Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: hMLovqfxz35oDj6P5nHIGTnCCRhd6moqMYPLY26NLak=
Subject key identifier: 66:F8:83:7F:D8:C6:34:07:B6:8B:2E:B6:BC:28:CA:1F:5C:CE:3E:C4
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 01A1C74498305993278C7301E91951A406DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 0D41
Signing time: Tue 10 Nov 2026 21:02:03 +0000
Manifest this update: Tue 10 Nov 2026 21:02:03 +0000
Manifest next update: Wed 11 Nov 2026 21:02:03 +0000
Files and hashes: 1: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: 8J8hYq3hqWY9RWW5lY+lDkYIeAnhyIQ7/E9kyWvapJ8=)
2: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (hash: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c7:44:98:30:59:93:27:8c:73:01:e9:19:51:a4:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Nov 10 21:02:03 2026 GMT
Not After : Nov 11 21:02:03 2026 GMT
Subject: CN=66f8837fd8c63407b68b2eb6bc28ca1f5cce3ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:77:14:7f:fd:94:9e:86:85:9f:1f:96:9e:
6b:36:f4:8f:02:03:6e:49:a5:f1:21:be:d3:1c:1d:
e2:66:9b:83:cc:d7:3d:57:10:3a:c1:67:72:40:a1:
c3:03:de:1e:95:58:0e:0d:74:63:3e:f1:33:45:40:
c8:68:3e:40:79:ae:14:60:84:78:33:e4:fb:10:86:
4c:7c:78:08:4e:3b:83:53:e0:8a:df:df:69:80:39:
49:29:63:e9:7d:09:0f:eb:e0:d0:7c:4e:66:6f:88:
d4:36:6c:ef:f7:d6:2c:7f:a1:56:d9:4f:f8:02:0f:
f6:25:0b:6d:93:71:fc:73:a3:65:55:8b:ca:40:c1:
3c:24:37:8b:15:da:91:fd:09:e9:2d:04:59:82:10:
5c:33:4b:69:c0:1d:e8:1f:2e:6f:14:23:64:0d:08:
d3:db:32:15:0f:fb:af:b7:bb:7c:4c:7d:4c:34:46:
c9:3a:64:da:01:b4:b4:22:09:64:8d:fd:d3:15:a4:
70:a5:f3:ac:f8:be:6d:e4:b4:53:82:f7:46:5f:c3:
93:be:87:68:51:49:07:a9:1f:bc:ca:35:ce:68:bf:
97:4f:87:6e:c0:4a:ea:37:d9:a4:bf:9a:a6:56:73:
56:96:bf:24:26:a1:02:4c:19:9f:a7:59:da:60:4b:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F8:83:7F:D8:C6:34:07:B6:8B:2E:B6:BC:28:CA:1F:5C:CE:3E:C4
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a0:9d:47:85:ee:52:82:19:61:88:53:b3:4a:07:8e:18:38:
7c:21:f2:ac:c0:df:05:fa:f2:73:40:58:55:9b:7b:23:db:25:
7a:2e:74:a8:9b:8a:5a:00:a1:38:21:91:b8:8d:b6:ec:53:ab:
bc:8f:28:32:48:75:8a:e0:86:25:6e:b2:72:7d:ed:c7:ce:de:
19:b9:23:1e:17:39:b9:54:9a:e7:ce:b3:0c:1f:af:9c:77:40:
d2:a2:5c:7b:51:99:24:23:9d:07:e1:6f:0d:b8:9a:d4:07:a4:
39:3e:d1:5a:dd:1a:ab:b3:03:07:0f:ed:e3:3e:95:c6:c0:05:
48:ee:5f:74:c5:d8:74:4b:5a:f1:c6:64:0b:dc:44:6d:db:41:
58:3b:90:c6:ac:4d:ef:00:cb:54:c2:29:d4:47:8f:f4:45:ab:
a8:ed:e1:35:0e:b9:b2:34:56:39:1c:53:90:7c:90:6c:36:07:
e9:32:ba:50:2e:b1:eb:31:e5:77:3d:72:af:85:54:d1:47:84:
32:c1:0d:9d:46:c0:6a:66:31:92:a2:83:61:ec:87:7f:65:75:
07:a8:61:b0:ab:e0:15:b5:d8:91:49:bb:d2:3f:1f:de:2d:f1:
1a:e8:d6:73:1b:b1:bd:0b:bc:fd:d6:fe:e8:9c:3d:ef:c1:55:
a7:db:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 03:45:59 2026 by rpki-client