Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: KKdePrYjPh2W5r9C1g7B50MiV2bDxW9RnFLx0lZeqGU=
Subject key identifier: 80:09:65:24:7C:7B:77:49:9C:73:38:13:4D:32:C4:0D:67:9B:AD:CD
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 01A1DFBA318C461CB67D2FE163588B658EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 15:01:23 +0000
Manifest this update: Sun 15 Nov 2026 15:01:23 +0000
Manifest next update: Mon 16 Nov 2026 15:01:23 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: CL4ZeZk1a3es5d8XQFj9JRupwiKkIR2SEd6hMsGeznU=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:31:8c:46:1c:b6:7d:2f:e1:63:58:8b:65:8e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Nov 15 15:01:23 2026 GMT
Not After : Nov 16 15:01:23 2026 GMT
Subject: CN=800965247c7b77499c7338134d32c40d679badcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:1c:91:c7:a8:2d:4c:0d:01:fd:75:00:fd:
c6:8b:91:48:32:25:46:5b:08:f9:66:97:61:8f:b8:
c1:74:0a:72:27:2b:cb:32:ab:75:36:0d:25:68:68:
b4:cc:0b:d5:8c:ea:50:b7:24:13:e8:27:5e:2e:c7:
0a:56:92:9f:b9:f7:0d:5c:61:c3:4a:d7:8b:c7:f0:
14:16:9f:4e:60:5f:ef:32:a7:7d:84:11:a7:bc:97:
72:6d:51:9a:4c:92:16:c8:60:60:df:9d:b5:78:c4:
4e:c7:62:c5:bc:8c:16:56:b6:ad:3e:7c:e0:ae:81:
f7:e9:c0:78:4b:ca:6d:a8:15:b4:62:df:bf:38:99:
65:23:eb:d7:23:a3:ec:c5:fb:c9:5f:5a:f3:77:3b:
45:e7:00:3a:e4:7b:72:63:30:82:5f:34:7a:d1:50:
31:34:10:af:a8:84:80:e3:7a:02:65:7f:da:a2:46:
89:1e:bd:be:c6:20:a6:11:f8:47:d7:24:d1:2b:96:
fb:7f:28:ce:bb:60:d4:ad:24:33:38:63:da:9c:27:
e3:7a:05:c7:c6:fb:ce:3f:d7:36:3d:f6:3d:81:cc:
a1:25:e5:36:fd:51:49:d7:d2:f3:98:45:46:24:5f:
17:fc:9e:b8:9e:e7:3e:0f:75:ff:2d:9e:e9:27:a1:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:65:24:7C:7B:77:49:9C:73:38:13:4D:32:C4:0D:67:9B:AD:CD
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ab:f3:3d:8f:59:a8:fe:eb:65:02:df:f4:eb:a3:a0:64:1f:
7b:df:1e:99:a0:6b:18:d7:10:16:96:46:c3:08:2c:27:f2:90:
88:62:af:83:c5:7c:ec:b4:e9:46:33:64:b7:80:36:14:1c:8f:
a6:ff:ed:20:f7:b7:61:82:f5:08:6d:0f:7c:dc:6f:f2:7a:a2:
4a:56:aa:fc:88:fb:e4:92:a8:8f:27:db:2b:df:00:2f:eb:99:
6c:62:cc:95:f1:9b:0c:d6:75:bb:dd:09:9c:28:91:64:77:c5:
01:47:55:09:6f:23:62:91:41:80:12:44:69:b9:71:5d:23:08:
19:11:5f:56:01:13:d1:57:8b:33:7e:42:ba:46:70:08:65:ac:
ec:64:ea:a6:4b:92:db:35:3d:19:61:07:9b:d1:c4:b1:8a:a7:
68:12:1e:93:d2:64:18:b1:5f:36:02:ee:a1:ec:83:c3:6b:a2:
1c:38:39:6c:c5:9a:83:7f:94:7d:5d:24:a4:a1:20:93:43:3c:
1a:47:01:e5:ca:3c:bc:4c:1a:a7:16:30:1c:a2:25:fe:21:79:
54:80:65:fb:cb:c6:bf:8a:cb:31:a1:44:d8:a7:7f:35:49:4e:
c0:da:89:ef:9d:56:c6:3e:98:dc:5e:82:7d:b2:02:4d:43:be:
f1:ff:8d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:11:03 2026 by rpki-client