Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
File: 1peKb6yHM4CG9TacW0AhsIBhHlc.mft (raw, json)
Hash identifier: 4s/y6sthRJLXhnC2v+yAl13Y1TqgUkPbEd13isqtBcM=
Subject key identifier: ED:4B:DD:19:4E:0C:A1:4D:E5:9A:03:40:56:60:0A:9A:B9:CE:A6:18
Authority key identifier: D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
Certificate issuer: /CN=d6978a6fac87338086f5369c5b4021b080611e57
Certificate serial: 01A1DEA719703DE260AA6F4B1FF487F33CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
Manifest number: 072F
Signing time: Sun 15 Nov 2026 10:00:55 +0000
Manifest this update: Sun 15 Nov 2026 10:00:55 +0000
Manifest next update: Mon 16 Nov 2026 10:00:55 +0000
Files and hashes: 1: 1peKb6yHM4CG9TacW0AhsIBhHlc.crl (hash: BxttTFuFff/jDDzCoPfuJV/NIuPchsrAo+Q2X0SVW5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:19:70:3d:e2:60:aa:6f:4b:1f:f4:87:f3:3c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6978a6fac87338086f5369c5b4021b080611e57
Validity
Not Before: Nov 15 10:00:55 2026 GMT
Not After : Nov 16 10:00:55 2026 GMT
Subject: CN=ed4bdd194e0ca14de59a034056600a9ab9cea618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:7a:20:da:04:b2:6a:b4:c1:41:c0:9a:7f:
46:83:4e:d3:45:15:46:ae:81:ce:3a:4a:e2:55:8d:
d3:78:c4:4b:79:d0:ef:0f:42:e4:3c:50:e8:e4:ec:
d8:f9:16:f9:47:0b:8d:29:05:82:33:81:fc:60:12:
c2:79:a0:b1:20:4c:47:69:06:ed:ee:ed:34:c0:65:
14:3b:71:e9:b8:e8:86:9a:5a:48:d0:dd:8d:60:e7:
c0:c2:de:2b:03:4e:5a:00:94:11:aa:7d:77:06:f8:
dc:cd:70:bc:63:70:d4:99:70:39:c8:e4:9b:9d:5d:
a4:95:96:b3:a1:8d:c8:11:0d:ec:3e:f7:35:1b:80:
19:cb:6a:63:4d:e9:44:e1:2b:ce:8f:0d:ca:a4:b7:
b7:da:94:96:fa:cd:13:cb:e8:f8:37:ea:bb:4d:52:
e4:53:de:a7:24:29:1b:ad:1e:e6:61:b4:f4:60:5f:
46:f4:b8:5a:3a:c4:4a:14:09:df:33:ec:43:85:18:
54:02:34:af:09:94:9d:28:81:2e:cf:c6:a6:6f:3b:
57:21:33:a8:2c:61:92:df:e6:7d:29:3c:d2:85:ed:
dc:42:98:ea:7d:86:d4:c5:d4:70:43:0b:6f:7c:33:
71:9e:ff:16:70:9b:85:25:01:00:41:43:f0:fa:a8:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:DD:19:4E:0C:A1:4D:E5:9A:03:40:56:60:0A:9A:B9:CE:A6:18
X509v3 Authority Key Identifier:
keyid:D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:58:9e:20:63:3e:0e:cb:bb:61:2e:b5:78:80:fd:e0:2d:
37:b8:5d:3a:d8:99:9a:d0:87:34:a0:55:5e:8e:9c:74:42:10:
ca:47:e6:f8:6d:a1:e7:1e:af:f6:c5:ae:f7:80:82:9e:c3:0d:
45:24:c2:d0:4a:0e:35:9e:e3:a7:3d:f0:8d:72:e3:ab:eb:88:
d9:07:00:6a:39:90:d0:a9:56:cc:6c:cb:cc:d6:31:1c:ca:27:
1d:93:74:bc:61:0f:a8:e6:49:07:24:91:6c:9c:47:83:d5:06:
42:e5:57:a0:aa:ce:28:bb:9c:a4:97:96:8a:91:1f:e8:b0:39:
a5:e5:3e:da:e8:4a:e4:5d:c1:4d:0b:ec:9d:b5:6e:d6:16:4e:
20:05:33:b5:92:81:55:b3:fb:46:d7:ad:08:e5:ac:25:2b:24:
0a:16:76:b0:aa:5e:49:c3:5d:2e:60:85:dc:30:33:b7:d9:bb:
15:62:c9:07:ed:f3:51:d9:21:8f:93:db:70:22:2f:dc:b7:ad:
df:76:70:16:fb:90:59:d4:d5:9a:d4:32:93:62:67:ad:de:26:
8e:00:1d:50:0d:46:38:70:c7:0e:fc:4e:1c:2a:8b:d7:dd:83:
e1:06:f1:ec:ae:8b:f3:ea:ee:65:97:df:08:35:cf:69:29:5a:
9d:0d:9a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:15:42 2026 by rpki-client