Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
File: 0c0c1HQkGQk2se35qYScPjBYfzo.mft (raw, json)
Hash identifier: veIp2/qVM4SKyp5LdZSdlyqLlSkRXCQjL5xnxz+O8fQ=
Subject key identifier: FA:AF:E3:15:8A:99:00:11:9A:27:93:B3:B8:CE:34:06:65:50:D4:4C
Authority key identifier: D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
Certificate issuer: /CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Certificate serial: 01A1DE02D4B6265B7C3565C2594D9C5CAE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
Manifest number: 1257
Signing time: Sun 15 Nov 2026 07:01:29 +0000
Manifest this update: Sun 15 Nov 2026 07:01:29 +0000
Manifest next update: Mon 16 Nov 2026 07:01:29 +0000
Files and hashes: 1: 0c0c1HQkGQk2se35qYScPjBYfzo.crl (hash: YCW3YoLcLpdj400X/obtup2FIS+kpB1BOnoQF5jnQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:d4:b6:26:5b:7c:35:65:c2:59:4d:9c:5c:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Validity
Not Before: Nov 15 07:01:29 2026 GMT
Not After : Nov 16 07:01:29 2026 GMT
Subject: CN=faafe3158a9900119a2793b3b8ce34066550d44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:ac:8c:98:39:cf:be:b2:4c:81:3b:8f:27:
8e:92:01:d5:08:62:2b:25:c1:0b:e9:89:c2:67:63:
3f:03:b1:3d:9a:2a:42:fb:3a:5c:73:56:09:3c:f1:
7c:3a:af:d7:50:72:02:4f:3d:58:e6:f9:97:36:aa:
d7:90:b4:48:30:d4:23:43:1e:fc:18:22:e9:0c:51:
1a:f7:d0:dc:ef:24:1e:f2:69:a5:30:f3:36:36:fd:
ab:c8:e3:88:84:56:75:01:72:c5:31:77:e3:39:40:
6f:cd:b6:9b:0a:86:a1:d0:63:9b:27:33:f1:a1:78:
18:8c:c1:f8:aa:e4:3a:97:45:81:86:53:24:f5:d6:
ca:0c:3d:fe:e4:0b:24:8f:86:76:68:e5:c7:64:01:
05:ed:07:59:78:e1:fe:7f:a9:f1:15:49:f4:42:8a:
cc:f1:3d:63:77:e2:0f:fb:ad:66:b8:39:06:b3:1a:
d5:bf:9a:90:22:23:b5:e8:d5:ad:41:d8:06:1e:4a:
96:0e:6f:85:3e:3d:03:e6:55:82:79:27:1b:a7:0e:
d2:d7:48:72:57:ab:bb:60:33:ff:f0:a7:76:8d:1d:
ad:3a:2c:9f:20:b0:85:66:0e:d7:96:07:c7:e0:52:
48:51:b4:83:09:6e:d8:58:11:07:7e:50:bb:c9:77:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AF:E3:15:8A:99:00:11:9A:27:93:B3:B8:CE:34:06:65:50:D4:4C
X509v3 Authority Key Identifier:
keyid:D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:23:17:0b:23:4e:af:0c:3f:ae:94:41:25:7a:b0:6a:94:44:
47:2a:c2:ff:33:f3:bb:4b:9b:5f:35:79:eb:b7:b4:5e:47:5b:
02:ea:43:84:cc:94:7c:ec:09:c1:5b:22:76:24:7c:50:89:d0:
a2:8c:56:f7:4b:8b:44:59:4e:17:69:51:fe:9e:3c:9d:6f:77:
7e:be:9f:b5:28:e6:f3:31:99:5a:e9:66:48:4e:3a:4c:75:48:
67:a2:bb:b5:59:07:c9:e7:19:48:af:b5:52:ae:a6:15:5e:73:
21:d3:a9:10:c5:13:ab:e3:ac:1e:b1:80:5d:12:d2:46:80:2c:
dc:7e:d6:11:59:89:1b:d6:ee:da:a6:2c:50:14:76:45:7f:f2:
09:21:b5:62:88:ca:ca:1a:08:f4:f6:c9:53:a1:9b:09:ed:58:
12:b1:98:d3:31:ff:2e:b6:d0:23:9b:b0:0f:d5:65:4f:f5:23:
a1:4b:2a:cd:22:fa:b1:33:b2:dc:de:2a:b5:d5:39:26:14:c9:
d5:be:b9:15:b9:7c:91:51:11:8e:6e:01:24:1f:3f:46:8b:c8:
5b:ea:67:10:53:40:95:2d:d9:1f:77:49:12:5a:1c:a4:43:35:
e2:8b:b5:61:9e:5b:f2:4e:6f:a6:6f:24:de:54:3b:2e:a8:1a:
cc:3c:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:52:20 2026 by rpki-client