Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: pNQGAkoDzkG/LxQC5lhE+Vow0WcjvRJfxRv6Rr8hXec=
Subject key identifier: 0A:EE:51:FA:8A:2D:31:60:AD:F3:1D:01:E5:C2:71:EC:B7:8F:5D:B3
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 01A1DF832B470915645BC10D1EFE48CFC1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 07EE
Signing time: Sun 15 Nov 2026 14:01:17 +0000
Manifest this update: Sun 15 Nov 2026 14:01:17 +0000
Manifest next update: Mon 16 Nov 2026 14:01:17 +0000
Files and hashes: 1: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: Hv5OtFSQqJ9PmJh/Kp6SyJRExz0GZZG+KUFH3T5QAag=)
2: MepLmZbt23727bu7i1sZtq5TYHU.roa (hash: CEQGpaoQctPR7fkdzqVk8v2fKY5oxVttH1xe6bXTouQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:2b:47:09:15:64:5b:c1:0d:1e:fe:48:cf:c1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Nov 15 14:01:17 2026 GMT
Not After : Nov 16 14:01:17 2026 GMT
Subject: CN=0aee51fa8a2d3160adf31d01e5c271ecb78f5db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:18:af:19:0c:3f:93:36:6e:18:06:f1:4a:
45:ab:90:96:65:2c:b7:6d:d5:7c:83:d2:cf:0f:e6:
31:fe:a4:0a:75:fe:65:49:66:3b:03:10:51:12:5c:
43:75:52:b9:4b:31:49:15:d0:b7:81:d9:ef:bf:55:
49:07:d5:49:04:06:b9:13:e1:73:a4:25:b1:a5:8e:
37:7d:99:60:e6:79:23:65:aa:3b:45:35:a0:ae:ab:
fb:3e:b7:4b:f6:f6:2b:f0:db:7d:b3:c7:07:12:81:
c6:3e:b8:7c:4e:ef:6f:c8:81:ad:8d:6b:7c:24:3a:
d3:d7:67:5b:49:ab:bb:d2:8a:fb:15:8a:c8:65:14:
95:77:bf:5c:82:51:ef:8f:1b:63:57:d7:a9:14:5e:
72:d4:9a:5b:aa:fd:71:ee:d6:18:ca:fe:55:c7:dc:
ae:ef:17:7f:d5:17:d7:74:fb:01:de:a9:f4:8b:f9:
5c:2c:65:e8:d5:df:8e:41:32:ec:ad:4f:b5:6f:1b:
8d:f5:63:3e:75:68:2d:8e:64:68:78:86:5b:f5:72:
48:3b:dc:38:9a:1e:0c:bc:61:c0:c5:a2:8d:47:58:
93:48:00:69:87:3a:e0:f4:77:73:ec:92:c8:3d:88:
a4:a7:ba:4e:31:39:9f:84:f2:ec:fc:78:a5:45:19:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:51:FA:8A:2D:31:60:AD:F3:1D:01:E5:C2:71:EC:B7:8F:5D:B3
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:39:57:89:6b:4b:15:f0:67:56:81:c9:c3:54:da:f7:99:8a:
55:50:1a:92:be:52:17:67:c2:24:09:62:02:41:33:df:06:09:
f9:08:ce:68:aa:a6:1e:c3:c9:d5:f2:e8:3d:2b:e8:17:46:4b:
fc:93:66:eb:42:1c:35:60:c0:2b:e3:6f:5a:8c:59:4e:6b:b9:
e4:e6:61:c4:f8:f5:f8:fa:1c:f8:1e:4f:ef:50:82:6a:50:fd:
5a:87:3f:80:d0:bc:44:58:2e:d0:95:e6:48:b6:fc:de:3b:59:
43:01:22:39:45:9a:15:86:52:c7:05:92:81:a6:18:e9:fd:db:
98:79:a4:b6:07:fd:45:c6:70:d1:7e:b4:43:e8:41:9f:e0:51:
5b:43:59:15:e2:cf:2e:45:13:d8:bd:6d:38:71:bf:61:02:b0:
0e:3d:dd:1f:31:39:9f:29:6d:ca:28:0e:25:bf:a3:74:a4:f0:
ae:28:ff:0a:2f:6e:ef:45:3b:59:5c:86:16:4b:10:1c:01:9a:
96:f5:19:17:a0:7a:c2:1d:9c:30:8f:d5:d8:3d:d3:83:18:53:
a7:e5:68:84:52:db:c4:ed:ea:32:25:30:34:03:0b:aa:e3:9c:
ff:55:ad:43:e3:f7:05:23:a9:ea:cd:a2:be:26:01:55:43:59:
b6:15:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:39 2026 by rpki-client