Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: MS4h0YGduDzOONJeLNEw86JA3JB/5d8GJ3ue+E6vSTs=
Subject key identifier: AC:32:A1:A5:0B:4A:75:9B:04:0A:9F:02:EC:77:22:62:44:0F:35:D0
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 01A1DD94EE9F82713148341D11CC7ECF7B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 1B07
Signing time: Sun 15 Nov 2026 05:01:27 +0000
Manifest this update: Sun 15 Nov 2026 05:01:27 +0000
Manifest next update: Mon 16 Nov 2026 05:01:27 +0000
Files and hashes: 1: 1J8iJjDshk0K5lYg4l_c2ofYegs.roa (hash: qSMx+hDj/RyqV4hBcH75SbfZI3k3bmyUJ0HCop3PjC0=)
2: 6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa (hash: mhMaDP22Cm+kaRi3w+odof2fSxz3QNCIZTnea/2LJgc=)
3: GLowxEJyGBp1nEMdWvtqSz0VZiY.roa (hash: ML4E9JdDZZwBbJSqUGhG3KgDDzmdzocsJW0UdpRnOpY=)
4: KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa (hash: DFWENcijqgC7xsryWlbw+k7LPwKlKMpaUsREr9258uo=)
5: VrsyNZBxGyfOA3YVVpgqeIcESVM.roa (hash: c4qHeMt/gTBhla4MWGpV3XvJ5hr3kuLWCCMFzUqgBBk=)
6: ip5vS9fNHon-mqXtQ-q53u5FWlI.roa (hash: Fs/iN9Gd0AJYsYcUoU48tZmbjn+IsjIvYWzIldNyw9A=)
7: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: fzY+IxrBAU7r9dzT2oKnCAwqUO+7iQ4fNc19VZqOko0=)
8: o3zw5qxbUQAN4ngJ04Ua6I_EVso.roa (hash: R6H99VUdlL3VQQMNsfOEfD5tZa5hySUkiaztWdwSB/8=)
9: sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa (hash: Pc4iJgvyu3odfRJruIllViWmrmTVoSgp0uUpk5XKRjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:ee:9f:82:71:31:48:34:1d:11:cc:7e:cf:7b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Nov 15 05:01:27 2026 GMT
Not After : Nov 16 05:01:27 2026 GMT
Subject: CN=ac32a1a50b4a759b040a9f02ec772262440f35d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:10:b7:1c:cd:7f:aa:2c:26:5b:79:97:8c:
5d:a1:66:5b:db:d2:cb:a5:6e:4b:3d:0b:22:ca:cb:
d1:52:82:4c:43:5f:ba:4f:3a:45:3a:b0:5b:d8:91:
da:be:db:e1:36:fa:08:4c:a3:7f:f9:54:7c:d3:f5:
f5:97:01:ae:a5:c4:4b:b8:fa:4d:28:25:96:6b:2d:
da:e2:15:8d:29:3c:9a:2b:98:b8:da:97:dc:49:32:
2a:7b:e7:6c:a6:18:58:37:99:f2:83:b6:ec:e8:29:
9a:5d:c6:82:8d:d1:60:d3:29:59:0c:31:54:ef:43:
f7:b0:bb:fb:bb:aa:93:7e:ab:3a:cc:77:2a:16:65:
15:fe:65:97:43:74:a7:c4:40:1e:77:7d:57:d7:0c:
68:23:87:d4:2a:94:71:88:c0:3b:d4:31:9c:9d:21:
ec:eb:61:00:76:9a:2e:28:2c:0d:d3:6e:0a:7f:a2:
7f:8e:0f:1d:03:98:4e:e7:3c:73:bd:3f:30:5a:56:
a3:86:95:b1:4c:46:66:6a:2d:86:de:09:af:ea:d1:
d7:68:60:63:1b:0c:b8:33:86:ef:b3:97:5b:c2:8e:
9c:3c:c9:fa:3e:c7:68:3c:d5:de:03:a2:6d:a7:9a:
93:58:99:24:f5:26:cc:b0:f1:91:a0:7a:1f:d2:91:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:A1:A5:0B:4A:75:9B:04:0A:9F:02:EC:77:22:62:44:0F:35:D0
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d4:aa:9a:23:d4:4a:0f:27:20:1e:61:c0:01:9f:57:19:64:
38:e7:d1:1a:41:4a:c5:a3:61:4e:b3:15:58:54:88:84:4c:52:
0b:f3:cf:30:5d:29:8d:37:8a:39:b1:54:ed:39:7a:3f:62:ee:
bc:79:8b:ac:b6:21:f5:4c:98:ae:f0:7d:13:44:36:2d:e6:09:
90:63:6d:4e:c6:0c:83:f2:70:ec:f5:d3:fe:10:e7:d0:8b:f2:
95:07:ce:63:37:b1:be:37:b2:ed:b7:3b:f2:7d:c3:98:48:89:
12:6e:cc:6b:91:f1:0f:7e:9c:a1:6b:f3:9b:69:90:cc:cf:ff:
e7:94:fc:2d:87:13:31:1d:80:47:b6:8e:94:1a:c6:a3:9c:ef:
72:56:6e:57:84:11:64:96:6e:05:b8:4a:6e:81:08:7f:56:54:
5b:9e:f8:1c:2b:f9:c0:5d:c0:43:0c:74:81:48:3d:12:8e:21:
69:06:c5:d1:23:5d:4f:26:04:e5:17:52:bb:ed:ae:07:2c:ba:
31:e7:df:1b:5b:a0:1d:79:77:37:97:0a:1d:9b:09:1c:53:02:
20:19:69:93:99:08:77:6d:08:80:00:3a:f3:be:9a:fa:e0:14:
78:eb:bb:fe:6c:d1:5b:ef:82:4b:6b:8b:2c:ac:5e:a0:49:d8:
40:9c:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:05 2026 by rpki-client