Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
File: 0IaqHaAvZwEYCywDQdYDB_FKLL4.mft (raw, json)
Hash identifier: 7Zqzn341ncYIaF6gircoiGWfjBI78BVkppl6xHbZI9M=
Subject key identifier: 18:68:F5:3B:42:FA:58:6B:1A:7C:A3:E9:E7:3E:36:EC:D1:49:3F:72
Authority key identifier: D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
Certificate issuer: /CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Certificate serial: 01A1D9B8721852116A789633525AA11AB08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
Manifest number: 028E
Signing time: Sat 14 Nov 2026 11:01:45 +0000
Manifest this update: Sat 14 Nov 2026 11:01:45 +0000
Manifest next update: Sun 15 Nov 2026 11:01:45 +0000
Files and hashes: 1: 0IaqHaAvZwEYCywDQdYDB_FKLL4.crl (hash: 24viDhEhysOGkN76JYQ5hcAwhH+ew6oq7yBU/ev4aA0=)
2: 3A95eT0-F8FWn0aRvaXeJYEs4vU.roa (hash: LYh5oBJnNPibPoXaGK/ua+lzHz0SVEi30h9T4GjLlU0=)
3: dWRXL6GlJL5ZfmZx0cCdwJkYOrA.asa (hash: 4yNEgZE5634EFi1QHhyenk0Y/tnpyasW7YYGDpJwOeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:b8:72:18:52:11:6a:78:96:33:52:5a:a1:1a:b0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Validity
Not Before: Nov 14 11:01:45 2026 GMT
Not After : Nov 15 11:01:45 2026 GMT
Subject: CN=1868f53b42fa586b1a7ca3e9e73e36ecd1493f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:65:1c:f3:01:b9:bf:ae:a8:a5:0c:51:40:
63:8a:6b:34:b6:44:a1:ea:c7:f5:d2:e1:47:b4:50:
ce:05:7e:bc:59:03:04:8b:e5:17:90:66:a6:f8:29:
2e:32:6d:61:0e:55:84:42:98:09:2a:5a:51:63:61:
8a:67:00:3e:70:12:90:d0:43:f6:75:f5:63:b6:3e:
9e:d8:01:38:a9:69:02:9b:fe:ff:08:01:4f:5b:22:
68:0b:66:54:cc:fb:ad:37:ff:fd:94:fe:ce:3c:20:
af:ab:f4:b0:94:ad:75:b6:a2:2e:6d:2a:e3:8f:5b:
c5:bb:f4:89:60:6b:be:be:40:f0:6b:92:17:33:27:
02:91:c8:10:b9:e7:6f:b9:86:58:5d:b8:3e:de:4c:
5b:db:6e:33:bf:7e:68:a3:a1:55:b0:6b:ac:f2:9d:
90:d3:91:c7:de:7e:6a:72:62:95:77:4b:30:8c:56:
74:e7:c0:72:e6:e5:64:aa:dd:71:c5:7f:d7:c6:0d:
c0:5c:37:52:d3:7f:72:c2:dc:51:71:a2:b2:bb:46:
51:5b:d6:97:3c:91:e9:18:65:17:da:5a:cc:77:56:
0a:64:ce:71:15:b1:cf:53:02:5d:33:49:be:5f:e5:
73:2f:40:da:a7:ff:c0:69:59:40:4b:5d:87:b5:0c:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:F5:3B:42:FA:58:6B:1A:7C:A3:E9:E7:3E:36:EC:D1:49:3F:72
X509v3 Authority Key Identifier:
keyid:D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:88:72:de:f1:12:c1:52:f3:0c:65:2f:0c:62:a0:51:00:dc:
e2:7d:38:fd:24:13:53:2a:0d:45:16:1b:cf:6a:cd:d4:5c:f3:
b5:a6:dd:1e:30:2c:57:c3:f4:d2:f8:59:ad:5f:a4:72:e0:5c:
fb:ae:38:fe:78:dd:2d:2f:6d:5a:41:45:9e:46:b8:3f:58:f1:
3a:eb:d8:b8:90:ad:92:c3:83:ba:b1:47:c4:cf:a1:95:ec:42:
83:05:25:49:cf:df:f8:f4:e5:87:dd:43:64:c9:82:aa:58:0e:
e3:38:cb:78:de:39:d8:40:66:ed:c4:dc:59:c8:23:80:ab:06:
f6:bf:4e:e1:02:7b:4c:fb:00:cb:54:ef:d3:e6:49:43:a1:86:
01:a2:4a:b6:7c:38:d9:80:d1:3a:83:b6:83:3f:70:3e:92:2d:
55:01:26:0a:04:38:55:8d:2e:f3:23:72:19:08:59:b3:81:aa:
51:16:76:37:19:29:dc:10:06:6d:19:3a:c9:14:cb:17:61:be:
3f:d4:f6:d2:da:b4:02:9c:24:a4:11:ac:84:cf:bb:43:3a:32:
51:54:c6:8e:76:9f:91:42:0c:f3:3a:db:8a:0c:dc:a9:ba:f8:
15:de:fb:65:8d:8d:88:d9:8f:99:c7:92:a4:f0:23:ff:ed:4d:
d3:15:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:43 2026 by rpki-client