Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier: DoYS8Ifc0F1uzwaGMvwh3++Tlo3CroXSt/TScI8gf/I=
Subject key identifier: E3:AC:6A:A5:CD:69:E0:21:A4:16:CF:8A:86:C8:A1:41:12:29:C4:1C
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 01A1DCEFD48EBC63A66C3AC60E47E637F1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 02:01:07 +0000
Manifest this update: Sun 15 Nov 2026 02:01:07 +0000
Manifest next update: Mon 16 Nov 2026 02:01:07 +0000
Files and hashes: 1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: PAWYnS8UX49hU8y+LfY/4BzihfqT088QmXG6juxK3qo=)
2: Tqhx4Fn_ogmc03013r8yI8JBIyo.roa (hash: n+rTrm4PulAJ0u2rK6/67Sh0qOIq9tX+Xq5NsrAfUfU=)
3: tg4JcBcc72nsYKViVZxUUBgVXQQ.roa (hash: f2eYldA7z0hzEnVdnyZLBMrCbNOlEuq0KoeSWyn4Dig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:d4:8e:bc:63:a6:6c:3a:c6:0e:47:e6:37:f1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: Nov 15 02:01:07 2026 GMT
Not After : Nov 16 02:01:07 2026 GMT
Subject: CN=e3ac6aa5cd69e021a416cf8a86c8a1411229c41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:36:c1:97:ab:42:3e:47:f7:33:ea:c8:06:
3b:13:5a:8a:43:3d:df:a0:34:ba:2f:96:b4:48:3f:
ac:d1:fb:bd:00:f2:bb:50:0d:53:48:c2:7d:b6:cb:
99:4e:fe:09:3f:8f:d2:42:c0:ab:9b:20:6b:63:d3:
6d:94:e4:2e:50:55:3a:8b:2f:eb:1c:8a:85:46:7c:
5c:82:c7:c0:f2:ef:f7:c6:d5:49:3d:ff:8d:0e:da:
c4:6c:ee:c7:c7:c7:25:b2:1c:e8:95:34:17:4a:76:
6e:26:b9:dc:ec:ac:27:7b:47:69:40:f8:2e:1f:9c:
54:94:55:19:71:e8:7e:6f:d2:85:e4:00:c7:10:7e:
77:49:07:8c:ea:41:7d:d0:dd:9c:f7:4b:56:6f:49:
8d:2e:6c:0a:70:37:67:f5:22:f4:00:63:30:7a:fa:
a3:bf:d0:bf:32:d5:cc:b1:2f:df:99:7a:72:fe:38:
f5:ac:c8:59:fc:b3:72:59:85:34:dc:bc:cc:e5:5d:
2f:12:4f:80:0d:e6:d6:70:d6:1d:b3:c3:b5:30:8d:
bf:dc:a5:75:fe:95:3a:de:b9:ca:77:43:13:24:6e:
44:c9:5d:8f:a3:88:c6:30:9f:75:21:eb:a0:f9:cd:
18:93:f0:88:50:83:56:ed:07:b0:c8:5a:0c:da:26:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:6A:A5:CD:69:E0:21:A4:16:CF:8A:86:C8:A1:41:12:29:C4:1C
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:61:53:4c:06:05:b5:cc:bf:70:2e:8b:e2:cc:61:63:48:33:
a0:45:ae:8d:90:d5:72:2b:47:59:dd:9c:0f:a7:c2:f8:9a:98:
65:6c:e2:55:b2:1d:54:dd:a9:88:3f:e9:d9:6c:c0:c4:9e:c4:
0c:21:69:47:fc:04:da:31:40:f6:5b:b9:b3:98:6d:c0:7f:eb:
f5:13:3e:b3:21:8f:25:aa:97:e1:30:e5:c8:98:1b:fa:6a:fe:
1c:53:9d:e9:20:df:3c:ee:89:4c:6b:03:9c:3e:7a:dc:bb:15:
f4:31:f8:33:3c:83:18:f5:6b:42:47:82:19:ee:92:21:21:ed:
8d:20:e0:33:6f:5c:1a:4c:fe:cd:aa:d3:cc:74:73:1d:0c:9a:
31:c6:ff:fe:44:74:c6:d9:3c:2b:4e:88:19:ce:3b:5f:29:e8:
d9:96:a2:29:5c:bd:41:79:6c:1e:9b:78:a3:51:87:f7:69:cf:
53:20:40:8c:f9:51:19:7d:55:89:d4:52:29:96:1c:84:25:cf:
62:b8:a2:1f:56:5e:95:7a:be:3f:38:16:f5:d5:27:11:e3:12:
05:70:26:f2:4f:49:e6:73:a4:8e:97:e1:58:db:88:9a:34:30:
f4:e2:17:9a:41:36:27:6e:ec:9d:06:ec:cd:99:b4:94:20:92:
fe:b7:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:19:33 2026 by rpki-client