Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: U4erveHKEByI/DZvmfUJbf8cDi9Om0nePBEhQFj+YII=
Subject key identifier: D2:0F:5F:27:6A:A7:2C:BD:01:A2:25:AF:C1:AD:FB:0B:AE:25:F8:50
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 01A1DDCC040BCAD65EC0DCFA9B997BEC8852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 0A8B
Signing time: Sun 15 Nov 2026 06:01:37 +0000
Manifest this update: Sun 15 Nov 2026 06:01:37 +0000
Manifest next update: Mon 16 Nov 2026 06:01:37 +0000
Files and hashes: 1: DhXIhTNHBAE7NvkalrnD2mWPOgc.roa (hash: XkSLod7NkjdHpR6f/sX0hfuPnykt4HOPZbPdtRM87jE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: FgDDw04sY/ixHgZnGb19b8ZkfNXszPaG0grnwu/gY74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:04:0b:ca:d6:5e:c0:dc:fa:9b:99:7b:ec:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Nov 15 06:01:37 2026 GMT
Not After : Nov 16 06:01:37 2026 GMT
Subject: CN=d20f5f276aa72cbd01a225afc1adfb0bae25f850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:2a:37:3d:0e:a0:82:28:18:98:64:51:cb:
f1:b8:9d:f9:8d:c1:52:1c:19:71:8e:9e:ad:f4:16:
0b:51:ad:56:3b:20:36:bb:1a:dc:7f:f5:b8:24:ee:
a4:09:60:ac:cd:c5:dd:78:b9:96:34:c0:ba:cd:cb:
40:ed:42:59:d9:ef:7e:5d:30:58:e0:dc:39:fc:5a:
34:3f:7a:25:32:ed:f5:77:d6:72:80:9d:11:62:6a:
4a:c2:8a:8b:1e:88:a7:17:0a:d8:ad:b4:c4:61:a4:
d6:53:08:45:8f:e1:33:b3:f9:b2:b5:e7:95:b2:a4:
03:4f:1f:85:8f:8c:fc:2f:03:52:84:b6:95:52:f2:
c2:21:98:f7:7c:44:b2:c7:30:c9:95:72:99:1c:c0:
9a:3b:df:29:80:87:66:a3:ad:4b:24:93:58:a8:da:
fa:e4:34:c0:f2:e6:c5:9f:15:d5:bf:4d:39:63:05:
c9:02:d1:d4:d2:5a:68:23:3b:23:8d:09:81:f0:bf:
6f:e3:45:2e:79:14:3b:3b:40:32:3b:d4:0f:65:92:
c3:f9:36:4c:da:2e:66:53:08:40:ad:30:72:30:f9:
94:67:d6:94:3c:64:c2:b2:50:7f:3b:6e:13:a3:cd:
9c:1a:7d:4e:98:a9:4a:bb:49:57:60:0c:85:de:af:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0F:5F:27:6A:A7:2C:BD:01:A2:25:AF:C1:AD:FB:0B:AE:25:F8:50
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bb:ba:d5:89:64:7e:35:3b:ba:d1:d5:53:75:22:4b:ee:cb:
7b:d1:2d:a5:e6:8c:85:29:a9:0b:f9:1b:c2:6a:68:d7:2f:30:
d9:ad:97:db:6e:17:60:8c:16:0a:1d:8c:a3:49:6c:15:92:ee:
46:ac:80:83:92:ae:69:d5:7a:4d:b7:7c:cb:bb:ce:0a:14:ac:
d4:79:45:58:be:de:95:ad:3a:60:5f:77:fa:d1:fd:ce:56:c9:
8a:a8:99:7b:bf:04:b8:0c:c5:ab:1a:de:55:cb:1d:d9:aa:d8:
17:ce:77:92:83:c5:3f:b8:79:fb:e5:51:f6:8f:26:71:06:97:
9e:76:ec:56:63:93:24:27:60:d6:f9:63:65:20:af:34:f7:e4:
51:c7:96:7b:2d:ba:6a:cb:8b:86:eb:d5:e4:2c:77:9c:59:f3:
10:50:f2:7b:d1:3c:45:12:95:cf:3a:5a:71:6f:09:a4:7c:a3:
ec:c4:33:94:12:52:b2:a0:63:4c:1f:bb:cb:c6:39:00:3d:ea:
eb:0b:62:fa:62:7c:8d:cd:cb:12:de:87:23:90:1a:46:f4:00:
10:95:c2:cb:e8:c2:59:38:72:36:84:c1:79:bc:01:10:fc:dd:
92:31:c3:a3:8d:af:9c:ab:60:71:e6:99:35:16:99:8c:2d:16:
e1:4f:f1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:02:33 2026 by rpki-client