Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier: IDsJCH651P7CS8EUl40KZZ8uk++JfaR/JrAd+7SyJDs=
Subject key identifier: DD:64:91:88:2F:C9:1B:C3:0D:1D:2F:B4:D4:F4:8B:3D:E7:C7:A1:27
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 01A1C6318934993093085A0804EB94572883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number: 0F4F
Signing time: Tue 10 Nov 2026 16:01:37 +0000
Manifest this update: Tue 10 Nov 2026 16:01:37 +0000
Manifest next update: Wed 11 Nov 2026 16:01:37 +0000
Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: wcrfZ/xV/sx/XSz9ryRaZUQbtJtLFPakdQNOvHKJeyw=)
2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:31:89:34:99:30:93:08:5a:08:04:eb:94:57:28:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Nov 10 16:01:37 2026 GMT
Not After : Nov 11 16:01:37 2026 GMT
Subject: CN=dd6491882fc91bc30d1d2fb4d4f48b3de7c7a127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:06:3d:d6:d3:eb:62:7d:ba:08:4a:46:e8:
bb:9e:52:85:8a:d1:30:af:f1:e0:83:6a:05:0f:f8:
97:9d:9a:ca:06:58:68:9a:11:9a:43:0d:a8:81:a8:
db:36:5d:e2:00:19:72:08:d1:d9:a0:19:7d:1c:10:
59:1e:9f:18:6b:ed:22:e7:5e:83:2b:f9:a2:7b:66:
dd:2b:f0:20:b9:3f:0d:8a:c2:d1:9a:8f:0c:26:d0:
1b:5d:6a:99:46:c2:f2:85:f0:0d:19:80:ed:11:fb:
86:3a:c2:4c:94:37:48:47:28:ff:c3:d3:ce:5b:c1:
a0:75:4d:45:9d:0f:d3:03:d0:3a:0d:a6:9a:54:b2:
a0:5d:40:30:37:1c:8e:52:67:32:3b:a1:f4:1b:3c:
8f:b3:cf:45:e7:a9:e4:3f:2c:3b:77:3f:21:73:5b:
83:87:28:4f:05:63:0f:87:47:f3:38:7b:7f:a4:a3:
02:1e:e4:6a:90:ad:ef:40:9f:d5:4d:10:cd:01:de:
79:b7:a6:9f:6c:74:01:46:6f:f1:7c:d3:42:ee:dd:
df:70:64:c0:7a:73:47:fb:c5:68:f4:07:f2:c8:37:
56:01:de:ee:ec:de:93:48:b0:23:13:25:f6:c1:17:
16:fb:3d:41:01:f9:e0:42:6e:53:15:b8:bd:30:07:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:91:88:2F:C9:1B:C3:0D:1D:2F:B4:D4:F4:8B:3D:E7:C7:A1:27
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e6:4d:ec:b6:af:9b:da:89:e7:a0:8b:95:a7:24:a4:60:15:
68:f0:62:61:9f:d1:ed:a9:1c:26:10:9e:66:e2:f5:cd:2e:56:
1d:58:23:88:5d:a0:06:5b:16:f6:0e:7b:c9:31:f3:c6:29:4d:
16:82:71:63:13:3a:13:d3:f1:1a:12:39:fc:22:2f:59:c4:4c:
10:aa:6d:29:67:74:75:5c:62:3e:0d:8a:cd:07:6b:bc:d4:fd:
b0:47:d9:c6:65:e9:4a:8c:32:ad:e1:83:5e:8c:9c:ac:4e:30:
b1:4c:fa:56:64:be:15:8e:40:52:00:6c:15:2a:ea:bc:69:bb:
3a:84:4c:a4:a1:1c:9c:61:35:97:87:28:66:f8:33:6c:74:79:
95:e3:53:31:c2:e9:57:71:e5:2b:63:80:8a:e0:23:c5:83:40:
80:26:89:eb:ee:aa:aa:fc:fd:aa:85:86:9a:b0:8d:5d:2d:c3:
7b:12:a3:0f:75:f0:02:80:90:04:4f:25:13:b4:6e:e3:cc:71:
65:dc:5b:26:38:17:60:10:fa:b8:04:34:04:86:a0:48:f2:e7:
f5:00:aa:55:b0:4b:8a:df:6d:5a:25:35:99:9b:26:3d:55:ea:
a6:f2:fa:fe:a0:f5:a9:d3:18:ba:17:26:11:62:26:85:8d:45:
e9:81:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:54:39 2026 by rpki-client