Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: w/Ub0JHjkksLecUtxjidRGNBetnye5hI/5k5c/hCCK0=
Subject key identifier: 61:32:88:96:A7:B9:96:3C:42:FF:21:FF:62:16:DA:2E:14:74:1D:40
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 01A1DD952F5A6D347996750281EAB7D60801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0D30
Signing time: Sun 15 Nov 2026 05:01:44 +0000
Manifest this update: Sun 15 Nov 2026 05:01:44 +0000
Manifest next update: Mon 16 Nov 2026 05:01:44 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: 1GOB2RKkvBoK2DFMyTYkiGcCOg0LmZN5QAT0h8WPvtA=)
2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
3: xKZaKt2ejyS1RvKxbygcbV14q7Y.roa (hash: pRhnCq62G3nLpLOE3zJBDzARRGgB05rKDlaS5XncNNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:2f:5a:6d:34:79:96:75:02:81:ea:b7:d6:08:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Nov 15 05:01:44 2026 GMT
Not After : Nov 16 05:01:44 2026 GMT
Subject: CN=61328896a7b9963c42ff21ff6216da2e14741d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:ae:09:52:73:99:23:14:6f:58:07:e0:13:
ab:d2:01:f8:c9:4c:92:76:e6:6c:e6:56:a8:42:46:
03:59:d1:48:f3:7a:a6:04:62:da:e4:ff:b5:e1:df:
48:c0:f0:43:a3:cc:2b:9d:c7:9a:52:a5:31:1b:0b:
24:55:1d:12:36:fc:e8:c5:17:04:00:d6:31:34:35:
7d:2c:b3:0c:f9:f7:c0:58:60:6e:12:5b:f7:06:74:
5f:2a:6c:8e:65:60:bf:5e:fc:a0:4d:16:4e:39:a3:
cf:9f:82:48:ed:b2:c4:e2:d8:69:f5:0d:6a:2d:c4:
69:3f:98:1b:4e:cc:36:b9:14:ef:55:25:44:06:4f:
ac:15:5f:20:7b:f6:ba:32:e6:cb:2e:f2:b8:d7:37:
78:f5:78:15:18:ce:16:a5:66:76:a3:cb:be:ba:d1:
c6:f3:b9:4b:2c:0e:19:69:43:46:b7:52:98:84:0b:
8b:8f:81:de:ec:76:83:d6:55:40:b3:ee:2c:0d:2b:
78:61:93:12:07:f8:a5:a1:07:00:31:89:dc:30:57:
10:0a:3b:1d:e6:53:45:7b:f8:6d:66:50:93:d6:00:
b1:f5:6b:e6:08:d8:cd:61:6a:93:e2:9f:70:b7:41:
ed:88:c7:6c:36:bf:0c:e0:fb:74:78:21:c5:e2:70:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:32:88:96:A7:B9:96:3C:42:FF:21:FF:62:16:DA:2E:14:74:1D:40
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:61:81:fe:48:5d:eb:a5:07:49:e6:5d:1b:28:3e:30:fd:a7:
b6:45:af:12:66:97:3c:c4:f5:3e:96:8b:10:17:cf:01:10:f7:
25:30:5f:fa:4f:6e:d2:0b:50:e5:f0:21:5a:b9:de:e2:bd:8a:
34:05:8d:06:b0:de:0e:9a:5e:95:68:99:60:74:ae:4d:90:3f:
5b:62:e3:97:7d:55:eb:21:84:19:52:e1:be:be:82:9c:20:8f:
13:b3:16:4b:bd:04:1b:2f:20:be:19:53:e6:ae:62:88:27:0c:
d1:cb:df:32:5a:b5:db:e9:d2:04:c4:cb:bb:52:96:51:c3:f2:
0a:cd:8f:1a:7e:37:3b:d5:8c:a1:a7:9d:d1:52:4c:55:6a:50:
76:90:11:ce:26:9f:7e:70:5c:93:4d:17:63:f1:10:7c:0b:7e:
ca:a1:9e:f2:f0:3e:1d:4f:a3:03:81:48:62:bb:e8:37:62:ca:
5f:6d:ca:5a:58:0a:8a:1f:f1:4b:b1:d2:16:41:db:73:a0:23:
e6:96:53:6f:5c:19:fa:44:0f:15:e6:aa:4b:ef:b5:dd:32:97:
d6:a6:6e:38:fd:ac:8e:3c:1e:9d:bd:01:d2:06:69:fa:6d:3d:
87:ea:db:97:f4:66:17:b1:09:f9:4b:9c:cb:af:ad:29:ae:13:
f3:c6:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:48 2026 by rpki-client