Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
File: 1-_LbWO2p3N4jau7HeVUO9rjLRow.mft (raw, json)
Hash identifier: K55QkAs5t4hcsW58ckwW59lL5AgjSdGAewrmPsJjwqQ=
Subject key identifier: 6C:69:32:AC:C1:E9:78:CB:3C:1F:B2:89:16:39:45:7C:2E:54:79:7F
Authority key identifier: FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
Certificate issuer: /CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Certificate serial: 01A1CB20F8AF0C2300C474D5BE3767AD1332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
Manifest number: 0167
Signing time: Wed 11 Nov 2026 15:01:37 +0000
Manifest this update: Wed 11 Nov 2026 15:01:37 +0000
Manifest next update: Thu 12 Nov 2026 15:01:37 +0000
Files and hashes: 1: 1-_LbWO2p3N4jau7HeVUO9rjLRow.crl (hash: X5XcynyctC6zTg7KjXC0q3mQrDOY6YA4JPk2aZ8Zjf0=)
2: 2EDW-s-ud7-nCTr1Sgos54mN1mM.roa (hash: YCcPBkAYBuUswz1BVwdFoQLrC8n9zW+jV/kRYtdf2D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:20:f8:af:0c:23:00:c4:74:d5:be:37:67:ad:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2db58eda9dcde236aeec779550ef6b8cb468c
Validity
Not Before: Nov 11 15:01:37 2026 GMT
Not After : Nov 12 15:01:37 2026 GMT
Subject: CN=6c6932acc1e978cb3c1fb2891639457c2e54797f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:ea:cc:45:80:3d:35:2e:95:c4:32:37:99:
01:93:ba:77:e5:ca:c1:7e:be:2f:6c:4a:d1:a8:d0:
1c:a5:9a:e0:6c:fe:56:5a:45:11:2e:75:ba:55:8f:
6d:0b:41:11:48:ae:4f:5d:b1:ed:55:01:4a:0a:3f:
10:e3:c1:ac:37:9b:03:ac:59:d2:dd:3e:9e:4d:25:
50:82:bc:11:f5:f7:60:6b:a8:61:e1:6d:38:79:20:
31:c7:10:92:16:67:a1:e0:3d:e3:84:75:df:ac:9b:
74:57:0b:2d:cc:23:7d:1b:5d:c0:df:c0:50:76:99:
14:29:73:57:27:09:3f:12:fc:d0:ea:1a:45:3a:4b:
1a:3e:fb:e3:45:dd:95:4e:54:55:15:b5:ea:1c:2d:
53:73:56:57:71:88:28:11:b6:de:24:f8:2e:4a:e3:
4b:0d:9d:b5:38:e2:ee:f3:58:2a:3d:81:01:86:ee:
11:7f:a4:a9:53:0a:b2:a8:97:6a:43:30:01:92:ce:
45:3e:c3:c1:f7:b4:1e:d9:d7:c7:f6:f0:38:e3:04:
44:cf:8a:fe:ca:ea:88:bb:1e:d4:ae:4e:5a:ac:b5:
09:76:ff:ae:c8:ad:16:2b:bb:40:86:fc:c1:cb:82:
4a:cb:1e:7f:4c:9c:b6:ee:da:eb:2d:f9:56:99:f2:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:32:AC:C1:E9:78:CB:3C:1F:B2:89:16:39:45:7C:2E:54:79:7F
X509v3 Authority Key Identifier:
keyid:FB:F2:DB:58:ED:A9:DC:DE:23:6A:EE:C7:79:55:0E:F6:B8:CB:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_LbWO2p3N4jau7HeVUO9rjLRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/1-_LbWO2p3N4jau7HeVUO9rjLRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f0:af:77:6b:21:2b:d5:1e:1a:f3:fd:dc:9e:24:7e:0a:33:
77:2c:76:32:86:93:ad:4f:0f:af:6f:11:e3:e0:14:4a:bf:45:
b9:09:ab:97:eb:9a:13:87:ff:cf:f1:53:f0:4b:de:25:c8:16:
4d:77:08:b5:93:9e:af:3b:03:31:15:56:6b:6d:3f:f3:23:b6:
4c:6c:11:42:00:14:25:65:21:69:fe:ca:db:2f:12:32:36:8b:
21:d7:3f:3a:3a:ad:62:21:1c:13:4e:22:c3:9a:f0:4e:82:20:
f3:be:27:e2:a8:0d:e6:df:3a:f3:0a:ab:02:74:b2:42:d8:82:
d0:7d:b2:d1:a9:c1:4e:69:6f:f8:23:b6:73:63:a1:40:99:ed:
24:6c:95:ea:26:1b:46:14:03:46:84:06:8f:e2:93:45:7f:b9:
a6:e8:a9:bf:cc:dc:dc:92:ca:0f:ff:25:41:21:6a:d9:33:6d:
53:dd:2f:b5:d2:d1:ff:59:43:65:c4:85:49:3b:60:42:0c:2b:
d4:8c:41:38:91:b6:d8:b3:ae:be:11:05:ef:72:d5:0f:62:85:
fd:41:e5:64:66:7b:e2:75:20:8b:23:b5:ea:d3:7f:5e:e3:26:
97:3b:6b:d8:08:23:bb:9e:e2:f2:3e:58:e3:10:be:3e:e2:fd:
e8:71:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 00:57:43 2026 by rpki-client