Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: DgX0FUn5rYKezhD2dLM4ZYqXPGZYrIPG8rPmZ/tvigY=
Subject key identifier: 93:80:02:15:DA:6C:1A:3C:FA:04:BC:B1:A9:43:0F:92:A7:35:0F:7B
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 01A1DEDEA15F7C4BFC74FBCDB5D6D7A13F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0F0F
Signing time: Sun 15 Nov 2026 11:01:34 +0000
Manifest this update: Sun 15 Nov 2026 11:01:34 +0000
Manifest next update: Mon 16 Nov 2026 11:01:34 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: JBJqYbeX/0i4i0QtNr6O3StkcfyhDiQ6DepeS1zqVNo=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:a1:5f:7c:4b:fc:74:fb:cd:b5:d6:d7:a1:3f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Nov 15 11:01:34 2026 GMT
Not After : Nov 16 11:01:34 2026 GMT
Subject: CN=93800215da6c1a3cfa04bcb1a9430f92a7350f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:54:8c:9b:e7:a6:ef:f2:0d:b2:90:5b:bf:
3c:f5:ad:29:49:25:59:e9:ca:29:3d:7b:27:d4:d2:
93:d6:d8:b9:22:7b:de:48:07:d3:d0:30:e4:e3:9a:
ec:99:67:42:1f:85:7f:ae:da:53:35:84:ac:59:3e:
47:70:a6:86:8c:b7:95:b6:61:76:5f:a1:36:3f:44:
40:38:4a:02:8c:a2:4b:aa:2e:61:fe:33:3f:29:84:
c7:af:1d:fb:9f:42:9e:a0:40:b4:7e:c1:9d:44:30:
8e:45:f8:be:95:72:3e:be:de:9f:67:60:85:67:3f:
f4:f7:0d:d3:22:35:ad:b4:5b:12:4e:44:26:6f:47:
06:56:1b:ba:5d:88:75:9e:96:82:9c:81:f8:84:bd:
61:39:ce:fc:47:c0:e2:74:af:7c:35:34:e1:b2:c3:
82:64:0a:74:ce:d4:9d:25:80:41:23:e0:56:5f:ab:
9f:e1:83:1d:eb:cd:55:87:e5:9c:e6:81:a4:4d:c9:
bc:40:70:c6:5e:dc:80:7e:e5:bc:6c:c5:ed:f8:8c:
58:f7:43:3d:dc:0a:3b:64:88:ab:cd:c5:5e:8d:5d:
b9:e9:fc:61:da:47:05:fc:1e:cf:9e:c7:e3:a8:31:
aa:c2:28:42:08:18:b1:96:f5:a2:b5:1b:23:cf:ee:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:80:02:15:DA:6C:1A:3C:FA:04:BC:B1:A9:43:0F:92:A7:35:0F:7B
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5b:80:01:41:90:2c:bb:4a:88:ab:a1:05:02:3b:a3:71:71:
b2:7f:fc:56:21:e8:cb:46:5f:88:3a:fb:5e:0f:38:86:e4:84:
02:cb:18:e2:49:31:d3:66:38:b7:9e:3a:c7:43:65:a7:9f:e4:
c1:d8:8f:ce:f8:fa:ad:ed:c1:fb:9f:e9:a4:5b:73:b9:55:fe:
54:19:e1:dd:ce:81:2b:f0:b2:dd:f4:aa:1d:3d:75:d3:68:e0:
9b:93:6b:4c:e8:ba:bf:ed:16:92:de:b5:a7:98:ab:82:67:fe:
78:54:5c:ab:f2:f7:85:73:42:e8:19:95:21:42:e9:79:ce:ff:
42:15:23:62:d7:90:76:51:33:8b:02:6e:81:c5:b0:c4:47:df:
05:5c:65:20:7f:93:c5:3d:e3:1d:ec:05:2f:f7:98:3e:52:ce:
ec:49:07:56:8b:0a:4f:af:0d:00:ca:73:d7:23:ac:27:24:df:
57:6e:2b:4c:b9:52:5f:2e:9e:73:ed:d8:82:ba:08:25:ad:cd:
36:83:4c:61:9a:a3:90:63:09:56:7e:81:14:ec:69:54:6f:40:
de:8d:ed:63:2b:27:a9:31:48:d7:bb:31:aa:b0:bc:d1:2e:ef:
dc:e1:44:50:56:f1:00:e8:53:75:73:b3:a4:b7:88:75:26:80:
88:a1:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:30:08 2026 by rpki-client