Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: 7ZXRr/P9M6B85V232uIkn8zmmIZjJ3P7w5LZgBZkVxE=
Subject key identifier: 2C:E3:30:F2:E3:6B:94:41:F0:1E:85:86:35:A8:60:91:35:74:01:FD
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 01A1E0959B4EF8C843B3E86D9BC7B1DC601C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0EBF
Signing time: Sun 15 Nov 2026 19:01:03 +0000
Manifest this update: Sun 15 Nov 2026 19:01:03 +0000
Manifest next update: Mon 16 Nov 2026 19:01:03 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: y0+4lzp5eo8FpsjT2jOELU+H9cXvNUht++/fr2WdnRc=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:95:9b:4e:f8:c8:43:b3:e8:6d:9b:c7:b1:dc:60:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Nov 15 19:01:03 2026 GMT
Not After : Nov 16 19:01:03 2026 GMT
Subject: CN=2ce330f2e36b9441f01e858635a86091357401fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:22:56:6e:5a:3e:f1:c7:44:7a:f4:74:8a:
e2:03:e2:30:ef:8c:04:ef:84:ad:ff:c5:0c:6d:96:
5a:a4:bb:a0:6b:48:99:8d:03:83:c6:f6:c0:bd:ee:
f1:47:5c:e4:ef:13:61:78:00:dd:59:72:e1:91:6b:
9c:b8:ad:6e:4d:43:3c:0b:72:e5:8a:51:a4:e0:de:
a7:03:b5:be:b6:ef:8f:28:30:ac:7f:cd:92:6b:74:
8c:4f:7f:07:78:4c:55:67:54:70:7e:97:28:8d:cd:
71:cf:a7:aa:15:d9:e7:38:2d:9a:dc:28:bb:c2:15:
5e:64:8f:b8:c8:ed:97:a6:4d:13:85:fb:16:9d:eb:
d4:72:c6:b4:2b:fe:aa:ca:ed:8f:87:8e:79:2f:1d:
71:84:92:aa:c5:2c:f7:0d:80:1f:59:42:13:a5:b9:
22:e9:f3:39:5c:7f:52:2f:c6:d0:28:7a:d2:c3:53:
17:24:11:84:e9:26:ce:dc:5d:a3:11:85:f2:d7:ff:
63:0b:29:f9:bd:9b:6d:ab:70:96:72:a4:7f:64:3b:
d7:19:2c:8d:98:41:cd:2a:8d:fd:57:59:7d:72:d2:
1f:f9:9a:5d:06:f3:30:1a:9b:e8:25:36:f9:17:e5:
69:51:66:5d:08:62:a2:bf:9d:73:db:30:74:a6:3d:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E3:30:F2:E3:6B:94:41:F0:1E:85:86:35:A8:60:91:35:74:01:FD
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f4:6f:db:b3:47:39:60:bd:72:7e:4e:9f:09:9d:48:bf:ce:
80:44:6b:c0:cf:c0:8e:91:5c:34:76:dd:93:32:14:f9:72:17:
dc:e3:dd:83:82:34:25:b5:5c:a4:a8:3c:98:0d:c5:2c:e8:fe:
fc:b4:c5:69:09:7f:c8:cf:a7:e6:9d:9d:ac:b1:20:50:f4:e8:
f4:b0:b9:a9:ef:ca:55:38:bd:83:42:5d:a9:48:76:4f:22:2b:
25:a8:c5:73:71:a5:0f:75:87:3f:35:26:41:e6:8f:bd:91:45:
7a:86:88:fe:4c:b9:97:f1:04:16:90:4f:63:b8:84:3b:0d:f8:
4f:e0:18:38:fe:43:89:d0:d9:41:04:d7:4e:47:5c:91:ec:30:
43:81:77:57:d8:17:1b:c0:08:f1:a3:e8:5a:43:56:10:4e:1d:
fe:0c:0d:01:18:41:9c:49:8d:0f:96:d8:fe:ea:57:fa:e4:99:
e3:2c:be:58:b9:1d:f2:08:f4:ed:0c:69:59:94:4e:fb:e5:95:
6f:3a:62:9b:74:0a:f2:47:a8:5a:02:39:22:d9:99:01:6e:ae:
fe:47:b1:07:e2:b6:a0:1c:5b:c4:d4:c0:fa:8b:b6:6c:b9:a2:
ca:90:91:c5:6f:b3:02:66:a7:b5:89:0c:31:07:86:f6:a9:ba:
87:51:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:45:30 2026 by rpki-client