Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: dk1cmvvfZmeftNOhIRhP+oHvfD5KhazSfU5B0dLxIDU=
Subject key identifier: F8:89:8B:9C:83:0F:B8:C9:F1:F6:4E:A5:83:90:D3:FD:85:F4:EB:6C
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 01A1DFF0EFE13AC9DE8DA8B371D05D11DBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 16:01:11 +0000
Manifest this update: Sun 15 Nov 2026 16:01:11 +0000
Manifest next update: Mon 16 Nov 2026 16:01:11 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: F/B8DrsHKT2MmTJZkU+oFMOS1UZC4oOfFEKJXtAjVfY=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f0:ef:e1:3a:c9:de:8d:a8:b3:71:d0:5d:11:db:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Nov 15 16:01:11 2026 GMT
Not After : Nov 16 16:01:11 2026 GMT
Subject: CN=f8898b9c830fb8c9f1f64ea58390d3fd85f4eb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:12:03:c8:66:3c:b4:4e:a6:19:fc:52:70:
bd:36:58:37:e9:9d:cb:c9:c6:9a:76:79:b6:c8:2a:
3d:ab:f5:a5:fe:0f:96:bd:7a:8d:92:ad:4c:0a:4a:
10:1c:2f:1f:49:68:8e:59:92:2f:e1:18:77:ef:81:
eb:0a:de:0b:eb:f9:68:32:49:06:2e:e6:29:c0:93:
a4:2d:ed:3a:9d:62:11:f4:6a:8b:81:a0:9a:0a:87:
e2:39:fe:1b:5e:e0:91:96:1f:f3:03:c1:4d:77:c4:
c7:a3:10:09:43:6c:23:cf:a8:0c:82:45:f6:43:7d:
f6:cf:5c:09:5c:22:e2:ec:72:02:a7:9b:a4:9f:1b:
ef:41:44:bb:77:71:d7:4a:e7:b8:0b:6b:fa:ad:44:
dd:16:f7:0c:65:d0:0c:a4:49:19:2a:af:c3:dc:68:
16:1f:30:25:f2:f7:da:8d:59:d2:31:11:1f:51:d5:
4b:10:bd:20:d6:7a:e4:64:5a:de:9f:8d:ab:71:39:
5e:db:dc:12:98:e3:0e:18:21:79:4b:fc:01:10:46:
57:d0:e1:5c:c0:dd:61:fb:44:96:c5:66:84:6a:e8:
19:d4:ea:65:51:67:06:a8:e7:24:db:18:41:9a:eb:
da:55:d8:31:50:88:de:34:b5:77:60:22:61:39:4d:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:89:8B:9C:83:0F:B8:C9:F1:F6:4E:A5:83:90:D3:FD:85:F4:EB:6C
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fd:e0:28:ef:6f:1c:97:13:cc:63:40:1d:4b:ab:7f:30:21:
1b:4d:01:60:7e:64:db:7e:6e:35:b5:67:e5:50:8a:45:89:83:
dc:3a:45:7c:5d:6b:d6:4a:ca:be:9b:bc:35:71:06:84:c3:e2:
6d:3b:17:41:95:00:6c:61:ac:bd:7e:fa:c3:60:87:f7:e7:e6:
55:84:2c:96:44:c8:3f:8e:50:9b:d2:e3:87:c1:f3:fa:13:c7:
25:8f:93:76:99:67:b0:5c:66:44:b8:29:c2:49:9a:09:2b:72:
16:d0:41:e5:d9:31:83:90:44:60:34:b7:54:8d:5d:8a:31:a3:
03:18:2e:0f:72:37:db:eb:1b:73:3b:58:06:2a:aa:2e:17:ba:
30:ae:d5:92:24:fd:fb:d9:f1:3e:58:6e:32:f4:55:68:59:26:
93:e4:ff:4e:75:eb:e7:09:fd:a2:56:d7:aa:fb:3a:0a:de:4c:
59:2e:54:b5:ce:8b:9e:ba:5d:5d:f7:1a:c1:4f:b4:38:bc:0b:
e1:fc:80:a5:00:9a:0f:66:60:6f:95:5a:21:fc:1f:ff:c1:7c:
1e:f1:61:5b:e9:c5:48:b9:82:5f:cd:f5:da:37:f0:34:26:8c:
8b:81:18:16:1e:2a:3d:7b:61:79:43:a2:5f:77:ea:3a:61:5c:
ad:ef:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:10:10 2026 by rpki-client