Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: b9XNdhI6go1yoYYq9buD3rJMoP1hbInLxfJmX0gRW1Q=
Subject key identifier: 91:D9:7C:02:FE:A1:47:87:8E:4B:B0:85:52:AF:97:54:BA:31:23:C0
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 01A1DE399ED52E6200722416046E6896F421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0D40
Signing time: Sun 15 Nov 2026 08:01:20 +0000
Manifest this update: Sun 15 Nov 2026 08:01:20 +0000
Manifest next update: Mon 16 Nov 2026 08:01:20 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: DaZSt6EIjK/baKEqIBTtCACnKPeQd5TNC4Pm5+aoVsc=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:9e:d5:2e:62:00:72:24:16:04:6e:68:96:f4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Nov 15 08:01:20 2026 GMT
Not After : Nov 16 08:01:20 2026 GMT
Subject: CN=91d97c02fea147878e4bb08552af9754ba3123c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:c0:58:27:85:2f:7d:48:02:48:5a:c2:6d:
eb:81:27:95:65:6e:e2:77:64:b2:96:4a:c5:a2:b0:
90:54:5c:eb:b6:f7:03:2e:e8:8f:33:e0:b8:9b:06:
3f:bb:4f:6d:e2:f0:95:51:2f:86:7e:59:da:d9:d6:
e3:f3:03:63:0d:d6:43:b3:1d:47:f5:59:43:bf:1a:
5a:fe:ba:84:9c:a2:f3:a1:32:26:fd:aa:97:8c:21:
1a:77:66:9a:48:2e:0f:21:69:8d:39:be:d1:06:18:
3b:1c:1e:1d:1b:1a:00:dc:95:e1:55:37:65:15:b1:
3c:7a:ba:d8:1e:bf:2f:f0:d4:84:5c:7c:8a:18:c2:
75:9e:4b:1d:92:fc:c2:dc:4a:ce:02:dc:86:2b:62:
15:a6:7a:6a:24:0d:02:15:7e:d7:19:c9:92:35:79:
b4:9e:eb:54:80:72:14:5f:1e:07:3c:3f:fd:d0:28:
99:63:06:a2:c1:5c:d5:d1:3c:b3:b4:48:57:5b:f0:
09:f0:98:0c:8d:8a:a1:cb:bb:9c:1f:75:76:7f:29:
e7:2c:fb:09:ee:b3:c4:cd:1b:5f:aa:ba:56:f8:96:
6d:9d:65:05:5f:c7:82:8f:ba:05:35:b1:88:79:e5:
45:71:75:23:cc:c5:b9:06:de:83:05:57:d0:86:8a:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:7C:02:FE:A1:47:87:8E:4B:B0:85:52:AF:97:54:BA:31:23:C0
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:94:d7:f7:26:a6:7c:ca:95:c5:db:fd:ab:92:57:66:43:8d:
b3:e9:4d:cb:66:7b:e8:73:8f:6d:03:36:46:7d:64:40:4b:0c:
9b:05:c1:c5:5d:20:68:bf:0b:a2:c7:a1:41:c1:c4:cc:48:80:
81:5c:c3:7d:c6:cf:21:44:38:1c:32:a8:e3:c2:79:57:cd:84:
ea:28:ff:19:54:8b:15:e6:ed:95:31:fd:18:ec:2c:e2:4a:d6:
ce:2e:07:56:c1:af:bc:3e:b5:e7:98:8c:15:e6:de:93:d1:a1:
ba:0d:68:e0:eb:a1:39:70:b8:c3:83:3f:e1:93:00:5c:c9:3e:
e6:55:e9:99:3d:26:5c:e8:81:2c:1e:25:2b:52:96:65:33:05:
51:ac:71:f9:ad:9e:c8:8c:69:d9:bf:92:06:07:7e:cf:6a:05:
f2:81:01:1b:45:f2:13:25:48:8f:e9:be:eb:fd:28:e4:ea:e3:
82:47:a1:3e:23:1d:ea:f5:9d:50:1b:ca:cd:b6:78:fc:ba:4d:
04:1e:2d:91:a7:d5:22:58:d5:94:48:0c:2b:9a:f8:ba:a5:64:
c7:3d:d9:d8:c9:de:6d:be:c5:62:cf:72:f0:07:ec:a6:8b:96:
cd:a5:fa:30:0a:42:af:08:be:d7:f0:16:f4:f1:e8:50:6c:58:
e8:07:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:42:06 2026 by rpki-client