Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
File: 1fPMerDTZIuMvnYlNTOnFLoAnAM.mft (raw, json)
Hash identifier: oXelLAt8tJm7ewAMulpcnBzdOMVFsp8lsQovTKSXgmI=
Subject key identifier: 4E:B3:13:9B:40:E0:E2:3C:25:BC:51:A4:CF:7A:F2:17:AB:9C:34:F7
Authority key identifier: D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
Certificate issuer: /CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Certificate serial: 01A1DE709B0AF143E3F30E47624DA29D0DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:24 +0000
Manifest this update: Sun 15 Nov 2026 09:01:24 +0000
Manifest next update: Mon 16 Nov 2026 09:01:24 +0000
Files and hashes: 1: 1fPMerDTZIuMvnYlNTOnFLoAnAM.crl (hash: 6+Y0+K+2YCm7QaVoZa7aPPXprbxyyb/3BqF48mL+QWc=)
2: BVJvwz2lh6qW2nCUQKTYIFcAKjQ.roa (hash: kaLfha+ZH+y5bWDO7gX0LkZS212RgAQ6Anv4ur63M5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:9b:0a:f1:43:e3:f3:0e:47:62:4d:a2:9d:0d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Validity
Not Before: Nov 15 09:01:24 2026 GMT
Not After : Nov 16 09:01:24 2026 GMT
Subject: CN=4eb3139b40e0e23c25bc51a4cf7af217ab9c34f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:de:2b:ff:47:c1:bd:b1:01:f0:42:93:e4:
e4:62:90:11:57:0c:35:fa:b0:7d:30:9c:cc:99:fa:
e5:85:41:b0:82:0a:b7:b7:87:32:ec:75:e9:55:51:
6d:1a:78:db:1e:91:26:05:73:52:78:4e:c0:16:1e:
67:3c:05:ed:cb:33:df:64:d5:a9:20:4b:4e:91:ae:
3e:ba:8e:d8:c5:55:e3:20:39:64:76:00:e4:02:2a:
07:d0:59:c9:5f:69:28:ee:b5:e4:85:44:82:29:30:
ff:11:cf:e9:8b:57:b5:92:31:31:da:da:fa:5c:4f:
9b:90:44:67:b7:68:8c:ed:de:fa:3d:6a:2d:ab:d0:
e5:ed:44:77:92:16:7c:b4:d3:f2:98:7c:41:1a:60:
1a:18:c3:3a:65:24:eb:a1:80:02:b7:0c:b4:fc:9a:
81:34:48:79:09:9e:b6:da:bc:7f:05:41:c7:38:c4:
4f:9f:8d:ca:4b:76:89:63:ce:a4:62:66:f8:98:d1:
1b:36:71:fb:0a:2c:48:c2:91:09:fb:2d:c0:2b:50:
ab:87:8f:c6:a7:1d:b2:c3:f6:d4:db:d3:03:89:f5:
06:75:9f:46:46:cc:1f:2f:1c:aa:35:20:99:28:69:
5e:f3:00:86:68:ae:d0:0d:68:06:5f:27:03:a2:62:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:13:9B:40:E0:E2:3C:25:BC:51:A4:CF:7A:F2:17:AB:9C:34:F7
X509v3 Authority Key Identifier:
keyid:D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fd:8d:08:ec:c5:7b:77:27:e6:11:2a:f2:96:82:86:57:a4:
e2:ab:bc:38:bf:ca:a0:df:2b:d2:0a:d3:0f:5e:ad:20:33:ab:
fb:ac:d6:de:d3:f4:0d:04:e2:71:4b:20:39:99:ac:6d:69:f4:
6f:c1:27:fd:11:ae:77:b8:f5:5b:e7:b7:b6:17:c5:85:ac:b1:
d8:5c:ce:ae:5e:5e:2a:30:36:5c:df:e1:7c:c4:06:ae:65:43:
db:50:92:f8:3b:8e:9f:37:6f:21:0d:36:30:b5:24:4b:28:38:
e6:64:c0:91:1a:80:20:18:25:fc:7f:14:51:1f:7c:3b:ee:05:
aa:a5:6a:56:64:cc:3d:4a:4c:5c:ed:a1:dc:2e:ca:96:30:f3:
2c:91:81:b2:c5:f3:d7:82:96:d5:d9:8c:e5:1f:7f:fb:2a:2d:
dd:8f:d3:85:01:03:09:9f:b1:b2:48:18:23:fb:3b:ae:7f:80:
e4:5f:23:85:56:28:54:75:b0:ee:3c:86:d8:86:72:60:ea:e3:
a9:a5:2e:5f:71:81:b1:d2:1d:31:87:2f:be:e5:35:1e:1e:e4:
32:b0:9a:7d:4a:9e:80:b7:a4:d4:72:94:b3:eb:b5:b8:cf:a5:
82:b8:54:c1:e1:a6:b4:14:d1:26:4e:8f:44:cf:af:2e:d3:f7:
f3:7b:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:47:05 2026 by rpki-client