Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: kLk4GP9Uo3KgC/IrkWq/B4bgfcu6nHmrV0LaC5w/s88=
Subject key identifier: F3:72:80:3D:F8:67:3C:FA:7A:EF:1B:05:C5:F6:FB:A1:21:E1:0B:12
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 01A1DF4C50AD780326E3DF694D88FDA86FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 0542
Signing time: Sun 15 Nov 2026 13:01:22 +0000
Manifest this update: Sun 15 Nov 2026 13:01:22 +0000
Manifest next update: Mon 16 Nov 2026 13:01:22 +0000
Files and hashes: 1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=)
2: bZGmBUJyBwx1sWA4_0env9myjwE.roa (hash: 4tsqiBWMFE9lEeiy6ibqGVOqXOKllflXzZwV282QLH8=)
3: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: erVxxgq2yqS2Sy4bETgUD7yY3dgpZ5zo/AdtZ58Ws7o=)
4: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:50:ad:78:03:26:e3:df:69:4d:88:fd:a8:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Nov 15 13:01:22 2026 GMT
Not After : Nov 16 13:01:22 2026 GMT
Subject: CN=f372803df8673cfa7aef1b05c5f6fba121e10b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:49:bd:1a:7a:7d:df:3a:16:6c:ca:aa:05:
a9:88:b2:43:f8:59:40:33:3c:02:53:48:1e:df:e2:
2e:8e:10:83:11:2b:e9:62:1b:47:fd:61:ea:f2:b2:
04:3d:7e:3d:63:f8:fb:e4:aa:c0:de:4f:fe:0b:15:
66:fb:a9:1a:05:26:86:26:2a:5f:64:70:54:e1:b5:
11:cd:61:48:d2:a8:ef:e0:09:22:a4:02:08:b7:30:
eb:24:27:9f:c7:7c:02:97:c2:ee:60:06:43:4a:47:
4a:d5:f0:03:9e:38:10:c3:4d:19:a5:34:0c:90:94:
c2:aa:6d:e1:c8:1b:46:5d:04:ef:3c:df:64:db:8f:
cc:8c:e2:2d:5a:e5:bf:99:78:fb:61:e2:01:58:c8:
5a:d9:d5:4e:ab:94:32:43:81:3f:0c:44:a9:99:fd:
91:0e:fa:ec:70:0c:d7:d4:b3:37:ee:2c:25:67:7b:
d6:f6:f5:88:e0:28:e1:05:df:f5:96:f6:c0:2f:d3:
d0:a9:32:f1:44:50:8c:be:ac:41:cb:96:f7:62:3f:
a8:f9:a0:26:af:4f:e7:0f:61:26:3c:b7:5c:8e:47:
5c:7e:c9:91:49:d1:b2:4a:cf:70:44:d3:0b:95:1e:
e4:d9:52:82:e1:1e:3c:af:d8:07:c3:aa:1f:02:4e:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:80:3D:F8:67:3C:FA:7A:EF:1B:05:C5:F6:FB:A1:21:E1:0B:12
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5f:6f:13:29:13:2d:51:ff:22:21:e6:cf:7b:14:ad:6b:97:
14:bc:af:54:dd:e1:4f:1b:88:df:53:4a:d7:87:ab:67:cf:29:
0d:03:d0:28:fb:2f:c0:71:70:67:e2:61:1e:c2:ee:b7:e2:6c:
d1:c2:29:70:fe:b6:37:5b:2a:0c:9d:67:3d:74:a7:1c:a2:90:
9d:25:c3:58:d1:3c:1f:76:85:f6:2a:f0:70:7d:36:f3:4b:fc:
87:7d:69:b6:a7:f3:f2:05:52:ff:a7:d4:69:ac:55:07:e9:e0:
d6:a2:40:b9:29:27:d3:7f:0f:46:94:2b:67:f5:37:d2:b0:04:
15:ce:b4:e4:87:fc:12:6f:27:93:bc:58:87:e2:f5:57:83:d2:
8a:e4:f1:8a:d5:d3:75:0b:e9:ff:30:82:03:fd:6c:ca:56:c2:
87:ed:87:2c:d5:b5:d3:fe:16:10:db:bb:10:22:65:cb:40:2f:
2c:80:00:08:70:3f:c9:ea:f0:b1:3c:22:d7:48:5a:0f:eb:2e:
64:67:2d:9a:87:f2:26:c8:58:e1:13:9a:49:98:88:01:34:cb:
ef:c5:04:68:dc:95:42:ae:44:b7:f7:48:be:b7:1e:9c:ae:f5:
1b:1a:51:79:e4:fb:b4:97:4f:ba:b1:9d:d7:75:55:a4:b4:11:
be:d3:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:34 2026 by rpki-client