Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: oIub0h2+KNP0CKm2YH44Imd+eNNThGQejg67AJWzUi0=
Subject key identifier: C7:67:1F:DD:2D:1D:DA:3F:69:12:9D:71:CE:DF:4A:49:5D:CD:7B:EF
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 01A1DF4BFE50FF8D6A9BC7CEB57E816A048A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 181E
Signing time: Sun 15 Nov 2026 13:01:01 +0000
Manifest this update: Sun 15 Nov 2026 13:01:01 +0000
Manifest next update: Mon 16 Nov 2026 13:01:01 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: yeqn01aD6DruT9ZzMY8Rc9oG+T5X6WPz9YOLYGYpcWc=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4b:fe:50:ff:8d:6a:9b:c7:ce:b5:7e:81:6a:04:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Nov 15 13:01:01 2026 GMT
Not After : Nov 16 13:01:01 2026 GMT
Subject: CN=c7671fdd2d1dda3f69129d71cedf4a495dcd7bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:a8:7c:f7:77:99:65:13:df:72:6d:64:ba:
1e:7d:fa:1c:a2:c5:5f:de:ac:8d:86:18:d4:21:f1:
39:98:d1:09:12:07:1c:ab:75:10:da:b3:b9:3c:39:
e2:7e:9b:8d:4c:f0:71:d7:4a:0d:08:e2:9b:fb:a0:
e3:13:63:18:71:6c:6d:7b:62:94:63:a9:ea:df:7b:
0c:97:2c:d9:97:a0:2c:7a:2f:d7:60:dd:b2:7a:2c:
4b:9c:8e:98:32:a9:89:b4:fa:0c:ba:58:a0:6e:3b:
28:40:5c:16:fa:c6:be:29:10:ed:bc:b6:16:06:05:
72:06:7d:8a:8d:0f:2f:71:b6:6d:78:9a:e9:b1:65:
4b:64:57:b0:ef:31:11:fa:1e:1a:07:b3:4a:c3:96:
e8:64:84:5d:7a:95:e6:11:ab:45:d5:c7:12:6d:ef:
77:73:d4:a1:b0:15:4d:72:8f:ce:65:7f:a5:61:77:
54:14:e7:7a:3b:cb:cc:cc:87:7d:58:7d:6c:67:31:
3b:d0:4e:ff:1f:f2:85:22:cb:60:04:b3:c5:9e:f6:
04:81:c1:d8:d2:d0:23:d9:50:c7:72:5c:21:8e:90:
dd:9a:49:91:98:2b:ea:bc:56:bf:5d:95:f6:f9:db:
d3:ad:08:06:25:c9:fd:d9:79:92:f2:70:75:10:90:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:1F:DD:2D:1D:DA:3F:69:12:9D:71:CE:DF:4A:49:5D:CD:7B:EF
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:35:62:45:5c:0d:f6:7a:2c:93:49:31:d6:cb:24:61:f1:dd:
09:f3:a9:e0:67:81:53:8d:dc:8d:85:15:9e:8f:fb:94:51:2e:
0a:32:f2:82:ce:05:b5:e4:1f:98:b6:27:20:8b:3e:a0:97:a4:
42:51:09:68:7f:d8:40:54:fd:0f:86:76:ba:20:89:56:ca:ab:
5d:c9:d2:c0:a5:86:6a:fd:27:a7:e1:a5:b1:61:e6:b6:be:36:
8c:62:03:cb:99:ed:0a:7f:0e:30:b6:46:f6:4d:a4:cd:e9:bf:
76:b2:b8:ee:2d:1a:3c:ec:98:9a:20:96:7a:39:42:dd:98:ff:
5e:2f:ba:5f:2a:4c:36:a9:eb:92:6d:03:90:2e:41:e9:f9:03:
c3:14:9c:5a:3b:f6:e5:54:79:17:91:c5:7f:e1:bf:af:7c:e5:
a2:4b:8a:6f:3e:5a:d3:1d:70:94:96:af:e1:63:e4:36:22:c2:
87:9d:1c:13:e1:9b:d2:e1:d5:87:fe:cf:3c:eb:9c:45:1e:88:
8f:f1:48:8c:3c:c3:dc:7d:5d:c1:2a:a6:26:f7:18:64:cd:fc:
83:f1:c0:0d:f4:e3:9d:17:60:64:b3:cd:ad:e6:d6:69:01:6f:
45:7d:68:d5:10:3f:22:67:1f:82:bf:7b:1d:ee:ca:30:bd:e4:
e8:66:5a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:03:30 2026 by rpki-client