Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: Um+WRAbQxhzBDGL8GQE/X4Ebfi0D1TphHfPGaPCIP7w=
Subject key identifier: A6:C7:51:2B:9F:DD:BA:DA:58:29:A8:24:CB:0F:ED:53:F2:F6:DE:CC
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 01A1C0D33F6A1098FDD94E6B4A5064C87ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 1381
Signing time: Mon 09 Nov 2026 15:00:32 +0000
Manifest this update: Mon 09 Nov 2026 15:00:32 +0000
Manifest next update: Tue 10 Nov 2026 15:00:32 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: 7hDiVbAET5n+UY68SfpSoGXKEPBcDNlNAHsV0mxzhOU=)
2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 14:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:d3:3f:6a:10:98:fd:d9:4e:6b:4a:50:64:c8:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Nov 9 15:00:32 2026 GMT
Not After : Nov 10 15:00:32 2026 GMT
Subject: CN=a6c7512b9fddbada5829a824cb0fed53f2f6decc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:f4:5b:0c:fc:74:13:39:a4:19:c6:27:73:
f1:92:9b:9b:29:1c:24:e9:0d:fe:85:4d:d8:27:1d:
46:8c:40:7b:8c:1d:2d:5f:31:3c:f6:6f:1c:4f:7d:
c4:cb:4e:bf:f2:00:66:c0:a0:ca:0d:fc:2c:3b:cb:
b9:bc:d1:6a:89:8b:9b:97:9e:f4:c9:21:7d:9d:d4:
e5:41:87:2e:94:fb:eb:d6:4a:1d:70:1f:ce:4a:c5:
43:9f:85:9a:b5:57:bc:ea:60:89:53:9a:10:4d:c7:
47:7c:c4:b7:3a:87:ab:8e:ae:3d:09:66:b5:ba:0e:
5e:1b:22:a9:0d:9e:7e:c2:9c:fc:2c:07:a9:31:70:
8b:ee:60:a9:39:cb:6f:fe:5b:0f:00:c3:d8:86:15:
1e:81:b2:c8:61:48:67:4e:3f:96:9f:bc:44:6e:a1:
3e:37:ae:0c:34:61:3f:98:e0:5b:43:e5:33:dc:93:
7e:6c:18:00:52:e6:8e:88:28:f0:36:f4:ad:91:4f:
bc:d4:e0:0e:db:c9:d5:f8:f5:6f:3c:6d:fb:c0:ee:
8a:a8:66:43:37:32:0a:54:62:e7:00:b5:21:ab:33:
e4:d7:a3:70:2e:07:fa:21:26:d2:e4:96:52:5c:76:
34:b9:8e:d0:2b:f6:94:92:99:67:2a:7b:9d:25:3b:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:51:2B:9F:DD:BA:DA:58:29:A8:24:CB:0F:ED:53:F2:F6:DE:CC
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:6b:e6:dd:8a:13:0d:96:8f:e5:1a:75:74:00:35:c7:c3:
5a:7b:5e:7e:2c:3e:c7:00:fd:d2:98:2f:42:a5:98:ad:5c:26:
da:ca:62:19:01:96:96:27:94:e9:34:34:dd:a3:b6:ee:a8:3d:
79:de:b8:d3:bf:70:7b:b7:6f:53:4e:5a:24:f6:f9:05:54:40:
c8:51:48:0e:be:32:dc:61:d0:9d:cf:9a:c1:4d:d8:47:49:99:
5a:3f:13:66:18:40:f9:c7:93:10:10:8f:bf:f3:3f:bf:f3:d1:
a7:11:11:c6:1c:b1:ea:27:8d:56:66:d5:4e:4c:9e:92:35:4e:
d0:46:5d:46:37:06:05:62:b7:2c:42:b8:c9:59:22:5e:bf:f7:
36:90:49:68:07:94:84:c7:7b:66:61:f2:f2:37:f4:a4:40:f2:
68:1a:8e:01:09:1b:4e:f5:9b:fb:ad:b7:ac:af:ad:50:2e:9a:
13:b3:a6:7a:7c:ce:72:ac:bd:34:8d:c3:9f:7f:77:53:7b:86:
ec:cf:f9:bf:27:da:16:17:9a:52:55:b2:a4:ca:6b:93:9e:00:
33:c6:24:76:72:33:a1:4c:8c:b6:ca:e2:a3:7a:f4:18:3c:03:
6c:c6:7c:e0:d5:17:90:0b:8f:9d:3a:f9:95:38:00:d4:57:a7:
63:3d:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 18:23:04 2026 by rpki-client