Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: SnOItk+MYYYnyyUy1PaCHtwdFvLvpahdvc8ISSyKuoo=
Subject key identifier: CB:37:F9:AB:24:8E:36:F1:5C:2E:BD:05:24:DF:46:A3:88:BD:29:67
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 01A1CB21024E5FFCA1ED606F6FE0D68CE114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 12CF
Signing time: Wed 11 Nov 2026 15:01:40 +0000
Manifest this update: Wed 11 Nov 2026 15:01:40 +0000
Manifest next update: Thu 12 Nov 2026 15:01:40 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: DcifJsku+ASvCR/R/nvqOfftIbZG+hv1cqflBP34Kbo=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:21:02:4e:5f:fc:a1:ed:60:6f:6f:e0:d6:8c:e1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Nov 11 15:01:40 2026 GMT
Not After : Nov 12 15:01:40 2026 GMT
Subject: CN=cb37f9ab248e36f15c2ebd0524df46a388bd2967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:0e:6e:13:40:bb:96:b5:b5:84:ae:b2:2f:
50:c4:d7:24:f2:bc:f7:b8:75:ff:10:18:5f:bf:df:
ba:03:18:6c:8a:b7:67:4a:29:e6:bb:a1:22:fa:9e:
61:66:91:ef:06:03:19:18:8d:40:5c:16:c8:be:72:
b0:8b:22:36:7d:64:71:cc:7f:5c:cf:94:70:87:e5:
6f:c9:8b:89:a6:2a:c4:27:d2:33:67:6e:41:1b:1d:
75:38:5f:8a:aa:c5:bc:2d:e6:4e:e9:c9:c5:c6:ee:
b2:16:8e:d8:40:cc:74:23:ab:37:79:b2:4c:66:c9:
09:29:2f:cc:bb:bb:7b:38:6a:3a:65:c9:39:fc:e9:
84:d5:fa:53:e0:95:03:75:a4:98:8e:41:17:9d:a4:
f1:94:f5:2d:00:29:1f:af:83:9e:67:10:a4:e3:c0:
e6:37:bd:1b:17:9b:06:ae:51:aa:ad:fc:83:46:54:
8e:6d:11:7d:f4:83:7b:81:de:cb:49:1d:83:33:6b:
38:8c:0f:d8:ac:df:d4:97:04:1b:31:93:e3:59:c5:
48:3c:f0:af:a6:7c:d9:b9:24:3e:c3:64:08:c6:5d:
1e:39:ae:83:39:f7:8d:fe:09:54:82:bb:ab:24:3a:
66:01:41:d0:d5:98:99:d8:5f:7c:8b:5f:b7:81:57:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:F9:AB:24:8E:36:F1:5C:2E:BD:05:24:DF:46:A3:88:BD:29:67
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b0:f2:68:e9:70:c8:42:3c:fd:32:80:bd:9e:01:f9:3a:b3:
68:01:95:f7:5c:1f:5b:bb:bd:29:89:f5:32:e6:8d:18:c6:b8:
10:6c:89:3e:1d:72:8f:1a:af:0a:79:5e:50:36:8f:ac:b8:93:
d9:4c:1e:1d:3b:e4:23:98:a2:23:f5:07:ed:4c:4d:f2:58:28:
97:03:0a:31:6a:3b:96:8b:cf:46:39:c7:bc:21:92:31:ad:ba:
8a:eb:ab:90:91:1a:f7:d8:35:05:e7:6a:96:e0:75:36:fc:69:
9d:75:8f:6c:e2:67:63:e5:d5:30:b0:d9:8a:03:19:9d:9a:0e:
69:50:0f:31:af:cc:6c:4c:ca:f5:7f:26:d4:fc:98:1c:a1:56:
9a:fc:70:11:45:45:c2:05:9d:94:ec:b6:41:48:a4:3c:26:71:
93:70:3f:ca:9c:64:3f:fb:e9:6f:43:79:8e:87:f4:0e:5e:9d:
d6:8d:ae:98:69:dd:1b:33:d5:18:b0:46:9c:f1:11:19:20:02:
8d:ca:e9:ed:40:c3:f7:b3:04:15:a7:eb:c0:57:6f:5d:fc:8a:
07:46:13:70:48:01:fd:43:03:fb:5e:18:1d:5a:dc:a8:13:60:
fa:55:2e:5e:fb:f1:53:8d:e3:da:71:21:7c:c2:13:0c:bb:c7:
15:8c:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:23:58 2026 by rpki-client