Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
File: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft (raw, json)
Hash identifier: t3H1txYu17MDGLBtMaWTKCsKIjJEp9dDBuKgaDRX9aM=
Subject key identifier: 23:49:B6:98:1F:5C:E4:74:70:24:E5:EE:C5:49:9E:A3:CB:7B:33:E2
Authority key identifier: AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
Certificate issuer: /CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Certificate serial: 01A1DEDE384743A4BBA4D5B2C5182F11DC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
Manifest number: 029B
Signing time: Sun 15 Nov 2026 11:01:07 +0000
Manifest this update: Sun 15 Nov 2026 11:01:07 +0000
Manifest next update: Mon 16 Nov 2026 11:01:07 +0000
Files and hashes: 1: AsgCbpxXAfVEl8fMySxEMEBj3v0.roa (hash: 3DUclWrbvVnjRe22xwXjCYPITDFNxuR0Ynpweo6931E=)
2: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl (hash: D33ib51szYqwYuiu05yxFuEg1ZSGdp/yv0fpu1C4sjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:38:47:43:a4:bb:a4:d5:b2:c5:18:2f:11:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Validity
Not Before: Nov 15 11:01:07 2026 GMT
Not After : Nov 16 11:01:07 2026 GMT
Subject: CN=2349b6981f5ce4747024e5eec5499ea3cb7b33e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:29:af:a8:40:9d:b5:1e:ec:de:12:c6:19:
06:2a:db:cb:98:bc:05:a0:76:af:eb:0f:31:c7:56:
e8:a1:7c:ea:c5:40:3d:d6:f0:ac:7a:4e:71:11:c7:
c5:7e:05:bb:04:78:95:a5:ed:5b:c9:a7:f4:28:49:
2e:d4:17:03:96:08:ca:0a:97:4b:e1:71:79:81:7d:
0e:ab:03:8b:4c:c8:24:73:8b:93:10:75:d6:b7:4d:
20:94:66:17:56:60:c0:3e:47:23:db:1f:68:26:c0:
90:62:9c:f6:4b:8c:1c:01:50:9a:43:4b:76:d4:ba:
c2:8b:86:f6:32:63:e5:46:62:51:5d:2c:86:aa:d8:
56:ad:1e:6b:b6:00:77:1b:24:2a:77:76:8a:1e:4b:
cc:61:e2:28:03:18:56:18:59:64:00:2f:9a:5b:8b:
53:9d:4c:94:9d:d6:38:bc:36:50:9f:82:a2:16:39:
c8:26:6e:a4:16:1a:7a:2f:64:2e:91:6f:a1:8e:6a:
e0:a5:17:6f:7b:6b:5d:e4:85:4c:8b:42:17:50:99:
42:70:06:9c:b0:0f:66:30:04:cf:16:3b:2b:6f:25:
42:9c:77:a6:db:9b:15:d9:4a:b2:98:34:20:1f:fe:
6d:64:3f:d1:56:f4:7d:40:22:76:f4:a3:eb:54:9e:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:49:B6:98:1F:5C:E4:74:70:24:E5:EE:C5:49:9E:A3:CB:7B:33:E2
X509v3 Authority Key Identifier:
keyid:AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2c:01:1f:86:02:e9:a3:d6:d3:d6:dd:02:b6:99:10:9c:6a:
51:78:27:2e:51:fd:31:a3:9c:bc:70:8d:a9:d0:83:d6:87:92:
33:ab:27:d2:f7:91:7d:f4:aa:fd:3a:2a:e4:87:70:b0:9a:27:
e1:68:96:60:e0:39:bc:d9:80:0f:a5:0f:23:75:48:00:5d:19:
50:b3:7e:b7:b4:86:b3:3c:92:9b:61:17:b9:57:73:50:43:53:
e9:fc:6f:04:21:63:3e:db:06:6d:6c:1d:4f:c4:08:ac:c5:b5:
b9:af:ad:d6:26:eb:8b:ae:5a:b5:59:19:73:44:89:77:7c:db:
c0:0c:1c:2d:b7:42:af:62:95:16:ac:59:a9:90:38:86:94:11:
0b:ec:44:bc:a2:9f:c0:b9:8c:25:56:4f:d0:e8:a4:5d:4b:ba:
b8:75:b7:9b:63:0c:88:4c:8d:5b:e8:de:c5:de:e0:6f:bc:3b:
7a:b9:25:10:12:60:fc:a7:c0:28:26:32:c0:4b:b1:cb:b7:38:
be:bb:b9:49:47:c1:e5:28:12:a4:33:c5:46:06:aa:f7:e8:e8:
59:e5:06:dd:00:81:17:c3:3a:82:4e:07:d8:6e:c0:f1:70:51:
6e:a1:ed:9a:46:8c:82:a2:45:58:06:e2:ac:a6:46:d0:3e:50:
eb:59:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:01:40 2026 by rpki-client