Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
File: D2Kgc3giOs5WqEzv0weCKMsL5S4.mft (raw, json)
Hash identifier: HBk59AfFpNCO9aFVMp4YCcJQl4JXIW0LmzziEfnwgT4=
Subject key identifier: 3C:69:2A:B2:AD:9C:AB:E9:55:B3:C4:2A:4B:7E:06:DE:72:D9:74:4E
Authority key identifier: 0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
Certificate issuer: /CN=0f62a07378223ace56a84cefd3078228cb0be52e
Certificate serial: 01A1DB01B5A3803CE55AF32F1D897209741F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
Manifest number: 015A
Signing time: Sat 14 Nov 2026 17:01:24 +0000
Manifest this update: Sat 14 Nov 2026 17:01:24 +0000
Manifest next update: Sun 15 Nov 2026 17:01:24 +0000
Files and hashes: 1: D2Kgc3giOs5WqEzv0weCKMsL5S4.crl (hash: Tc3+9+kfuT7c/bEViRPvLbP3zjEU/nPJ84heQwN73Ws=)
2: gqNmtUdf580qEHDGPMO8uXNf-94.roa (hash: TMnDxy4wqlNlKPOnHn9qZ+VG+0+ZivW3PzYjlXvUSu4=)
3: hcfkZ1canYcqBaE9iPzQiK47YkU.asa (hash: WYngWTyXnFZ7BPoBYe6DykacViEk1I9J2lH7LeX7hgc=)
4: ytpxWALMMzMXxSAcFbBovYCQkDw.roa (hash: tuj/U5H6ku6EtzVDyrVdq4eCW3Pp8DR50mZnV0/ryY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:b5:a3:80:3c:e5:5a:f3:2f:1d:89:72:09:74:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f62a07378223ace56a84cefd3078228cb0be52e
Validity
Not Before: Nov 14 17:01:24 2026 GMT
Not After : Nov 15 17:01:24 2026 GMT
Subject: CN=3c692ab2ad9cabe955b3c42a4b7e06de72d9744e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:14:46:30:1f:9e:37:52:8a:cb:03:ff:7a:
78:36:6e:11:d8:eb:a5:11:80:ec:41:c0:d5:7e:9d:
d5:01:65:5f:28:e5:de:83:1a:b6:7d:80:4e:ec:ca:
ec:bd:eb:b4:36:d0:08:dd:e4:d1:ec:c8:e7:e9:a7:
70:a5:a6:1f:32:8e:c7:f8:41:47:67:24:15:a3:60:
81:c4:5e:57:bd:64:4b:fe:f5:9e:ac:07:9b:be:4e:
c1:f5:5d:f2:56:1b:41:b7:58:a4:43:4a:84:71:0a:
a3:ef:5b:d3:77:e8:c8:52:4c:72:c1:07:84:a6:a2:
a8:23:e3:95:9d:de:d0:bb:3c:16:3c:f5:7e:2e:46:
f0:ab:d4:66:3e:29:2e:8d:21:c9:0d:8e:da:3b:73:
fa:b6:e9:d1:6a:9e:13:47:2d:1e:41:59:a8:fc:2b:
2a:28:6a:eb:b8:99:44:fd:53:85:04:3f:ed:04:41:
cc:ee:d2:00:ec:4d:a3:74:e2:87:86:de:df:17:ca:
8d:a4:04:66:0e:d4:f4:0b:b0:ba:35:f3:77:2b:8b:
be:dc:fd:cb:5c:39:f7:fa:ca:dc:b0:04:2c:4e:fd:
d0:dc:5e:e6:44:64:da:03:c4:93:3e:d0:08:ce:d1:
9f:2d:7b:df:f5:28:65:eb:5e:7c:a1:ce:22:11:78:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:69:2A:B2:AD:9C:AB:E9:55:B3:C4:2A:4B:7E:06:DE:72:D9:74:4E
X509v3 Authority Key Identifier:
keyid:0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:80:8e:c0:db:d7:de:80:bb:76:6c:7d:d7:64:06:63:0b:41:
e2:de:7a:ea:26:81:fc:17:9d:f2:71:8c:80:dd:bf:96:7a:e4:
b9:d1:b1:98:eb:89:f9:d2:aa:b9:58:75:6b:55:3f:a3:ce:79:
37:c4:95:05:ce:75:14:46:74:b8:f6:c7:1b:12:0b:3c:58:32:
8d:fd:99:91:67:a3:d1:33:a6:9a:b2:05:07:3e:a8:62:86:ef:
85:b0:9e:17:8d:92:ef:a2:c6:36:71:a5:f9:06:61:e4:7f:6b:
a9:a3:d3:39:4f:29:71:b1:c7:07:ad:c4:90:62:25:45:c4:89:
68:88:d0:38:0f:d3:c9:c2:d1:c9:1e:0f:bf:08:67:9a:84:df:
c2:df:60:1a:23:fb:d3:8c:b3:63:c3:f8:12:c9:cc:51:b6:83:
a2:92:99:91:19:58:5a:e3:6d:ba:75:f1:4d:9f:29:1e:be:45:
c3:00:7d:ea:4a:b4:63:52:3e:03:e8:97:c6:05:63:7b:ff:7d:
c1:5a:32:b6:d7:42:59:3b:c2:c7:6b:82:7b:23:c3:17:eb:2f:
99:3b:02:6e:2c:0a:e7:60:9c:8f:34:55:e0:8c:59:52:fc:86:
4e:39:ca:1e:c3:17:e0:74:07:6e:35:e1:99:cd:86:97:c9:e3:
84:79:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:45:16 2026 by rpki-client