Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
File: RSsOTTKQu-kEcHOua_f3Gik60vo.mft (raw, json)
Hash identifier: 0h8DPyc6BLCmlaCn7rrGGz7Qy/THa2JuYzWgZrZ9YG8=
Subject key identifier: 8B:45:31:DE:2A:03:DB:FC:8C:F7:DB:E8:A8:B4:BF:D9:7B:10:13:80
Authority key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Certificate issuer: /CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Certificate serial: 01A1DC82BC7F56830DA2C4DE84F50385CA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
Manifest number: 0170
Signing time: Sun 15 Nov 2026 00:01:57 +0000
Manifest this update: Sun 15 Nov 2026 00:01:57 +0000
Manifest next update: Mon 16 Nov 2026 00:01:57 +0000
Files and hashes: 1: RSsOTTKQu-kEcHOua_f3Gik60vo.crl (hash: /eaz9MWoFzft+1W8vsyHe3zKdijeAkjGOodCKXcpwU8=)
2: exbERZ2VE3H_IUCLP_voeLboHP0.roa (hash: JPKk8iUpWJU1p64IlQPmjoNyJZy0+8MtOgNIjDKxPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:bc:7f:56:83:0d:a2:c4:de:84:f5:03:85:ca:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Validity
Not Before: Nov 15 00:01:57 2026 GMT
Not After : Nov 16 00:01:57 2026 GMT
Subject: CN=8b4531de2a03dbfc8cf7dbe8a8b4bfd97b101380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:8f:5e:d7:6a:dd:11:13:08:e3:44:2e:18:
5f:a7:12:cd:63:57:04:4f:81:58:62:e9:13:59:49:
de:a4:77:9a:8a:72:2c:6f:3a:91:b3:f7:01:7b:f3:
be:9e:be:e4:6b:6d:75:34:9f:01:20:5c:d2:84:20:
32:e7:10:58:57:b9:77:e7:33:7f:97:6c:12:94:25:
08:7b:92:71:74:e2:32:74:e4:5d:55:4f:97:6b:4c:
b4:35:97:a5:06:ba:89:63:5b:9c:36:41:4a:95:8a:
e1:83:21:b2:3d:dd:91:a4:94:40:53:05:5e:d9:9e:
20:cd:95:50:5d:b8:05:4a:40:f8:53:d7:f6:22:22:
95:83:5a:02:09:78:77:a3:e1:58:f7:79:4d:9e:a2:
86:ea:d3:f9:c4:01:16:0d:9c:3c:a9:4e:38:6c:8e:
46:a2:fd:23:54:dc:a7:da:07:4a:6c:ec:ce:71:35:
7c:1d:12:ae:02:dd:51:fa:60:53:62:b8:b4:dc:20:
c6:21:d7:86:00:d8:7c:b7:2c:ef:a8:2d:68:56:16:
ae:63:b2:b1:f3:97:90:3a:45:7b:e3:e7:8a:8d:38:
fd:bc:6b:ef:e3:d9:ec:81:f7:00:a2:9d:64:81:fb:
a5:a7:21:e8:da:6b:66:e0:4b:a4:8d:64:30:82:83:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:45:31:DE:2A:03:DB:FC:8C:F7:DB:E8:A8:B4:BF:D9:7B:10:13:80
X509v3 Authority Key Identifier:
keyid:45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:74:6d:28:29:7f:2d:3f:29:73:19:fa:53:a8:9a:e0:bf:48:
38:04:b3:0f:93:e2:cd:1d:0b:97:c8:18:0d:dd:c0:52:31:f3:
69:ec:00:53:ac:c3:68:db:e2:93:4a:37:bd:91:c2:32:00:f8:
c5:88:7d:d2:72:9e:41:8f:b0:ff:3a:41:e3:55:66:e1:81:4b:
6c:05:85:0e:20:71:6f:d7:61:1b:9d:68:b2:fc:77:df:a3:fa:
3c:d5:2d:e3:a1:c2:64:d9:84:a2:ee:bc:74:81:f0:4c:42:70:
88:27:94:92:bf:6c:3b:f9:44:4f:d0:26:b7:1b:23:8a:b1:2d:
f5:1d:02:93:c5:9e:0c:4d:9b:c0:7a:0d:08:32:d4:bd:a1:9f:
18:c5:ee:28:b6:ba:36:7a:29:ff:3c:3c:a6:8d:52:a2:72:08:
8e:6a:ca:b1:64:4b:6d:d9:0f:9b:c6:a5:b1:ec:21:35:ae:3f:
cf:aa:49:1e:00:0a:b1:cb:b9:48:ea:d6:24:c4:4f:b0:41:f1:
cb:98:b9:4e:a2:99:c4:54:6f:a3:18:c1:17:26:38:37:88:c1:
61:bd:41:38:9b:b1:48:dd:ff:27:86:73:e4:f9:0a:84:5f:29:
64:77:c5:5e:81:a6:45:dd:4b:65:ad:72:0c:02:8f:d4:95:7b:
81:e1:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:50:18 2026 by rpki-client