Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: raM4/gxitRfIeoneqWOVdJvX09jGMQQfDlm5lGTNkSY=
Subject key identifier: DB:38:D0:E2:CA:B0:3A:9B:4A:11:3C:87:0C:53:4B:7E:FD:DC:91:2D
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 01A1DF82FDF06EFC2465125857E9B558D188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 13B2
Signing time: Sun 15 Nov 2026 14:01:06 +0000
Manifest this update: Sun 15 Nov 2026 14:01:06 +0000
Manifest next update: Mon 16 Nov 2026 14:01:06 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: R8t4R9vSHIrqNudXgvMF7cz9eIWJex4/y51yqZcxPDc=)
2: Vf77xukhBIpUTcfDdQGILMMSa4Q.roa (hash: tmWyKSyKboTPLB52PoBpJE8efgve3egkhQ+0cqtz0+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:fd:f0:6e:fc:24:65:12:58:57:e9:b5:58:d1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Nov 15 14:01:06 2026 GMT
Not After : Nov 16 14:01:06 2026 GMT
Subject: CN=db38d0e2cab03a9b4a113c870c534b7efddc912d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:aa:30:8f:78:30:77:85:95:ce:8d:d0:db:
b0:4d:ed:f0:06:ae:69:fe:5b:98:9e:80:99:33:0b:
89:a7:85:cf:6b:b1:1c:31:8b:73:50:39:c2:7e:f1:
1a:fe:79:31:eb:41:a0:6c:48:5c:9c:3c:7b:f1:b9:
7b:dd:0c:cc:64:92:95:28:49:98:16:c9:30:69:88:
90:44:0a:69:5b:2a:dd:b4:c4:0b:c8:e6:42:55:19:
d8:78:1c:3f:48:d9:e7:fd:d6:03:35:b2:aa:fb:a6:
b8:5b:0b:a0:e5:dd:a5:a7:c6:5a:db:8e:82:74:7f:
b9:70:6f:18:84:57:2e:eb:22:5b:9c:c9:e2:de:69:
6c:30:52:ca:e4:7f:ef:57:e7:ee:2d:02:24:18:91:
57:7f:29:25:f1:f4:a9:60:47:e6:0d:e1:3b:97:6a:
d9:d4:85:21:78:81:53:5d:51:cc:54:fb:e1:02:48:
55:e4:82:f4:3e:c6:7c:fc:7c:ae:e0:d3:34:04:ab:
0d:69:7f:fc:69:6a:46:ad:44:fa:93:0b:93:d8:40:
9c:ef:fc:a1:5a:b2:c1:ff:64:69:6f:09:a4:b7:9e:
ba:02:ec:8c:5d:7b:17:88:9d:bd:51:0b:f4:1d:38:
d8:3a:8d:e1:e8:01:ad:35:5a:ee:d6:d0:bc:73:7b:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:38:D0:E2:CA:B0:3A:9B:4A:11:3C:87:0C:53:4B:7E:FD:DC:91:2D
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:80:86:91:82:f3:1f:c0:7a:af:90:39:e5:66:cd:5e:03:1e:
83:3c:cf:c9:36:53:59:9f:c2:43:14:4e:30:a8:fe:71:fa:46:
23:f8:02:92:ff:1d:4c:8c:bd:01:c0:51:28:b5:03:43:57:19:
20:22:4f:a0:5d:82:38:4b:f7:57:b4:5b:14:e7:8b:04:5a:22:
07:40:01:1b:93:fc:96:8f:73:6f:7d:45:3a:14:7d:32:2d:af:
b5:83:a2:6c:12:e5:41:23:0e:36:84:ef:84:17:0f:76:88:e7:
cc:1f:54:7b:5b:eb:a1:cb:c1:f2:d7:8b:6f:42:aa:cd:32:b1:
b4:bd:b7:78:db:81:02:7b:08:86:0e:55:c7:64:20:c6:cc:cd:
14:69:bf:f4:96:c0:97:85:e4:76:76:ef:de:a4:21:4d:ca:75:
be:f6:60:db:44:32:9a:26:6e:08:fe:ce:75:23:49:4c:ea:6e:
1b:2f:09:e5:21:1e:0c:dc:7d:c6:6d:b9:41:e4:1f:8d:51:dc:
f9:53:d3:69:23:6f:6b:20:10:06:e1:b8:fa:e3:36:0a:a9:cd:
e6:1f:e4:17:d8:4b:5e:c0:47:b3:37:b8:9d:9d:a5:27:ed:c2:
a6:b2:03:60:15:2d:5d:cd:26:1d:a0:7d:2a:af:08:be:09:dc:
f3:72:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:34:52 2026 by rpki-client