Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: SucF5V8NQ52VPv3I0gOHilaKjuNeujddsnOtvn+Z+vE=
Subject key identifier: 4A:8C:E6:2A:63:4D:DE:1B:5E:DA:EF:01:E2:E9:75:2A:0C:E5:88:24
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 01A1C14128709895DE8D265907A55933D90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 1AEB
Signing time: Mon 09 Nov 2026 17:00:35 +0000
Manifest this update: Mon 09 Nov 2026 17:00:35 +0000
Manifest next update: Tue 10 Nov 2026 17:00:35 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: n+hWwP7SVrZeoOnxjGVt1SoBwHBlVq/yWDSyU0qVI0U=)
2: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (hash: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=)
3: ljKqKcii0U02MebIFQNX8KauT_U.asa (hash: qIl3XQDoFiJHD98WqyufKHLxD9Gj0y/WzWfOkW+kjkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:41:28:70:98:95:de:8d:26:59:07:a5:59:33:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Nov 9 17:00:35 2026 GMT
Not After : Nov 10 17:00:35 2026 GMT
Subject: CN=4a8ce62a634dde1b5edaef01e2e9752a0ce58824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:9c:ba:b5:42:25:84:73:06:20:cc:5c:9b:
f1:2e:3c:cb:60:1e:a7:bb:7f:5c:7d:6f:9c:29:c3:
cc:5d:0f:06:1b:a4:67:1d:cd:fa:20:bc:86:f6:4c:
75:48:8e:46:b1:9d:a7:ad:bf:c3:9d:87:73:2b:1a:
fd:78:6a:24:9d:be:f5:23:b9:8b:43:12:a9:9c:c5:
76:f4:2e:c8:22:72:20:33:29:3b:76:7f:71:16:e3:
49:33:ac:3a:05:82:24:e6:27:4d:69:da:13:13:cf:
0b:1b:54:6d:5b:92:d3:4b:ba:74:af:ca:4e:14:ae:
4b:a8:e5:8a:70:d0:8d:60:cc:99:ef:34:79:d6:87:
95:85:4c:28:79:2b:b7:aa:b3:58:0c:91:a0:60:79:
3e:2c:e7:2c:4a:a0:31:0d:3f:10:53:04:f9:e9:cd:
6d:fd:c7:ef:8d:f8:4a:2f:a6:c7:70:81:1d:93:ff:
54:cf:34:22:30:e5:62:a4:eb:d3:03:38:68:71:0a:
2c:20:57:e2:b1:30:76:86:fd:7f:d4:17:ef:0f:09:
93:db:e6:20:52:9b:bd:de:65:a9:b1:09:18:f4:11:
d4:04:cc:89:55:e9:39:03:f3:b5:dc:69:f4:05:37:
4f:1a:a6:9b:12:29:c2:fb:55:3b:3f:c1:06:9d:e3:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:E6:2A:63:4D:DE:1B:5E:DA:EF:01:E2:E9:75:2A:0C:E5:88:24
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:60:21:e0:b3:3b:ce:be:65:87:a8:34:a1:a9:c3:e4:8f:f2:
d7:80:e1:7b:d2:52:2e:45:03:f6:44:44:e8:98:35:9a:22:13:
3e:c0:6c:d4:c5:98:71:29:ef:4c:f8:5f:83:1b:c1:e4:9d:40:
95:22:ae:c0:8d:e5:c9:0a:af:24:77:79:ca:8d:a7:90:1f:a8:
fc:d2:c8:dd:d9:c8:2f:81:02:6f:4a:4a:7e:52:2f:be:fe:46:
56:43:7d:61:84:03:2e:a5:73:29:e8:a7:25:37:8a:1e:c1:d5:
30:f1:8b:b5:55:a5:a1:f0:40:bb:94:48:b2:b3:cc:a7:ff:f2:
96:13:e6:4d:75:bf:31:f1:b0:81:f1:8e:fe:08:32:27:31:20:
71:15:1d:ed:cd:52:44:a2:00:d7:76:30:7d:e2:b1:5c:24:e7:
d9:97:f5:ee:ab:1e:08:e7:c3:9d:18:d6:3b:66:a8:d2:c3:0f:
d3:d8:0c:9c:76:4a:4f:78:77:8b:18:2a:ff:13:6c:d7:cd:f2:
3c:c3:62:40:66:8c:f0:13:95:c2:ed:6d:72:5e:b1:2c:a9:c6:
fa:00:46:59:a3:c3:4b:1d:be:80:b7:e2:1b:c2:a8:20:12:6b:
00:6e:30:af:2c:60:c3:ce:9b:bc:2b:77:46:b3:d3:4e:3c:f5:
47:04:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:49:05 2026 by rpki-client