Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: 5cL3re68Eih14nDRkTi9EbSrPgUxpOgzkgnKHmMqk20=
Subject key identifier: F2:E3:30:28:FA:94:19:78:36:9C:E3:17:42:27:F6:86:1F:56:F3:65
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 01A1C366B837E443DE961D8441EF4892A561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 1AEC
Signing time: Tue 10 Nov 2026 03:00:51 +0000
Manifest this update: Tue 10 Nov 2026 03:00:51 +0000
Manifest next update: Wed 11 Nov 2026 03:00:51 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: TYJV6vIAJGtUBQrbZcU+On77C1i8uEU4A7afXzL7T98=)
2: 7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa (hash: +PFpSUBUn21QY3VMxev9eNCTJ4x+TBdranLn3xHpsiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:66:b8:37:e4:43:de:96:1d:84:41:ef:48:92:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Nov 10 03:00:51 2026 GMT
Not After : Nov 11 03:00:51 2026 GMT
Subject: CN=f2e33028fa941978369ce3174227f6861f56f365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:40:db:02:db:33:5b:b2:b6:df:c1:a0:d7:
7b:8a:31:1b:4b:1d:2c:07:fe:b3:19:67:bd:e8:5d:
9b:10:f9:e5:3e:b5:c6:9c:28:66:5e:38:cd:7c:b1:
fb:e4:48:7a:df:6e:ef:ad:44:f3:eb:d0:9b:cf:f2:
61:32:92:11:46:b5:30:ed:c7:69:95:47:df:cd:70:
04:69:47:4d:f5:8a:0e:4c:0d:db:a1:4d:c1:6c:78:
20:18:3b:d0:64:7d:00:e0:98:b7:77:e5:32:f4:ed:
82:c3:e3:f6:c5:0f:08:36:f2:72:a0:a1:a0:8d:be:
56:25:be:5c:b7:a8:5a:eb:db:ba:67:fe:ec:61:2a:
b9:d1:40:b3:2f:06:db:52:e5:91:7c:36:69:19:cf:
aa:e6:aa:6e:8d:e2:ff:9c:2c:2c:7f:ee:0e:65:f4:
a4:ef:c5:f4:c2:0e:94:30:47:58:29:91:6e:03:82:
b6:2e:b9:27:78:5f:c9:95:af:af:96:f1:f2:d7:d9:
51:66:2d:a8:30:b6:20:b7:51:3b:6f:1a:71:24:fa:
7d:92:b1:98:6d:a9:56:4d:41:65:fa:ac:10:74:f4:
b0:37:f9:32:cf:85:55:12:40:9e:bc:c0:d9:de:2b:
eb:4d:b6:f8:24:56:64:7e:13:70:92:49:38:55:a8:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E3:30:28:FA:94:19:78:36:9C:E3:17:42:27:F6:86:1F:56:F3:65
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8c:ef:aa:a3:ef:24:3e:4a:30:01:e5:02:82:b7:65:2a:4c:
55:d2:40:5d:91:94:81:b6:7c:e1:eb:55:0a:c1:e9:d2:86:f0:
3b:d9:19:10:08:5c:a2:b4:6f:5f:43:54:e0:11:bd:7c:0d:d0:
c4:3f:86:ac:a2:dc:a3:20:ae:92:79:af:40:b3:8f:6d:6e:41:
0c:64:5f:99:c6:b8:43:37:e4:e4:8e:16:93:da:3b:8b:a7:b2:
b0:07:f8:44:6a:1a:1d:4b:97:c7:65:15:e4:a3:ad:e6:b2:61:
15:e3:fa:3b:a5:82:7c:9c:32:bc:7a:9b:90:89:25:3b:69:d7:
40:fe:c6:b8:56:ca:50:48:f9:ff:10:3c:29:6b:4e:11:3e:8e:
cb:56:3b:c7:9b:05:06:ad:00:8a:5e:b8:3a:86:d7:d5:06:d7:
6c:32:d2:ef:1d:a7:2e:fb:a4:f4:37:c6:34:d6:9c:9e:d5:be:
1f:84:9d:64:3f:e0:a0:16:79:11:33:45:58:bc:0e:57:54:81:
b7:57:30:cc:f3:f9:82:55:2f:3d:66:ff:9d:ec:94:7e:94:4c:
e0:1e:52:3f:e6:68:29:67:9d:b2:69:61:d7:d4:a5:71:bc:f5:
6e:fc:42:8b:e1:39:d7:07:aa:f2:9d:36:ac:40:3e:5b:60:dc:
a2:61:4e:8d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHDZrg35EPelh2EQe9IkqVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTU1ODhlZjgwNTQ2ODkyOGM2M2RhYjA4NjMwMDg1ZTVk
MDhmNjUwHhcNMjYxMTEwMDMwMDUxWhcNMjYxMTExMDMwMDUxWjAzMTEwLwYDVQQD
EyhmMmUzMzAyOGZhOTQxOTc4MzY5Y2UzMTc0MjI3ZjY4NjFmNTZmMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEZA2wLbM1uytt/BoNd7ijEbSx0s
B/6zGWe96F2bEPnlPrXGnChmXjjNfLH75Eh6327vrUTz69Cbz/JhMpIRRrUw7cdp
lUffzXAEaUdN9YoOTA3boU3BbHggGDvQZH0A4Ji3d+Uy9O2Cw+P2xQ8INvJyoKGg
jb5WJb5ct6ha69u6Z/7sYSq50UCzLwbbUuWRfDZpGc+q5qpujeL/nCwsf+4OZfSk
78X0wg6UMEdYKZFuA4K2LrkneF/Jla+vlvHy19lRZi2oMLYgt1E7bxpxJPp9krGY
balWTUFl+qwQdPSwN/kyz4VVEkCevMDZ3ivrTbb4JFZkfhNwkkk4VagP7QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPLjMCj6lBl4NpzjF0In9oYfVvNlMB8GA1UdIwQY
MBaAFPkVWI74BUaJKMY9qwhjAIXl0I9lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SVllqdmdGUm9rb3hqMnJDR01BaGVYUWoyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAx
LWJjODI3N2U3NWUwYy8xLzEtUlZZanZnRlJva294ajJyQ0dNQWhlWFFqMlUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzdiOTIyNC1hYmYxLTRjYTMtYjAwMS1iYzgyNzdlNzVl
MGMvMS8xLVJWWWp2Z0ZSb2tveGoyckNHTUFoZVhRajJVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4zv
qqPvJD5KMAHlAoK3ZSpMVdJAXZGUgbZ84etVCsHp0obwO9kZEAhcorRvX0NU4BG9
fA3QxD+GrKLcoyCuknmvQLOPbW5BDGRfmca4Qzfk5I4Wk9o7i6eysAf4RGoaHUuX
x2UV5KOt5rJhFeP6O6WCfJwyvHqbkIklO2nXQP7GuFbKUEj5/xA8KWtOET6Oy1Y7
x5sFBq0Ail64OobX1QbXbDLS7x2nLvuk9DfGNNacntW+H4SdZD/goBZ5ETNFWLwO
V1SBt1cwzPP5glUvPWb/neyUfpRM4B5SP+ZoKWedsmlh19Slcbz1bvxCi+E51weq
8p02rEA+W2DcomFOjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 06:15:11 2026 by rpki-client