Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: PCGdRYwaB6iMnsJ5XAjytgqtTCa5eI1SOxHRN2jN7fk=
Subject key identifier: B9:FB:B9:67:38:16:6C:D1:C8:EA:51:6D:9D:DB:0B:29:41:0B:98:11
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 01A1DD95173CB6D818C0E0472BAB0C34A772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0F48
Signing time: Sun 15 Nov 2026 05:01:37 +0000
Manifest this update: Sun 15 Nov 2026 05:01:37 +0000
Manifest next update: Mon 16 Nov 2026 05:01:37 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: CUh0E2UNb21vm0L5Ug2w6Q3RIwAYyXYFxoyPXKrhsfg=)
2: P79D1v19Ian523KEZhSWszXoZD0.roa (hash: XkrTvVGVwlwgPhzg8wu1CLzCIaP1i1FjUsoY2a47FY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:17:3c:b6:d8:18:c0:e0:47:2b:ab:0c:34:a7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Nov 15 05:01:37 2026 GMT
Not After : Nov 16 05:01:37 2026 GMT
Subject: CN=b9fbb96738166cd1c8ea516d9ddb0b29410b9811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:a7:60:0c:e6:8f:e5:2f:6e:a3:6f:4b:b8:
5f:89:e4:01:05:5f:dc:8d:e6:07:78:ea:ca:c8:bd:
a4:0c:f8:f9:67:dc:ca:f1:81:10:5b:23:90:9d:39:
1c:8a:ca:96:2b:d3:e1:ce:cd:f6:08:d5:c9:7b:58:
08:70:a5:0f:be:70:da:e1:22:6e:b5:22:18:04:b3:
78:26:94:b2:a8:e1:15:6f:a1:15:b6:7f:09:4b:f9:
ef:32:df:1c:9b:b4:96:9e:c6:73:8f:6c:72:4b:aa:
d5:ee:45:47:8b:d8:37:d0:49:a7:2c:f5:10:1e:05:
de:21:da:35:6e:fa:d6:17:39:cc:c1:0f:38:9d:a2:
9a:35:4d:3c:24:2c:92:12:a9:20:e0:0d:ac:4f:05:
0e:a1:04:01:44:e9:d0:dc:c5:c7:de:c6:77:a4:c3:
06:1d:7e:35:dc:50:ab:4c:c8:38:5a:d3:1d:88:a1:
3d:81:b2:84:3f:c8:52:8c:8c:23:f2:b7:7b:79:08:
cd:a2:0f:b5:96:e5:39:c7:90:b5:f0:40:b5:59:58:
0c:60:8f:9a:e5:52:c1:9b:4c:3e:e7:3a:4f:3b:96:
ad:a1:8d:d9:b7:b7:2f:ec:ab:e3:27:7d:e9:ac:e6:
d3:cc:69:6a:dc:94:f3:04:c0:3c:d0:b5:f5:37:44:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FB:B9:67:38:16:6C:D1:C8:EA:51:6D:9D:DB:0B:29:41:0B:98:11
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:43:30:db:23:7e:20:53:83:b5:64:61:ec:e0:00:d0:ac:e6:
41:91:55:99:b1:c6:87:8b:96:90:f0:84:40:2c:27:73:da:38:
8d:47:bd:d5:07:3b:ba:0b:a0:25:06:42:c1:c9:05:1e:73:c5:
6d:d2:76:84:13:1a:7d:9a:db:76:bc:6c:a5:6c:de:91:f3:43:
ba:c4:2c:3c:66:3e:b3:3a:c3:d9:60:f2:9c:a2:ed:26:cd:ab:
65:44:d0:54:dc:7f:96:6d:06:44:a5:5e:76:7f:fb:ee:b0:e2:
3b:50:b9:98:15:92:7c:7d:c8:e2:68:1b:e7:bb:87:f1:db:e5:
24:f9:d1:23:25:46:2b:5e:ab:9e:fa:33:bc:cb:7c:e2:44:25:
c1:53:c3:02:83:41:cb:52:b6:9c:a3:6e:cc:3d:11:62:74:4f:
53:d5:dd:48:03:08:f4:7d:7c:b0:90:53:86:18:82:68:7d:07:
0c:1b:fd:5e:3f:56:27:28:df:fa:5f:2b:2e:44:7d:5c:df:22:
0d:1a:62:af:f7:66:78:ab:20:46:85:ef:10:08:c8:8b:6d:87:
53:8f:f1:10:d4:9a:e2:b2:74:a1:d9:73:1d:9d:c0:8b:f9:25:
36:6d:33:f9:4e:e7:a5:60:9f:85:1b:60:bd:e6:02:cc:ab:2d:
95:56:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:03:59 2026 by rpki-client