Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
File: 1-0NLMrn7496VvHcdbSs8eaoBS_U.mft (raw, json)
Hash identifier: sj+vQ8qK83n8pNNnIxQRnIGLL/yk64pAqT2HksrjkTw=
Subject key identifier: 59:5B:B7:1B:75:D1:D1:B2:55:A3:64:18:0E:09:C6:68:C5:5E:71:6E
Authority key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
Certificate issuer: /CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Certificate serial: 01A1D9819A5E5DE383ED75829CC97587672F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
Manifest number: 03E7
Signing time: Sat 14 Nov 2026 10:01:51 +0000
Manifest this update: Sat 14 Nov 2026 10:01:51 +0000
Manifest next update: Sun 15 Nov 2026 10:01:51 +0000
Files and hashes: 1: 1-0NLMrn7496VvHcdbSs8eaoBS_U.crl (hash: xeMpv13ZOUTXCJx46LPuYcW3aw4+FYvXFVuYN6ILBkE=)
2: 118-0Se03Hd6WkrM5OjppqFR1S0.roa (hash: iigPQAfXfwcfzslQVLCKiVJRI0tND4zuk1TNSyWLZe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:81:9a:5e:5d:e3:83:ed:75:82:9c:c9:75:87:67:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Validity
Not Before: Nov 14 10:01:51 2026 GMT
Not After : Nov 15 10:01:51 2026 GMT
Subject: CN=595bb71b75d1d1b255a364180e09c668c55e716e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:ff:c9:9d:23:92:71:bf:40:03:b2:1b:52:
9e:81:0f:8b:3f:d3:a8:90:f6:7a:45:a2:9a:5d:fb:
5b:fc:eb:73:2e:6f:8d:7c:64:5a:9d:ed:9c:35:c7:
ca:e1:5d:69:1e:b4:68:04:1e:89:b7:16:3d:10:e4:
0e:b3:90:d5:67:65:92:19:a0:71:05:b7:62:74:54:
41:cf:d9:b6:0f:3f:54:c1:85:b8:8e:ac:8a:e9:72:
fe:bc:c3:39:67:9d:8f:02:a7:73:35:48:d3:4f:4f:
c0:16:52:f1:47:ec:04:78:9d:e7:6f:a9:78:fb:11:
12:00:1d:32:9e:5a:4d:09:d5:83:0a:9f:f1:0f:98:
36:40:11:94:4a:1a:4f:65:c7:2c:e3:81:d8:1d:87:
d0:79:60:43:62:b6:b1:75:b4:f7:f4:0a:8e:96:bd:
75:c7:78:b7:ce:ff:78:76:38:42:57:7c:a3:fd:f2:
aa:1a:57:d7:d5:35:a6:05:08:ef:85:5e:fb:17:89:
95:b2:40:54:21:24:87:95:f4:e9:a8:6f:a6:ca:80:
5f:d3:65:87:df:fc:9f:e1:19:ee:04:a8:5a:49:6f:
93:43:6b:f2:5b:60:8b:f1:28:50:90:14:9f:f7:c4:
ac:ca:2d:46:54:96:85:8e:ef:29:42:75:84:63:55:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:B7:1B:75:D1:D1:B2:55:A3:64:18:0E:09:C6:68:C5:5E:71:6E
X509v3 Authority Key Identifier:
keyid:FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:b5:d1:99:46:a1:b5:ee:03:a7:dd:c0:b0:59:9c:6b:21:
b3:f8:f3:5b:cc:25:65:06:aa:05:49:27:86:3b:ca:4d:44:28:
a1:40:ca:a7:78:4c:f1:7d:56:f5:b2:7d:f1:f4:3f:4b:11:6d:
3e:9f:89:2f:0a:f2:3a:d0:28:ad:8f:f4:c7:fa:0f:e3:70:9a:
c7:d3:db:64:5b:38:ed:3b:25:df:80:44:0b:62:4b:01:a1:c0:
a2:6e:7d:db:e1:65:4b:4f:ed:03:01:86:28:44:31:79:7e:71:
05:f8:c1:c3:c8:a0:d7:0a:f9:09:00:74:bb:c0:9c:67:4a:f1:
40:28:d7:b8:ca:85:0d:54:77:a2:4e:a8:5c:42:31:6e:02:fe:
20:9f:63:25:1a:2a:3f:54:35:bd:ee:bc:fa:69:b1:f1:c7:4d:
82:e2:e2:19:b5:f6:54:1f:71:78:dc:70:dc:4e:88:d4:49:b6:
16:7f:0b:a1:97:b8:f1:67:7f:34:51:b3:b8:e7:b4:44:d4:91:
22:80:f4:2d:8d:7e:3a:1c:10:80:33:fd:b4:68:ab:36:33:17:
62:fe:cf:64:6e:db:4a:81:d6:1e:b4:d0:bf:6d:0d:60:13:bb:
81:91:75:d8:66:0e:bd:a5:be:f1:84:d3:af:cd:7a:85:f5:93:
74:c2:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:48 2026 by rpki-client