Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
File: 1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft (raw, json)
Hash identifier: dyeN2p+ZhoUhwEVcek9abQ1jEI5TzD/W7/uekywr0FI=
Subject key identifier: 4A:4A:77:2E:2E:2B:D4:EF:B7:07:C4:10:26:1F:CC:90:20:FA:12:8D
Authority key identifier: D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4
Certificate issuer: /CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
Certificate serial: 01A1DA5D10F30763DC3AABE08973EC741F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
Manifest number: 02C0
Signing time: Sat 14 Nov 2026 14:01:34 +0000
Manifest this update: Sat 14 Nov 2026 14:01:34 +0000
Manifest next update: Sun 15 Nov 2026 14:01:34 +0000
Files and hashes: 1: 1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl (hash: 1c6d/BxYuZ8lgqRnEDDaYBloGEqCWOLoaFx6lj3m/kw=)
2: o0b3FLGT6_KTAMziRPFBDuoxIFs.roa (hash: HuGKkmAJlpIF3je5dBAlXM+W0Ozh9HwD67fbKdy/D8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5d:10:f3:07:63:dc:3a:ab:e0:89:73:ec:74:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
Validity
Not Before: Nov 14 14:01:34 2026 GMT
Not After : Nov 15 14:01:34 2026 GMT
Subject: CN=4a4a772e2e2bd4efb707c410261fcc9020fa128d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:ea:b3:a9:ec:b0:1d:03:3a:82:37:67:cc:
cf:dc:8b:75:37:c5:db:8d:7c:1a:86:cd:dc:ce:61:
13:0e:51:df:d0:1e:37:3a:ba:e6:05:7e:7a:ca:26:
fe:62:20:70:8b:e3:b7:d5:67:12:97:69:47:c0:53:
44:39:3f:17:35:2d:36:b0:9c:e9:ec:f9:cc:d2:9a:
2b:b4:be:81:1a:10:d3:81:cf:fa:a5:ab:c3:99:c4:
cf:11:c3:77:2f:e1:af:b5:92:19:8e:86:1a:3c:31:
00:70:58:dc:92:04:a3:8a:69:a2:a0:f2:b6:1b:ec:
fd:33:a3:39:d0:93:60:01:a6:4a:6f:71:ce:9e:df:
fe:4f:a5:9a:b3:89:ff:01:ae:c0:26:ea:4d:49:f9:
60:9f:1a:3c:bb:b4:48:10:73:13:29:6c:bd:03:d0:
a1:22:16:ef:9f:1b:91:8a:17:40:16:2d:05:6b:90:
2d:9d:45:c7:cb:12:4b:03:06:d2:ca:12:06:28:d5:
ae:08:1b:ff:06:13:55:60:0f:b5:6c:c6:ba:04:93:
2d:5e:4e:ec:81:6c:f4:d5:5d:60:f9:21:08:e0:43:
73:50:4e:6e:00:c7:9e:f1:ed:ea:d5:2b:d5:36:00:
83:7a:49:aa:18:84:6b:cd:5c:7a:17:f9:b1:79:54:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:77:2E:2E:2B:D4:EF:B7:07:C4:10:26:1F:CC:90:20:FA:12:8D
X509v3 Authority Key Identifier:
keyid:D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d0:c9:98:31:41:d0:a5:f2:d8:7f:bb:9c:6d:29:bd:57:b0:
68:a8:88:c1:d0:6c:33:e1:a5:db:b2:5a:40:33:e0:fc:6d:f6:
70:e9:ae:74:7a:5a:25:c2:cf:1d:bd:1f:b8:8f:70:7a:75:41:
70:c4:80:aa:0b:87:26:fc:3c:4d:b2:e6:bd:d0:51:b0:96:2f:
69:4d:a4:98:b3:f1:e0:77:6a:78:e6:ae:b9:b4:8c:45:00:5a:
ad:44:2b:98:6e:40:85:b8:96:de:a3:a9:61:7d:f7:c5:f7:ad:
79:55:37:67:78:3a:0c:4b:f7:4e:0d:b4:79:8a:ba:93:3d:7d:
a8:73:cf:de:03:f6:d1:7d:04:ac:94:8b:60:7f:86:a3:d0:fc:
bb:81:97:cb:c8:b0:d4:a0:a6:16:ca:94:26:f2:71:3e:42:d3:
7f:88:a7:13:22:bc:9c:39:9c:7e:c7:5c:05:7d:91:2a:90:8a:
23:ff:21:69:a9:04:06:19:45:ee:ad:4f:ff:52:3c:03:04:5e:
42:50:e4:02:96:bd:59:b1:b2:ca:dc:ff:93:de:b2:0d:73:90:
7b:60:ad:3b:52:82:61:d8:5b:8b:d9:f5:8b:19:3a:f3:59:87:
ec:db:ac:d6:00:08:00:60:d4:a5:e0:1e:9e:b1:2f:48:8c:66:
d8:32:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:41:14 2026 by rpki-client