
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier: IFnnvL+boqUMHbq3xRRbGuzaBeztC1nVIdSOSht4O7o=
Subject key identifier: AE:B1:6E:15:BF:84:70:FD:3D:4F:3C:6C:3C:12:07:58:22:6B:90:BB
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial: 01A1DEDE4CEFE13D1149512D72C007B20046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number: 1A8B
Signing time: Sun 15 Nov 2026 11:01:12 +0000
Manifest this update: Sun 15 Nov 2026 11:01:12 +0000
Manifest next update: Mon 16 Nov 2026 11:01:12 +0000
Files and hashes: 1: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: uNt45bCOxDyD8dRDd7/j1/R0Al6MvZ1WfejmlsqfDjM=)
2: zilAvi0gPY9JFc-GVd3-_608WgE.roa (hash: ZyVYNr8SF0SGWYnff8EK2MHWbU5TL3VAzX0qJ7R6ce0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:4c:ef:e1:3d:11:49:51:2d:72:c0:07:b2:00:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Validity
Not Before: Nov 15 11:01:12 2026 GMT
Not After : Nov 16 11:01:12 2026 GMT
Subject: CN=aeb16e15bf8470fd3d4f3c6c3c120758226b90bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:c4:fd:76:2c:2a:23:8a:bf:95:95:9a:50:
65:c1:b5:48:21:d8:df:71:18:0c:2a:ec:15:e0:ff:
62:1a:17:b1:96:c4:f3:e4:80:a2:dc:ee:46:9e:40:
f2:61:b6:cf:a8:96:8a:e9:0c:6b:f9:73:0c:3c:da:
88:84:60:ab:c8:6b:4c:8c:14:e9:84:0f:92:97:ba:
a7:a3:5e:4e:2a:25:ca:51:c0:1b:6f:cc:22:45:2f:
f4:86:fe:a3:cf:bf:b2:da:e4:15:ea:05:1b:79:61:
2c:b5:04:6f:e5:1a:cb:e3:4f:2a:00:8d:18:eb:c3:
07:4f:f1:dd:e0:b9:e7:58:57:bc:07:f8:a5:82:56:
eb:b5:29:8e:ac:0c:68:37:04:1a:50:78:6c:0e:1a:
7b:fa:23:bb:5b:75:51:31:d1:92:06:86:f6:82:72:
25:bd:87:12:f8:59:7b:07:82:e2:6a:3e:ee:38:c5:
24:c3:cc:94:f2:62:5f:e0:8b:78:b4:11:97:9e:46:
dd:09:f4:09:64:d9:6b:15:1d:c6:f9:a3:69:60:d3:
53:7e:2a:d2:73:9e:85:8f:e6:4b:e1:24:54:2a:b0:
eb:0e:23:b5:98:30:8b:8d:ba:f6:cb:8e:ef:34:01:
7a:0d:0c:d0:c9:b8:51:4a:07:83:a4:c3:e4:a3:ab:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:6E:15:BF:84:70:FD:3D:4F:3C:6C:3C:12:07:58:22:6B:90:BB
X509v3 Authority Key Identifier:
keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0d:9f:1c:ed:8c:e1:f8:3d:b7:46:e6:74:c2:cf:bf:c6:f7:
12:c8:57:b6:4c:09:c5:e2:d4:83:b3:03:d2:98:88:82:a9:f9:
e5:73:13:45:32:a7:d1:88:6f:68:3a:b5:d1:af:a6:bd:07:fb:
3e:46:a8:85:a8:f0:8c:4e:be:bd:90:a3:98:d4:6f:88:2e:e8:
bd:8e:9a:a8:fa:0d:20:1e:90:35:52:96:36:75:ba:6e:b6:51:
13:1f:cf:cc:fc:6d:b9:13:7e:81:17:d1:69:f5:1e:eb:44:c8:
e3:38:5b:30:ee:ec:9a:de:08:30:e2:d7:55:92:d0:ba:96:0e:
77:01:69:1c:1c:a6:d6:fc:f0:bc:7c:3a:cb:5d:df:e2:cb:79:
e9:8f:78:93:80:a7:a5:91:3d:56:85:d3:52:20:8c:b5:1a:0a:
5f:d3:87:82:ce:b7:e6:eb:0f:70:fb:47:b5:fb:93:bd:fc:25:
f6:e8:06:5c:aa:a6:38:d8:4f:7f:f5:5a:d8:12:50:2c:a2:4c:
f0:50:e0:79:7e:f0:bd:a5:6b:20:f4:ec:53:f8:a2:6e:ea:97:
cf:59:8e:c7:e9:53:20:3d:bb:77:bb:2a:16:89:fe:c5:27:6d:
62:49:3e:12:63:3a:d4:a6:e5:4a:45:1f:0d:2f:e7:98:5c:97:
65:4d:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:23:48 2026 by rpki-client