Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier: VeD9I1iEolFy/+aenYinzTxVm5SyJwdCL57eNpwrsPU=
Subject key identifier: BE:A0:EC:AD:08:6B:F9:3B:BE:A6:DC:84:DB:FA:FE:D8:FF:9E:7C:98
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 01A1C40B2EA94FBF24FF56AD89AA04FC3F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number: 12AE
Signing time: Tue 10 Nov 2026 06:00:29 +0000
Manifest this update: Tue 10 Nov 2026 06:00:29 +0000
Manifest next update: Wed 11 Nov 2026 06:00:29 +0000
Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: mnKT6zzMd/157UX02i36gC1d+3X0zavZ1W3LrGpJtJE=)
2: 8zWkLs5MayVp3_SzYbBPRAvFDTs.roa (hash: UellUSwtPKZmjJ1D+Fmg+BloHauGtQEDG+FE5/v9Mm8=)
3: OaKg-lG-pzNmRpP7SDCitTlZaNo.roa (hash: 5+9V4WRdjlkj5ldl1qKFN9pvoMnzM+PUFUtZ5jME0PE=)
4: wA-hfRcLQDeGt5CtIuqae7_R8vk.roa (hash: /Y6WA6ClXm7DeMMUhB/vYFyvxO+T8Bk+qE5LtkXuWg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:0b:2e:a9:4f:bf:24:ff:56:ad:89:aa:04:fc:3f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: Nov 10 06:00:29 2026 GMT
Not After : Nov 11 06:00:29 2026 GMT
Subject: CN=bea0ecad086bf93bbea6dc84dbfafed8ff9e7c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:3f:d7:9f:a7:3d:05:2a:1c:69:31:bd:32:
e5:d4:b5:de:46:38:70:5a:57:42:09:b9:91:ae:a2:
81:d3:27:67:15:96:69:5b:06:28:b3:a3:a7:23:a5:
95:37:85:04:d0:b2:8a:57:2d:1f:36:e4:50:26:cc:
22:4c:ca:56:c9:e3:47:09:ab:eb:9e:97:7f:a0:41:
81:e9:df:7e:74:27:2a:c9:d4:df:1e:a7:be:50:97:
02:5b:ac:d0:74:8b:b2:6f:9a:dd:a6:bf:74:9d:63:
e9:01:5e:23:0b:2c:a6:22:d3:bb:4f:c4:dd:f7:ef:
33:46:68:67:40:1e:c7:78:90:18:b7:57:f6:da:07:
3f:82:24:c5:f6:04:db:2c:91:8f:a6:d0:2e:67:d4:
9f:77:3f:35:49:fe:c7:12:88:14:1d:b6:bc:37:1b:
77:51:c4:cc:86:40:b4:04:d9:a0:5c:f1:83:01:1c:
32:21:1a:2c:88:68:f9:88:5a:56:39:3e:db:f4:4d:
e0:bd:44:99:22:08:3c:7c:a6:e3:e9:7d:03:c0:dd:
b8:a9:7c:04:34:5a:36:7e:ab:dd:4a:20:38:c5:52:
c6:30:00:e7:dd:f6:d6:01:eb:80:6c:f4:fd:4c:17:
6e:d0:16:96:9a:e3:bd:b9:a6:e7:4f:6a:f3:79:04:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:EC:AD:08:6B:F9:3B:BE:A6:DC:84:DB:FA:FE:D8:FF:9E:7C:98
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e3:82:ea:12:c1:ee:d0:c6:29:25:21:4a:20:ba:63:0e:98:
7d:02:90:55:86:49:e7:9c:9e:3e:7f:39:92:f9:b5:52:66:87:
de:4a:92:dc:75:33:5e:bc:f1:5e:a7:e2:f4:c9:35:9c:ca:1b:
ba:cc:38:d6:47:40:35:2f:1d:67:ee:a3:2d:64:c4:6f:ac:d8:
bb:5e:34:e4:51:17:01:30:b9:6f:f5:dc:d1:63:d3:32:94:c7:
14:1a:bd:3e:f2:e2:91:b1:56:ee:16:5c:b3:b6:7c:e1:16:44:
9b:e1:94:e3:fa:91:63:66:3c:e8:36:55:b2:57:bf:a9:ce:20:
12:83:8a:4e:9e:a4:b6:65:cf:9f:1d:c3:3a:fe:f4:53:fa:c7:
ad:91:af:5e:f2:bc:28:cc:7e:dd:5b:87:a4:60:e0:43:e2:44:
8a:70:a1:f2:34:62:7b:ec:52:c7:ca:db:37:88:65:20:c3:b9:
73:fd:ce:a0:c3:d2:8d:52:d6:7f:b4:88:f1:2c:b4:c5:73:9e:
16:26:54:e1:64:b2:6b:33:35:93:4c:4a:6b:55:43:cf:b9:88:
cd:44:e7:c0:1c:86:17:e1:94:73:ac:03:f0:aa:30:3e:5a:d1:
a7:3b:b2:1c:aa:f2:fa:4f:ad:fc:5c:8f:57:33:3c:4e:be:5f:
8e:32:28:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHECy6pT78k/1atiaoE/D8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1
ZThmNTgwHhcNMjYxMTEwMDYwMDI5WhcNMjYxMTExMDYwMDI5WjAzMTEwLwYDVQQD
EyhiZWEwZWNhZDA4NmJmOTNiYmVhNmRjODRkYmZhZmVkOGZmOWU3Yzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI8/15+nPQUqHGkxvTLl1LXeRjhw
WldCCbmRrqKB0ydnFZZpWwYos6OnI6WVN4UE0LKKVy0fNuRQJswiTMpWyeNHCavr
npd/oEGB6d9+dCcqydTfHqe+UJcCW6zQdIuyb5rdpr90nWPpAV4jCyymItO7T8Td
9+8zRmhnQB7HeJAYt1f22gc/giTF9gTbLJGPptAuZ9Sfdz81Sf7HEogUHba8Nxt3
UcTMhkC0BNmgXPGDARwyIRosiGj5iFpWOT7b9E3gvUSZIgg8fKbj6X0DwN24qXwE
NFo2fqvdSiA4xVLGMADn3fbWAeuAbPT9TBdu0BaWmuO9uabnT2rzeQRkwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6g7K0Ia/k7vqbchNv6/tj/nnyYMB8GA1UdIwQY
MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt
YjU5YzJhYzk1MWNiLzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi
LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceOC6hLB
7tDGKSUhSiC6Yw6YfQKQVYZJ55yePn85kvm1UmaH3kqS3HUzXrzxXqfi9Mk1nMob
usw41kdANS8dZ+6jLWTEb6zYu1405FEXATC5b/Xc0WPTMpTHFBq9PvLikbFW7hZc
s7Z84RZEm+GU4/qRY2Y86DZVsle/qc4gEoOKTp6ktmXPnx3DOv70U/rHrZGvXvK8
KMx+3VuHpGDgQ+JEinCh8jRie+xSx8rbN4hlIMO5c/3OoMPSjVLWf7SI8Sy0xXOe
FiZU4WSyazM1k0xKa1VDz7mIzUTnwByGF+GUc6wD8KowPlrRpzuyHKry+k+t/FyP
VzM8Tr5fjjIozw==
-----END CERTIFICATE-----
Generated at Tue Nov 10 10:50:15 2026 by rpki-client