Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: 5MpqsmeYvi8aSVPNRhRskPnM7Y/ehufSFwVhoFvq/5U=
Subject key identifier: E7:20:0A:FF:24:56:87:30:33:94:84:FC:7E:A6:26:39:CB:FC:33:61
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 01A1DEDEC454E3D4106124EA079054751F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0D46
Signing time: Sun 15 Nov 2026 11:01:43 +0000
Manifest this update: Sun 15 Nov 2026 11:01:43 +0000
Manifest next update: Mon 16 Nov 2026 11:01:43 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: iNQPh8N4zMq6/09f0Z601HAVgrJ4XRHXwuOptznHWs8=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:c4:54:e3:d4:10:61:24:ea:07:90:54:75:1f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Nov 15 11:01:43 2026 GMT
Not After : Nov 16 11:01:43 2026 GMT
Subject: CN=e7200aff24568730339484fc7ea62639cbfc3361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:9b:89:3b:68:e7:30:53:a3:60:37:86:f1:
e5:26:27:f9:77:f3:0e:38:49:64:53:02:e6:83:dd:
e5:9d:d8:40:ca:2f:1b:52:c8:1c:ba:6d:12:8c:8a:
66:8c:fa:c3:ff:a4:08:28:ef:8a:51:4f:46:f4:6b:
92:bf:90:05:d3:85:88:a6:95:9b:4e:a9:ab:c8:bd:
f8:44:4c:24:8a:6b:cf:af:dd:4a:5f:78:65:b5:a3:
39:56:d9:06:ad:9f:e2:c7:74:87:ce:87:6b:0b:9f:
25:67:20:5a:1e:2b:b5:44:e0:bc:6d:df:59:91:f8:
66:d9:33:37:86:d9:61:bb:e4:9f:ef:95:7f:01:82:
49:69:05:16:01:64:c2:41:bd:02:08:be:22:3d:c6:
7f:53:f6:8d:fe:6f:e4:1b:af:f5:ff:6b:9b:1a:83:
07:68:4c:47:04:f6:85:d9:73:b9:e3:28:65:6c:59:
42:02:3c:d0:1f:57:95:2a:c3:c0:cd:4b:00:35:69:
86:96:5c:41:81:5d:d0:ef:d6:12:40:9f:f9:65:0d:
fd:49:e2:ec:b9:fc:a9:95:2e:4e:5e:a0:49:7c:71:
1c:ea:56:28:a1:fa:ed:e9:51:a9:4b:ac:41:d4:6e:
33:d4:a4:6c:ab:2b:c7:f4:8f:55:fa:64:76:50:14:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:0A:FF:24:56:87:30:33:94:84:FC:7E:A6:26:39:CB:FC:33:61
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:90:48:0b:8a:21:16:f2:24:9d:0e:c7:86:dc:f8:ec:81:e8:
1d:65:c1:85:94:be:f4:61:44:b7:24:26:1f:ec:a7:91:ad:fa:
53:01:c6:6c:12:31:c0:19:70:af:6c:33:20:38:37:2a:18:ff:
a0:b1:c6:94:8e:26:6e:97:0a:3d:ae:47:ed:14:17:2e:70:4d:
b3:1d:06:ae:dc:a7:07:42:1d:db:73:72:e5:e4:ba:34:6c:c5:
7b:98:6b:f5:10:23:b9:7f:9a:d9:49:e5:52:bb:48:c0:b8:53:
9a:56:0a:0d:0d:12:10:5d:3d:0b:1b:e0:67:c4:62:3f:cb:fe:
95:dd:9a:82:06:e6:9d:e2:b0:e5:46:89:fc:17:4a:35:06:31:
33:23:da:75:10:7c:a5:32:46:a4:a3:40:90:45:32:32:a3:15:
e2:6c:3c:3c:de:77:55:ba:94:f4:c9:82:b0:ae:7e:62:8a:7a:
d9:d5:ae:fa:34:11:e0:57:08:e7:22:40:88:72:59:b3:31:75:
aa:a9:f6:c2:d1:e5:44:23:ad:48:b2:47:62:2f:22:57:88:5f:
ab:03:7f:f0:05:86:8d:88:da:8f:e6:83:a7:0d:17:62:8c:a4:
54:1d:fd:95:6f:96:5c:0c:c2:fd:69:b5:bf:e1:19:18:25:b2:
3e:27:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:18 2026 by rpki-client