
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: wA29fxhrkJTCH+JI3NgP9dMq8STJ2l95rBZbH6oum3Y=
Subject key identifier: 3D:DC:A3:F9:AA:D3:23:D9:75:6F:C1:74:DC:90:62:A7:DE:1C:F8:6A
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 01A1DE3996BB94D2927BD285EAB5019BCD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 11CD
Signing time: Sun 15 Nov 2026 08:01:18 +0000
Manifest this update: Sun 15 Nov 2026 08:01:18 +0000
Manifest next update: Mon 16 Nov 2026 08:01:18 +0000
Files and hashes: 1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: UjVqAmtHnV0xs0s9eRUAfBX/i6w2r+CnP4FNy350cv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:96:bb:94:d2:92:7b:d2:85:ea:b5:01:9b:cd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Nov 15 08:01:18 2026 GMT
Not After : Nov 16 08:01:18 2026 GMT
Subject: CN=3ddca3f9aad323d9756fc174dc9062a7de1cf86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:91:4b:7b:b6:aa:26:b0:4e:f0:c2:ec:fe:
ac:73:96:92:0c:1d:57:91:ab:c7:bf:47:46:a2:58:
b1:cc:c1:98:95:da:9b:01:69:b5:88:1b:68:50:e7:
36:db:1b:aa:7d:13:5c:cf:bb:27:61:8a:5f:0a:40:
ba:88:d4:37:08:24:e5:01:ca:b6:32:6c:ee:50:f3:
9e:50:7e:0e:ab:6b:3d:cb:e8:f3:3a:fa:26:bd:2e:
f8:dd:1d:6f:af:23:1f:9d:ab:b3:7e:83:1c:69:79:
ad:ea:a5:1a:22:84:6f:9b:21:86:11:a9:df:02:2a:
8e:f7:b8:25:14:81:e0:3a:4c:ba:82:64:3a:c8:94:
f4:c7:aa:77:87:92:a6:eb:59:f4:7c:f7:7d:b6:ef:
37:78:91:94:c3:fb:18:9d:04:ae:e4:2a:98:4a:b5:
6c:dc:95:e5:f4:57:99:6f:d9:1e:5f:2a:41:41:53:
b8:ae:04:f1:12:61:2d:80:27:87:d0:58:79:4f:a8:
4e:26:10:31:36:4f:07:29:64:d5:ca:de:8c:c9:71:
c0:e1:b9:24:bb:db:01:0c:1e:41:9d:fd:be:f1:2d:
80:35:e7:98:4b:0c:12:90:f4:54:49:72:ac:2a:cf:
c4:c8:cc:20:1b:93:80:f4:aa:99:f3:b2:ca:cb:6a:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:A3:F9:AA:D3:23:D9:75:6F:C1:74:DC:90:62:A7:DE:1C:F8:6A
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:78:08:80:72:dc:a1:a3:9d:63:30:bd:b2:2c:35:66:eb:65:
5c:c4:a1:f8:24:4f:5f:d4:eb:17:c2:61:ee:15:1f:24:62:63:
1e:6f:2d:88:50:2d:ab:55:04:8c:ad:c4:db:91:3a:2f:f7:77:
27:90:3e:e5:36:17:52:f4:fa:eb:c6:0b:6b:ef:33:ac:0c:b3:
55:63:d7:f6:44:26:9e:7a:49:b6:0b:c7:62:85:13:39:89:d0:
db:76:ed:42:37:84:dc:f2:fd:2b:01:2f:50:f8:2a:a0:cc:52:
90:a3:0b:74:46:4f:fe:30:00:07:f9:eb:28:62:ef:6d:68:4c:
55:53:6c:8f:e6:ff:7a:af:76:6b:dd:fd:40:eb:67:89:12:b9:
24:5e:f7:31:c3:39:ac:3f:5a:e1:fa:2c:90:b3:b7:e7:97:81:
88:30:30:a7:16:00:aa:8c:c1:fe:26:a7:a1:63:3c:77:bd:82:
70:67:b6:0d:70:b8:a7:84:8b:87:09:f3:a0:2d:b7:89:d6:da:
eb:c5:4f:14:53:f7:76:a5:77:c6:b6:92:04:02:a5:00:c1:7b:
b7:e4:f5:68:99:81:d5:46:9e:a4:2c:1d:f0:ef:0c:f5:84:cf:
08:4c:2e:a4:0d:82:75:de:47:4a:ac:84:2f:9d:24:4b:71:e5:
aa:f2:4f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:00:22 2026 by rpki-client