Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: VK08Q0/0CUFBRXHC05gQ+5GubzMBJoWiavkBKLWbzHk=
Subject key identifier: DA:6F:1E:BB:56:A3:CC:36:ED:4D:83:52:5D:8E:4C:B8:54:40:33:5E
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 01A1DCB8BE60AFEC05F268999FBCBAF4B7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 01:00:57 +0000
Manifest this update: Sun 15 Nov 2026 01:00:57 +0000
Manifest next update: Mon 16 Nov 2026 01:00:57 +0000
Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: 421rc8Hsx/kJFutzyoDovk5XUViFEGlEV8SettDh4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:be:60:af:ec:05:f2:68:99:9f:bc:ba:f4:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Nov 15 01:00:57 2026 GMT
Not After : Nov 16 01:00:57 2026 GMT
Subject: CN=da6f1ebb56a3cc36ed4d83525d8e4cb85440335e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:5a:9a:97:78:32:e2:34:8b:93:64:d6:4a:
2b:37:08:5c:70:03:e5:f7:b4:d0:ad:2d:76:bd:1e:
d1:70:a8:b8:e6:6b:82:2f:ec:0f:9f:52:cf:a0:fa:
d2:c2:54:ea:4b:79:59:f5:61:1b:7c:8f:f4:5a:68:
a2:d7:5b:ee:ab:0b:4b:0a:f3:d8:9a:0d:b1:a3:1f:
7e:04:a1:10:1b:a8:4a:5a:d4:dc:de:ff:2b:e2:11:
77:ed:9b:20:c4:2c:2e:36:eb:ba:30:98:a5:8d:6c:
76:35:47:8f:46:10:28:94:88:31:3d:5b:35:fe:47:
de:aa:2d:55:b1:a5:96:d4:7f:61:ea:bc:38:c4:9c:
04:2c:86:e5:c4:89:c9:25:4c:91:c7:8a:42:23:48:
3c:7e:69:c6:ad:42:6d:1c:ef:5d:91:24:04:c8:6f:
fd:2a:ab:36:f6:95:c3:aa:37:59:cc:35:65:c8:4c:
0c:e5:0b:42:e9:36:b8:29:9c:4f:d0:37:88:1c:f5:
14:0f:5b:67:ea:19:30:97:2e:cb:c3:4e:60:cf:49:
6a:ea:f2:32:5e:88:e9:49:3c:f9:e6:7f:ee:36:d8:
3a:54:60:ee:83:1a:d5:90:91:c3:37:1e:80:66:0f:
e7:17:21:4e:b5:fa:26:38:3f:cf:22:af:80:83:61:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:1E:BB:56:A3:CC:36:ED:4D:83:52:5D:8E:4C:B8:54:40:33:5E
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e7:a8:c2:01:60:9c:2f:02:26:82:8a:56:c1:59:1f:a3:ab:
16:6f:ed:0e:e9:53:aa:56:9c:b6:1e:30:35:b4:9c:a2:76:40:
f6:82:0d:97:a1:9d:19:c8:4a:6b:5f:c5:64:39:29:64:7f:d5:
89:5b:fd:68:2a:97:3b:d5:61:1a:90:36:3d:cf:fe:43:c7:c4:
ac:ef:07:18:2c:21:f0:3a:d4:95:3b:08:a9:3a:a9:f8:ef:59:
60:1f:3d:51:74:3f:66:3e:a6:e6:4a:d1:87:b3:8a:70:7e:4c:
0b:97:79:d1:ac:5e:56:7b:92:60:48:43:bf:96:e9:33:bf:a0:
5c:83:d4:21:7d:5c:28:ab:2e:1b:dd:35:e0:80:a7:b5:2f:ef:
9c:83:3d:a6:83:74:e8:a9:72:9d:a4:53:b7:46:c5:11:0c:f8:
6a:1f:df:2e:27:03:af:d2:1c:e7:88:91:fb:22:a8:b0:14:f9:
d7:93:e9:b3:c8:6a:15:dd:56:ad:9c:6f:b8:48:ac:a2:31:b7:
1c:59:7b:d4:0b:95:a5:7b:92:6f:cb:d3:b3:77:6a:85:21:8d:
0a:48:29:45:2a:8b:56:b5:02:ba:44:e3:bd:bc:e2:11:aa:f1:
e8:4b:21:79:e8:4b:76:7a:7c:18:96:b4:3f:a5:34:00:af:be:
42:c5:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:32:19 2026 by rpki-client