24:97:cf:01:
68:fb:68:4d:ed:bb:3c:22:55:c2:3f:01:72:e9:4b:cb:08:43:
98:a0:d5:c4:d6:f6:3f:cc:3f:bb:f7:2a:54:7a:64:b8:72:1e:
5c:a7:7a:26:b1:7f:c2:78:f1:11:a0:dd:d0:a7:72:da:bb:ac:
54:ea:a2:fb:f3:f4:a2:b9:48:25:2c:cd:4f:57:4c:32:49:49:
c3:4b:5e:57:5f:14:4e:8e:47:c0:2c:d7:57:bc:23:1c:c9:b2:
1c:30:1b:dc:a7:db:5d:9f:6e:29:db:3d:75:f5:99:6a:d6:6d:
f5:60:a7:d9:04:cd:e6:09:c0:8c:9a:d2:ab:3b:88:15:a0:25:
81:9b:58:5f:29:d0:dc:da:35:7e:38:bf:f7:9c:af:db:34:b3:
b7:87:18:77:2b:ee:8e:d5:bc:d2:8e:c7:b1:eb:1f:f4:3d:ad:
03:50:87:4b:ce:d5:ce:1e:a4:21:46:1c:00:09:9c:f4:27:97:
7c:ba:c6:99:97:b2:2a:2b:f6:bb:39:8d:e0:37:3d:d4:d7:88:
71:48:2a:2c:05:29:3d:46:27:e2:5b:83:29:02:3d:9e:cc:f3:
45:ed:1a:a2:97:72:f2:36:2b:f6:f8:71:12:e8:af:93:51:a2:
3e:7a:9c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:49:18 2026 by rpki-client