Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: tpjfGMk1BYuv47asFqbAH/mBphNrwTYwJz7l2eHuuF0=
Subject key identifier: 3E:F3:E5:72:46:A6:55:2F:70:9C:EE:48:0F:56:CA:47:67:D7:C7:BF
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 01A1DE71174E783E0494BCBDFBC3DBAFC0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 09:01:55 +0000
Manifest this update: Sun 15 Nov 2026 09:01:55 +0000
Manifest next update: Mon 16 Nov 2026 09:01:55 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: R6ippX9JFmLvGCwBVkxaRvV+7bawddPeR1MvTRHwmMM=)
2: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (hash: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:17:4e:78:3e:04:94:bc:bd:fb:c3:db:af:c0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Nov 15 09:01:55 2026 GMT
Not After : Nov 16 09:01:55 2026 GMT
Subject: CN=3ef3e57246a6552f709cee480f56ca4767d7c7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:7c:53:81:be:4a:68:9d:bb:c5:75:a4:51:
90:71:b0:fa:fc:c7:69:29:e1:98:aa:ea:22:d8:bc:
d3:00:a4:66:4f:cd:d3:04:85:c6:e1:6d:06:22:8a:
c1:a4:23:bc:60:51:a4:a6:20:62:82:83:37:2a:c4:
dd:fd:97:26:7f:51:96:ef:ad:8c:fa:99:91:e9:91:
2d:b0:b0:0a:72:d7:6b:4f:cb:fd:37:a2:5a:df:51:
3b:2c:4b:7a:00:b1:c8:1e:8d:f3:36:1e:64:5e:a2:
d4:c8:1e:38:c7:62:00:53:be:b2:74:08:69:4f:20:
9b:f9:9c:bf:b3:0f:48:cc:2c:35:94:fa:57:d7:24:
58:d3:20:ca:b4:f0:3f:36:a2:03:dd:63:17:a0:26:
96:7e:3d:5d:88:5f:69:33:52:91:b6:c9:56:7a:60:
d7:a1:a4:b6:a7:ef:b9:9a:96:e0:80:3b:84:9f:d9:
00:1b:23:50:c2:df:a1:87:65:e8:c3:36:cc:ee:07:
5c:a2:93:c4:14:4a:d4:6e:dd:7c:69:99:b5:05:9a:
fc:a8:f7:a5:2e:b5:2c:c6:b2:9b:b7:0a:b9:62:e7:
f5:f5:6f:dc:55:4f:24:0d:a8:4f:ed:fd:92:43:c0:
4c:54:5f:11:87:0d:7e:d1:a9:aa:a7:f7:61:b3:52:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:E5:72:46:A6:55:2F:70:9C:EE:48:0F:56:CA:47:67:D7:C7:BF
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:40:b3:ba:a0:9c:0e:7e:47:44:3a:65:88:d2:ae:76:3b:18:
e6:41:7a:94:f8:c3:cf:6d:32:cb:67:c5:17:51:db:bb:e4:d7:
89:f0:04:87:fb:e5:6e:f3:39:f9:f8:8b:f3:1f:0b:d7:71:15:
7d:c3:7b:65:e3:6d:5a:c9:dd:e9:e6:ca:4c:9f:7b:b0:b5:a8:
22:d5:f6:5e:c9:6d:ff:a0:62:cf:48:d2:09:c3:55:59:5e:93:
5b:10:42:3f:49:61:08:27:1a:61:ca:06:6a:81:8f:5c:9a:53:
51:b9:9e:d0:38:22:f9:8a:4e:ab:74:c9:4c:cb:0d:57:fa:ff:
ba:b3:21:e2:90:f2:b4:7b:ea:82:4b:a4:19:0f:23:7c:4d:41:
b1:d2:a3:a3:36:37:86:b3:2e:d8:fd:37:a6:39:a3:1f:73:ff:
f1:55:b3:79:43:aa:2f:2c:42:dd:be:61:ef:b2:eb:71:ba:ab:
84:6a:06:8b:f7:0b:07:57:dc:7f:7f:76:58:e4:aa:db:40:57:
8b:d8:8a:92:5b:ee:a9:04:32:01:fe:65:e5:47:77:7f:c2:88:
22:c8:32:fb:bd:54:a2:99:1b:29:cc:5a:10:e7:0c:52:4a:14:
fc:72:d6:ee:16:6f:75:05:0c:cf:2d:d3:7c:59:1d:32:86:72:
d7:65:22:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:43 2026 by rpki-client