Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: tdTgUk1ss7rWpu+zbfDqI0+QJo686w3fyKNY4dCpemY=
Subject key identifier: A3:6C:0F:A9:A6:30:05:F6:CC:2B:7D:FF:F1:44:19:CF:D7:FF:C1:1F
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 01A1DDCC2DAF93963BC684114AAFC916D7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 135F
Signing time: Sun 15 Nov 2026 06:01:47 +0000
Manifest this update: Sun 15 Nov 2026 06:01:47 +0000
Manifest next update: Mon 16 Nov 2026 06:01:47 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: hM7GmC8KQx6fjyTKCxYsofCra7MTirf0HjnIi2jKjS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:2d:af:93:96:3b:c6:84:11:4a:af:c9:16:d7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Nov 15 06:01:47 2026 GMT
Not After : Nov 16 06:01:47 2026 GMT
Subject: CN=a36c0fa9a63005f6cc2b7dfff14419cfd7ffc11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:23:67:63:10:61:0e:c7:b7:f6:07:5c:62:
0f:dc:a6:83:a7:49:56:a1:7e:47:c7:0d:f6:ff:cc:
1a:4d:dc:2d:2f:a5:59:56:f7:c4:23:82:4a:c0:a6:
9f:fc:2f:9d:86:6e:c3:07:f4:a3:8a:67:ca:94:9e:
af:f8:8f:0c:43:ca:80:a5:89:dd:59:20:c1:8b:14:
3c:9f:19:9b:b0:99:b3:2e:ab:c1:22:f1:ec:3c:9a:
9e:d1:88:ba:62:e5:96:92:63:8c:c4:e3:d6:14:f5:
ea:a8:cd:d1:b1:df:ec:58:79:67:87:36:96:22:5a:
08:72:5b:0b:7b:35:57:af:36:72:78:fa:2b:d7:b9:
cd:e2:23:1d:91:ca:a7:60:64:4d:a6:ec:7f:7f:b8:
f6:10:73:6d:12:3e:9b:90:f1:66:1c:08:e8:16:0c:
c1:35:9e:79:8f:82:f6:8f:4b:d4:57:dd:bd:4a:1d:
2b:2b:e9:8e:9d:56:73:34:c6:2c:38:da:36:f6:93:
77:d9:bf:45:9b:3b:9f:59:ca:02:2a:a3:ce:b5:07:
eb:8d:1c:cd:89:f4:6f:ef:4e:66:8f:15:f4:43:fb:
c5:92:59:76:aa:55:6d:78:b0:ca:bb:dd:d2:7d:75:
7d:ef:5c:d2:ee:41:bb:9e:94:be:e1:66:aa:25:2b:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6C:0F:A9:A6:30:05:F6:CC:2B:7D:FF:F1:44:19:CF:D7:FF:C1:1F
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3b:8e:c7:a0:30:c0:af:da:9d:4f:c4:56:62:b8:16:85:db:
6c:89:4e:18:49:e1:05:82:1d:49:93:38:c2:75:bf:af:7a:ab:
fc:fb:30:63:51:77:bc:43:22:af:b7:d9:ee:e8:80:c1:ef:d7:
b5:53:45:53:e5:c9:a0:af:69:9f:0f:b1:c8:96:29:97:69:55:
d2:95:09:b3:11:b8:55:05:e8:ff:90:e6:b7:e9:e5:fd:e3:5b:
ab:65:83:7d:4f:f1:d8:8c:d4:16:61:fe:8a:af:3d:10:f4:59:
1c:96:10:c7:98:f4:fc:2c:0f:cd:60:f8:b4:64:0e:44:eb:32:
a9:2f:2e:33:dd:c2:7b:84:50:7a:74:ee:88:27:75:ae:3d:79:
0e:7f:59:c0:9e:12:60:c5:3f:5e:fa:a0:76:c1:68:3c:2e:23:
89:47:e0:21:9c:8a:10:6f:fb:e2:d2:4e:e7:7b:f3:d7:59:01:
b9:28:29:4b:9a:8d:77:66:1f:99:a3:f6:5e:49:ca:7e:a6:f0:
0a:13:0b:a8:7a:f9:cd:cf:d4:0a:e8:49:9d:55:d2:63:8c:ce:
8e:4f:4d:40:a3:3b:3c:63:74:dc:a0:3e:25:fd:e6:56:b5:9e:
43:a1:59:8a:a7:cc:0c:05:f2:28:f5:df:79:e5:f2:6d:0f:44:
f6:c4:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:30 2026 by rpki-client