Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: ALKddxys8+N2NI7hDWKqd3ImJtvhi+teoJx7pl4Eh10=
Subject key identifier: F5:10:F7:F4:2E:75:80:FA:B8:D5:92:80:F5:5F:65:1B:3A:E6:DD:D3
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 01A1DCB91DD1E641A0DFCE0C6ABAB7ACE9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 01:01:21 +0000
Manifest this update: Sun 15 Nov 2026 01:01:21 +0000
Manifest next update: Mon 16 Nov 2026 01:01:21 +0000
Files and hashes: 1: 5PEM24BMPrcvxY-cL8Z6QKGwr1U.roa (hash: 9iefR/dFPM3ozUCII4KvIo+RC9gYE16NJW6hpn8+KmU=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: QAFP0tfGmcojWrNOTNsaRhIF7ea6TLkF/1DJZmgTIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:1d:d1:e6:41:a0:df:ce:0c:6a:ba:b7:ac:e9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Nov 15 01:01:21 2026 GMT
Not After : Nov 16 01:01:21 2026 GMT
Subject: CN=f510f7f42e7580fab8d59280f55f651b3ae6ddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:21:8d:88:ef:93:f5:ae:ec:bf:f8:ef:47:
96:86:45:de:19:0f:76:c4:23:95:95:8e:53:09:c7:
1b:71:8c:a3:da:73:71:96:c2:03:15:52:07:7a:7d:
18:ec:fb:7c:e3:d5:71:a6:7d:02:c7:83:a2:5e:37:
f5:3e:55:5d:b2:5f:60:bd:06:1e:58:ef:2d:fa:1c:
d9:9a:7e:5d:cb:24:a3:05:e9:6a:18:e2:06:20:27:
78:e6:9b:9c:75:c6:df:2f:de:21:6f:2f:2e:82:99:
01:69:18:cb:b3:8e:cd:a1:1f:cc:54:1b:5f:fc:2e:
16:74:77:89:80:57:6c:4e:6d:dd:a6:01:f5:56:8c:
3d:89:f5:91:78:e4:a2:5b:c8:4e:92:cd:00:aa:25:
e7:47:3e:4f:64:52:6b:37:1f:05:8d:52:f5:0e:eb:
49:22:de:7c:43:83:fc:61:a4:9a:60:d5:85:ac:26:
15:9a:19:f1:7c:2d:2c:48:6b:a1:0e:fa:90:29:d7:
02:08:80:a2:f2:87:8f:86:c5:6c:28:ff:0e:b7:0b:
de:c4:7c:0a:6d:63:8b:e2:37:31:2e:f7:6a:56:a6:
d1:f6:21:9b:91:d2:94:fe:5a:bb:76:60:76:cb:3b:
d9:91:0f:3d:fe:4f:77:f8:b4:2f:dc:80:7a:1c:e9:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:F7:F4:2E:75:80:FA:B8:D5:92:80:F5:5F:65:1B:3A:E6:DD:D3
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cc:c7:5b:07:f8:65:e1:a7:23:20:2d:71:5d:0d:f8:80:1f:
e0:22:73:cb:15:fc:3a:8b:5b:aa:27:47:d6:78:de:5e:76:87:
cc:1b:fa:cb:1f:8e:75:f0:e3:68:97:16:e7:25:7f:e7:a3:28:
dc:4d:78:78:e9:c1:b4:77:4f:97:c2:96:9c:d0:db:0d:22:e8:
64:da:f5:8f:8c:16:d5:56:c1:c6:c1:35:c9:84:93:42:90:1c:
a4:c0:a3:b7:67:64:46:53:d3:af:64:89:73:b8:84:0f:9f:81:
64:06:9b:d7:98:16:d2:8d:b3:d2:7b:91:93:52:db:28:0b:b1:
f5:c5:66:25:35:f1:6d:3f:c5:ac:30:7d:47:db:1d:77:74:ed:
b9:bc:a6:89:61:81:15:f0:e0:20:8b:74:04:0c:bb:a6:56:4d:
10:43:af:5b:35:55:c1:ee:e9:03:a9:75:d5:32:92:b2:02:b7:
4d:d5:03:08:f0:8a:fe:ba:4b:d0:19:10:72:5d:f0:db:f5:29:
1c:c2:a2:fc:79:57:6c:e8:1c:72:b3:3f:4f:70:e8:74:2e:f8:
b0:14:4a:d8:14:ab:a7:ef:a7:f7:6c:55:65:e0:58:09:cd:ad:
41:77:f4:6d:e0:0c:60:c2:72:b4:9b:e2:90:6f:14:8c:1d:02:
16:01:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:41:31 2026 by rpki-client