Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier: e8eFnS+kTM7mWoMVewBLMkhmTigt2HpZhIxxpKYhxmw=
Subject key identifier: CF:E1:B8:79:0B:66:4E:84:1C:CB:C7:CE:73:40:77:2E:21:CA:D9:55
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 01A1DA25F9D53B61FA3F953B1A62B6EA7742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number: 1AFA
Signing time: Sat 14 Nov 2026 13:01:24 +0000
Manifest this update: Sat 14 Nov 2026 13:01:24 +0000
Manifest next update: Sun 15 Nov 2026 13:01:24 +0000
Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: jwb5G8yGu0i1xUDGW42n+reDcSXJgRGsW7cm2dLPKZI=)
2: CG82gzRyJjDfFWfuD3mZCTUFAGk.roa (hash: gKZxL4EPwYbDm8mzGxioP2eZTGCmezZu5Mvtzl5e1/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:25:f9:d5:3b:61:fa:3f:95:3b:1a:62:b6:ea:77:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Nov 14 13:01:24 2026 GMT
Not After : Nov 15 13:01:24 2026 GMT
Subject: CN=cfe1b8790b664e841ccbc7ce7340772e21cad955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:41:dc:df:22:6b:3d:f0:3c:96:2c:ed:f8:
60:ca:9a:29:95:0e:01:6a:e2:9c:bc:3f:fa:69:b3:
07:ce:4a:a7:1f:a4:6a:93:25:96:26:54:71:1d:5e:
0d:ba:99:03:bc:1f:33:33:15:2e:60:b5:08:f6:c2:
64:f7:41:78:f2:75:82:d0:df:9d:2a:7a:7f:9f:b9:
fa:0a:36:7f:4f:60:6b:69:07:d5:3d:0a:d8:a8:d7:
5d:4b:06:c3:d0:87:b0:f2:2b:48:a6:2d:de:75:29:
38:7f:71:53:d2:04:c1:ad:96:24:2f:e9:fd:23:fb:
ad:4a:23:15:5c:2f:10:ee:eb:e1:19:24:98:ef:1a:
a7:86:d8:44:6c:d4:23:11:e1:14:ad:60:0c:4b:b5:
6e:80:cb:e7:24:12:4a:23:fe:24:27:af:bc:0c:f3:
21:8f:cb:24:33:60:a2:fa:3f:18:8b:11:48:56:24:
a7:db:82:88:ed:bd:a5:d5:9f:1d:33:b9:72:1c:c6:
de:d5:07:56:96:7a:d2:84:8c:cc:81:c0:0e:05:1f:
5e:3d:a3:ad:b9:1e:51:a4:33:04:d2:5b:8d:22:0a:
50:c4:62:17:98:8e:89:34:79:d5:90:28:7e:6b:68:
97:8a:9e:7a:03:b2:5b:c0:90:5f:8b:da:a1:b8:99:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E1:B8:79:0B:66:4E:84:1C:CB:C7:CE:73:40:77:2E:21:CA:D9:55
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:89:b6:60:3e:03:77:57:33:f2:4d:81:3c:d3:bc:75:2d:45:
31:a9:65:e2:2d:46:90:93:cd:04:07:a1:c4:f9:16:a5:d4:3c:
67:9e:7e:19:5e:35:84:c4:76:61:75:6f:42:f3:f3:64:f3:b8:
2c:48:c7:96:91:85:1d:ad:5d:f5:5e:32:1e:b3:a5:14:8a:8d:
30:e2:e6:87:53:81:42:81:f9:fb:e4:65:53:53:f7:85:34:86:
12:a3:53:36:06:90:82:22:f9:c7:48:95:a9:cf:7b:f3:19:cb:
ea:55:63:f4:f8:a2:4c:b1:e5:f2:6b:cf:aa:e9:e4:d0:b3:83:
b2:56:97:b3:6c:5c:2e:9c:ec:4a:4e:4d:af:56:a7:53:54:3a:
53:80:b9:8b:ff:4c:a0:4a:e9:44:64:3d:85:00:7f:e0:6f:33:
03:84:a9:14:09:82:96:f4:dc:dc:6d:4e:37:e4:26:0b:0d:a1:
4e:ca:83:80:17:a0:84:ec:65:cf:8d:d2:f0:ca:df:09:64:4f:
f8:e0:94:c8:53:35:5a:4c:09:8f:4a:e1:3f:bd:7f:8b:c8:0a:
51:a1:dd:3a:19:b3:9c:91:46:95:16:f6:16:82:d0:16:b9:9e:
9e:d9:01:08:c0:db:5b:ab:1e:a0:49:38:5f:c6:62:9e:dd:15:
9c:f2:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:25 2026 by rpki-client