Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File: 81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier: ZGm4izHYu+HQlWhhLGIIGzNYoTBXz3xRB319rUx2kjI=
Subject key identifier: A3:E3:F7:B5:6C:12:94:D4:A5:46:CA:24:FE:B5:FA:DB:79:00:84:68
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial: 01A1C1E60F041FD44D648B3291988CAD40AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number: 1041
Signing time: Mon 09 Nov 2026 20:00:42 +0000
Manifest this update: Mon 09 Nov 2026 20:00:42 +0000
Manifest next update: Tue 10 Nov 2026 20:00:42 +0000
Files and hashes: 1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=)
2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: QkeO0jxI0uv1WbQ8KA59B4BRnGz9xetfWcud1DT1Lqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:e6:0f:04:1f:d4:4d:64:8b:32:91:98:8c:ad:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Validity
Not Before: Nov 9 20:00:42 2026 GMT
Not After : Nov 10 20:00:42 2026 GMT
Subject: CN=a3e3f7b56c1294d4a546ca24feb5fadb79008468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:76:2e:c2:07:ca:43:cb:69:16:02:cd:05:
25:13:95:9b:fb:6c:c2:d3:c1:fe:73:87:80:58:6c:
94:ac:73:3d:a6:5f:07:68:3f:3b:61:3b:75:7e:93:
5a:e4:8d:dc:85:2b:c6:e6:b3:f5:f4:95:3b:32:d1:
60:18:6c:5b:fc:b7:71:6b:0e:22:04:2a:3e:a5:4f:
42:fa:93:fe:7e:61:59:d1:f3:f4:66:42:bc:d3:48:
80:9b:0d:aa:f9:58:49:d5:02:91:30:fb:bd:0e:c1:
3c:5a:d9:64:86:9a:7e:99:36:d7:34:a1:e3:4f:e0:
4c:31:17:64:87:bb:65:33:00:c3:67:26:f6:0c:bb:
e8:80:f1:27:f6:c4:2f:fa:49:b3:62:ae:49:35:6c:
0d:71:db:a0:79:2a:90:07:46:00:f8:22:22:62:c6:
ec:64:5d:9c:41:e6:5b:41:b8:e7:0a:03:ca:63:b0:
99:33:3e:67:1b:22:21:4f:8f:92:e2:e7:7a:97:91:
65:e1:f5:8d:d4:fe:0b:b7:5a:3e:03:ac:ac:06:0b:
97:71:45:49:7b:d9:f2:83:14:07:33:cf:29:bf:9e:
af:d5:61:e4:da:b8:21:7a:1f:c6:87:13:e0:36:32:
a2:2d:ca:c4:b5:03:83:6b:cc:f4:74:90:29:68:94:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:F7:B5:6C:12:94:D4:A5:46:CA:24:FE:B5:FA:DB:79:00:84:68
X509v3 Authority Key Identifier:
keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3b:30:0f:63:c7:9e:c9:4f:5f:8c:c8:3a:7e:23:d5:87:c2:
90:1c:0a:75:05:4f:43:5c:30:a1:65:d9:70:3f:37:e8:2c:14:
a8:95:88:06:86:0f:2e:b2:0e:6e:28:9d:ae:52:1a:3c:f8:f8:
fb:07:ba:e9:26:27:a1:e7:10:bd:0f:80:84:43:cf:b1:a8:d8:
15:b4:2d:7d:d1:c4:9b:e3:a7:c2:a6:6f:c2:33:86:b4:a5:09:
c6:ce:b7:35:6d:3b:97:f6:44:dc:17:d3:d8:d9:d2:d8:23:1f:
e1:d8:75:eb:60:f0:36:54:11:54:42:02:d8:3a:92:99:76:f4:
dc:e2:61:69:ac:d7:2e:44:15:b1:90:d8:af:8e:30:77:07:9b:
f7:69:8a:27:90:53:24:0a:69:b8:eb:34:df:bc:b5:3d:1b:41:
b3:04:1b:f5:bd:cd:93:85:b8:15:04:7a:62:c0:9e:e5:dc:3d:
c5:1f:26:7a:9a:ec:f6:1a:05:80:39:0e:d9:dd:39:43:63:61:
79:3b:3e:9b:31:64:4c:ec:58:1e:e0:2b:7a:bb:f8:fa:20:b0:
59:e3:5e:03:1a:af:47:65:b7:75:67:6c:d7:9a:47:75:73:78:
13:59:27:76:c3:3a:b3:61:48:7e:47:cd:2c:35:31:12:e2:a9:
29:0a:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:03:02 2026 by rpki-client