Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
File: 1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft (raw, json)
Hash identifier: E1LGHvO2lByED+BDbrFh7NptmL3ctV3XJ+0gID3c79w=
Subject key identifier: A7:8E:A6:F9:23:81:ED:D3:F3:95:1F:57:33:82:D6:71:28:9C:3A:F9
Authority key identifier: D4:9E:C8:C6:43:A3:B5:16:E8:4C:4A:7E:A5:C2:7C:FC:C9:AB:22:C2
Certificate issuer: /CN=d49ec8c643a3b516e84c4a7ea5c27cfcc9ab22c2
Certificate serial: 01A1DCF0469AA2FB79AFCF3D6FB7F3CBF4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
Manifest number: 010F
Signing time: Sun 15 Nov 2026 02:01:36 +0000
Manifest this update: Sun 15 Nov 2026 02:01:36 +0000
Manifest next update: Mon 16 Nov 2026 02:01:36 +0000
Files and hashes: 1: 0dLSCB-inIUtTe-M54gXO_yzuII.roa (hash: SwePqxqD6sgj7VhfscnreEQxLeyXUwp843laCUNr5O0=)
2: 1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl (hash: CQKld0VWoOZy7deHhkLolPm/Rvp92kfiVyTXL38AhRM=)
3: cCHc2071jPUfSdxVw1hfya7219k.roa (hash: G7uzQDVgliOYaasp15D3RtdUjtrHzBqJYwkoucVPw7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:46:9a:a2:fb:79:af:cf:3d:6f:b7:f3:cb:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49ec8c643a3b516e84c4a7ea5c27cfcc9ab22c2
Validity
Not Before: Nov 15 02:01:36 2026 GMT
Not After : Nov 16 02:01:36 2026 GMT
Subject: CN=a78ea6f92381edd3f3951f573382d671289c3af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:24:62:7f:12:6a:e8:fe:a2:d7:fd:a3:c2:
c4:9d:11:19:90:83:6e:9b:49:ba:62:d9:2a:2e:57:
e0:be:72:c6:17:36:84:b3:f2:e2:ab:62:19:6a:23:
3d:18:a2:56:7d:fa:2f:cf:f7:d1:3b:00:3c:81:7e:
32:fa:cf:ef:3e:62:97:90:cf:aa:57:e5:5f:47:b1:
29:3c:93:4f:bf:b3:c8:69:c5:5b:7c:f3:f9:ea:75:
c5:30:01:02:11:83:10:c4:53:c8:61:46:a4:83:86:
0e:26:dd:5d:23:6d:34:b0:42:be:af:57:a2:dd:66:
fa:0a:00:25:53:b3:44:6c:08:43:76:b3:6f:15:f4:
81:51:43:9b:91:2c:fa:c9:97:34:f3:21:ab:86:bd:
c8:3c:bd:77:2e:a9:1b:a8:58:4c:fe:b7:aa:11:09:
c2:41:c9:32:1b:4f:8e:38:f5:34:fb:b7:ac:a4:1a:
e0:1e:1f:8f:77:f1:d8:c3:08:6e:bc:75:06:f6:fe:
a6:64:38:97:12:da:eb:fc:3b:41:71:36:77:1c:39:
70:53:08:14:1c:ba:3c:f6:aa:73:d8:fb:54:39:85:
44:77:17:bd:49:17:8a:dd:0e:4e:52:c0:96:cc:bc:
30:09:84:24:61:15:2a:47:c1:68:89:14:58:1b:d3:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8E:A6:F9:23:81:ED:D3:F3:95:1F:57:33:82:D6:71:28:9C:3A:F9
X509v3 Authority Key Identifier:
keyid:D4:9E:C8:C6:43:A3:B5:16:E8:4C:4A:7E:A5:C2:7C:FC:C9:AB:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:08:d2:0a:68:ad:60:37:c3:9d:a9:70:36:95:a1:74:c1:6a:
20:bb:d6:3c:4b:3f:aa:be:e1:a0:6e:9b:80:9b:4e:60:a4:c1:
52:48:1b:c6:23:2e:2a:d5:92:3a:71:4e:bf:c9:52:4f:44:76:
64:83:13:a1:44:31:a9:ca:a1:ba:7d:b8:9b:13:14:bf:da:99:
ed:b2:fc:09:b3:34:4d:db:66:77:25:88:aa:d4:ee:95:e6:75:
6e:57:38:0d:db:0c:6d:22:d4:48:de:39:0d:34:1c:83:a9:98:
ed:70:64:cf:a6:a3:fa:34:b9:93:bf:9d:11:71:c6:2e:9a:0f:
66:3c:a5:a9:ec:a4:ed:33:ff:3b:89:14:24:4e:f1:a5:d0:a6:
5c:36:60:57:f5:ad:f0:8f:93:e5:f7:4b:60:c5:26:a0:d5:47:
df:77:15:89:30:1a:48:da:2b:79:66:8d:a1:6a:97:71:e4:65:
be:19:59:34:85:90:db:2f:94:ad:8f:59:55:25:73:29:76:be:
55:c1:8b:89:83:23:ec:d6:31:36:82:00:ab:44:31:89:11:0d:
b3:99:6d:f5:63:d8:47:75:96:13:04:9a:32:5c:4f:5b:a0:92:
bb:94:ca:12:bf:18:ce:54:42:78:64:43:c7:29:ff:40:af:0c:
b2:9d:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:23:16 2026 by rpki-client