Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: XlggKnulhLsL4Ma9ovx0sXLIUIW4itFoLBIoYJzL4iU=
Subject key identifier: 1A:43:A5:75:A8:18:8A:F5:E6:98:4B:52:E5:23:04:0C:5F:32:14:7C
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 01A1B9BECC439C407E019FC56010C25A4681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0F32
Signing time: Sun 08 Nov 2026 06:00:51 +0000
Manifest this update: Sun 08 Nov 2026 06:00:51 +0000
Manifest next update: Mon 09 Nov 2026 06:00:51 +0000
Files and hashes: 1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: E7OG6MTSVMVSBSyyC694RRUxrT12gsC16WdvG75ZL0A=)
2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b9:be:cc:43:9c:40:7e:01:9f:c5:60:10:c2:5a:46:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Nov 8 06:00:51 2026 GMT
Not After : Nov 9 06:00:51 2026 GMT
Subject: CN=1a43a575a8188af5e6984b52e523040c5f32147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:3f:4a:7e:f8:b7:e3:d1:29:85:9b:21:fb:
f3:41:48:55:ed:30:a4:47:a6:85:46:0b:d1:fa:96:
10:66:27:a3:14:5c:83:c5:0b:0d:93:db:4e:67:32:
3a:5d:4a:3d:8d:8c:95:c3:8e:75:b1:4e:34:d9:1d:
e4:b7:5a:3b:d3:ea:77:16:1c:d2:c1:40:da:e6:2d:
24:af:17:a8:e8:1c:b2:d5:69:37:25:63:af:b4:dc:
27:07:04:28:47:42:5d:08:6b:07:fb:b4:93:00:75:
2d:4b:29:07:d7:6e:38:0f:8b:65:5d:b6:7d:48:95:
01:57:a7:a2:3d:d5:0e:e1:74:e3:64:aa:3e:4e:63:
7c:13:91:51:0a:da:5d:72:56:e6:79:6f:90:2c:4b:
84:05:67:ff:64:83:e4:14:a7:37:dc:65:63:cf:2f:
ab:d2:08:12:81:8f:7f:97:a3:1d:00:76:d7:58:89:
bd:20:9b:b9:87:cf:9c:42:63:33:dd:01:2b:fc:1e:
d5:5d:ce:53:38:f6:f6:48:7a:e3:f9:1b:c4:a8:69:
e7:13:ed:f9:35:29:af:5f:6c:71:1a:37:d5:70:06:
f1:4d:5a:11:90:22:e1:bf:c2:1c:4a:df:9d:10:ce:
d7:86:8f:13:25:34:62:ba:17:0e:dc:b4:2b:ba:64:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:A5:75:A8:18:8A:F5:E6:98:4B:52:E5:23:04:0C:5F:32:14:7C
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cb:70:ac:bf:3d:5d:6e:60:df:3f:44:3b:a1:00:f1:2f:16:
5c:f4:14:b3:e0:15:2c:dd:d0:e1:88:1b:5a:66:92:24:85:9f:
53:8a:4b:f5:f1:32:eb:d6:cb:35:bc:29:11:99:76:52:57:39:
97:ec:31:f0:cc:29:7b:f2:98:d6:aa:94:49:42:73:c7:e8:50:
f5:d2:05:10:2b:4c:3d:6b:34:f3:a8:8e:64:0a:1e:d2:64:50:
92:0e:31:9f:a4:54:cf:97:5a:1a:70:b6:16:5b:b3:71:0d:87:
c3:ef:97:59:47:7f:e7:2b:c2:9c:fa:dd:4f:de:61:a5:f5:42:
00:ea:25:91:55:cc:11:03:91:bc:4e:8a:bf:72:06:23:8b:5a:
5d:26:62:16:52:09:2e:37:62:c0:47:1d:0c:ed:46:35:74:15:
0b:0d:49:52:1f:76:69:1b:3e:31:4d:ff:a8:c0:68:62:9c:d7:
da:ce:f0:78:dd:e0:6b:ec:78:2a:64:56:c9:57:6f:e2:85:da:
c9:42:d3:d0:6e:51:15:21:44:07:94:c3:38:14:f7:48:aa:4d:
8e:e8:4a:d5:47:70:9e:fb:3f:f3:39:a3:97:83:7a:8b:1c:52:
f2:c2:65:28:1e:16:73:82:47:c5:78:0a:c8:88:eb:c6:5c:31:
d2:a8:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 23:06:45 2026 by rpki-client