Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
File: aNQlzHsbeICodfdr7agP4xCTGe0.mft (raw, json)
Hash identifier: odx+DyDyMscjU6kHEZgpoyZ6YlvNJA6gDjF65fP42qs=
Subject key identifier: DE:11:28:A0:60:D0:D6:EB:E3:63:CE:31:E4:5E:E3:35:88:19:40:4B
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Certificate issuer: /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial: 01A1DF82E18BF075B01E5E19522A529D4814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 14:00:58 +0000
Manifest this update: Sun 15 Nov 2026 14:00:58 +0000
Manifest next update: Mon 16 Nov 2026 14:00:58 +0000
Files and hashes: 1: aNQlzHsbeICodfdr7agP4xCTGe0.crl (hash: Uz82y0h82dqKpUCFgf/uMcm+1SZUW6RY/oBbhOMKmKc=)
2: s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa (hash: 0jQdDlhdIZaz2WGN97YHIXqbtv/kRGloASKQBe2397Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:e1:8b:f0:75:b0:1e:5e:19:52:2a:52:9d:48:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Validity
Not Before: Nov 15 14:00:58 2026 GMT
Not After : Nov 16 14:00:58 2026 GMT
Subject: CN=de1128a060d0d6ebe363ce31e45ee3358819404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:b8:7f:d0:9c:5b:a8:e4:52:46:a8:ac:dc:
75:59:b5:6a:03:be:80:53:79:d3:9a:89:a1:5a:25:
c3:57:5a:4c:64:d4:8c:9a:e1:f0:d5:bc:12:fd:91:
5d:df:09:06:b9:2f:7b:20:98:99:ec:b0:dd:e4:97:
39:2b:44:22:ea:20:04:3e:16:09:8c:26:72:5d:71:
24:f8:41:28:d3:51:9c:8b:2a:58:9a:37:0b:21:22:
8d:b0:8b:a7:63:b2:db:e5:7f:2e:6b:a3:5e:e5:87:
65:5e:f4:c6:75:bd:fa:9b:25:8d:57:44:46:a6:6c:
1f:17:92:af:04:1b:d4:a7:88:d3:ed:dd:1c:15:ae:
33:b9:35:3a:bf:48:22:b1:77:b4:2d:f6:d5:27:64:
9a:e4:1c:cc:32:d6:85:75:09:c3:4a:13:cc:18:30:
9a:2c:78:69:6f:f2:93:86:c2:84:be:f1:a4:2f:f0:
46:db:b3:2f:af:53:40:0a:b7:38:2a:ea:de:d7:3c:
3b:c2:02:cb:80:fa:f8:49:85:67:da:69:cb:02:e1:
0b:04:f1:a2:56:07:50:4a:15:13:63:48:ab:28:1f:
e1:2a:ed:09:57:b1:d1:e6:ea:82:f5:38:84:fa:e6:
a6:14:29:f7:86:a9:dd:c5:82:2c:30:3d:0f:e5:9e:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:11:28:A0:60:D0:D6:EB:E3:63:CE:31:E4:5E:E3:35:88:19:40:4B
X509v3 Authority Key Identifier:
keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ad:72:02:ec:2c:bf:68:16:1d:97:7a:d3:9b:65:90:f8:29:
76:f4:f2:d4:be:8a:79:a3:30:9e:d4:8f:2e:de:81:be:12:b1:
aa:55:7f:a8:bc:ac:12:75:36:5d:c5:f3:c7:ea:bd:a6:27:91:
2e:51:b7:1d:e7:10:46:72:56:a0:22:c8:4f:1c:61:16:4e:3a:
77:43:41:2f:db:f8:5b:1f:a6:51:03:a3:16:ca:8d:bf:f2:cd:
59:f2:6a:cf:d7:d9:08:6b:b7:1e:07:0b:d0:c2:09:4b:20:45:
c4:01:5f:1a:32:1c:55:63:b3:ab:d3:af:37:75:05:33:32:7b:
10:16:59:e4:5c:f7:d6:8c:e1:6c:61:3d:52:43:94:1c:f6:9e:
ef:44:7b:91:1a:36:d7:a2:4f:e9:7b:b0:eb:ec:e6:69:16:8d:
b4:da:17:42:6e:b8:60:3b:46:9d:7f:f3:72:23:54:04:f4:90:
d1:3f:46:2a:46:be:60:a9:7f:86:c4:c9:e4:35:14:45:2e:29:
b7:b1:2d:c5:48:62:45:74:a2:fe:64:ba:22:49:eb:48:63:a6:
3b:75:eb:ac:0f:47:44:fc:a3:7a:61:57:67:09:76:72:0a:2d:
9f:55:a7:c7:21:d8:2f:0d:9c:aa:1c:ea:a0:d9:29:eb:ce:05:
7b:fc:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:16:28 2026 by rpki-client