Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: XO7mDEw9OEe1Lwz3AVzu3mYXRUvsdLrUoAIweI8fpgc=
Subject key identifier: D0:DA:38:4C:8B:26:19:FC:8A:91:E0:28:E5:FB:51:48:15:E0:7F:8C
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 01A1DFF15FB49FAA357B70A7310216A53C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 16:01:40 +0000
Manifest this update: Sun 15 Nov 2026 16:01:40 +0000
Manifest next update: Mon 16 Nov 2026 16:01:40 +0000
Files and hashes: 1: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: wADJpKAbMWZEvH+6kBY91Z1Reh+enBwBD2kqVA3vuYM=)
2: lBKb95x_7BAv49LYfrO19Hosuas.roa (hash: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:5f:b4:9f:aa:35:7b:70:a7:31:02:16:a5:3c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Nov 15 16:01:40 2026 GMT
Not After : Nov 16 16:01:40 2026 GMT
Subject: CN=d0da384c8b2619fc8a91e028e5fb514815e07f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:fb:d8:32:9c:fb:b7:31:c4:cc:75:eb:e6:
f3:90:c7:4f:97:cc:63:19:3f:e2:9f:24:a6:d0:bf:
e6:3b:1b:33:fe:da:17:3d:36:cf:89:3f:b7:21:fa:
1a:9e:88:3b:c5:fa:3d:59:d0:4e:ef:60:f5:8a:38:
ec:43:30:ff:07:4b:25:8f:69:3e:7c:90:bb:b6:0b:
01:57:62:d7:79:64:b1:8a:05:50:3f:1e:57:74:7d:
ce:a5:2a:7f:7b:9b:b1:ed:8d:c5:3a:1b:c9:b8:ac:
95:89:66:d8:51:9f:1c:67:18:5e:34:ae:3d:e6:7b:
ee:29:0d:11:e6:94:1a:4d:ce:d6:16:f6:bc:2a:10:
52:d2:90:62:5b:fc:28:cd:c9:15:02:49:aa:2e:96:
47:2d:15:ef:32:80:30:80:48:09:74:9f:8b:26:79:
27:ff:00:9c:3d:97:a9:58:7d:06:b9:2d:9b:7b:d5:
f3:c7:9f:3e:7c:f0:85:29:e4:e0:8b:7c:16:bd:80:
c1:b0:07:41:78:b3:95:fa:25:18:ba:7a:07:7f:b6:
ad:94:ef:8e:3a:aa:4e:16:c5:3d:33:74:f0:73:68:
51:85:d6:c5:a8:8e:5d:ef:cd:94:2a:4d:77:48:0c:
a8:90:5a:13:8b:df:a1:12:79:33:9a:e4:9d:e3:b7:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DA:38:4C:8B:26:19:FC:8A:91:E0:28:E5:FB:51:48:15:E0:7F:8C
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:01:2e:82:11:ab:32:29:01:f0:82:47:c9:fd:dc:c0:07:98:
63:2e:26:cf:08:35:32:9e:12:7b:ec:f0:fb:6f:f8:d3:6f:58:
00:dd:f3:44:48:b1:8d:48:77:53:b7:76:1e:9f:ef:9b:37:b5:
b8:21:e5:e2:50:fb:75:e6:71:f5:fc:9a:13:d2:fc:01:fa:a6:
7a:f2:8a:40:97:7e:08:4b:06:39:5d:7c:95:92:32:4b:bb:92:
ec:6b:57:22:e8:f9:ba:4d:d5:e6:f9:81:8b:c6:5e:60:89:08:
c7:29:62:2c:b1:ac:73:c4:59:8e:ee:70:98:8e:c5:3b:20:17:
d2:23:53:1f:df:7d:a5:b9:ab:3e:0a:31:53:05:f6:fc:8b:2f:
e6:43:78:42:af:bc:2c:76:7f:fb:33:bf:3b:c8:2f:0c:09:54:
ab:b2:c4:28:51:2c:37:6c:8e:3e:e2:e4:90:d2:a1:79:10:b4:
c9:b5:55:6f:5c:b4:57:21:6f:d2:66:25:2e:a6:86:0a:c7:47:
5a:5d:11:cc:15:f3:91:5e:53:a1:49:5b:06:ba:33:d5:c0:3d:
ae:79:a8:27:f4:ab:c6:86:eb:4c:57:0d:7a:39:8f:b5:f4:71:
a8:f7:b5:25:92:49:7c:17:1c:50:9d:5c:50:c3:20:a1:bb:1d:
d9:7e:f3:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8V+0n6o1e3CnMQIWpTwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZGQ2MWJhY2Y2NTRlNjY1ZDkxMmE3NmRlOGY2M2I1MDA0
YzdlNDgwHhcNMjYxMTE1MTYwMTQwWhcNMjYxMTE2MTYwMTQwWjAzMTEwLwYDVQQD
EyhkMGRhMzg0YzhiMjYxOWZjOGE5MWUwMjhlNWZiNTE0ODE1ZTA3ZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJn72DKc+7cxxMx16+bzkMdPl8xj
GT/inySm0L/mOxsz/toXPTbPiT+3Ifoanog7xfo9WdBO72D1ijjsQzD/B0slj2k+
fJC7tgsBV2LXeWSxigVQPx5XdH3OpSp/e5ux7Y3FOhvJuKyViWbYUZ8cZxheNK49
5nvuKQ0R5pQaTc7WFva8KhBS0pBiW/wozckVAkmqLpZHLRXvMoAwgEgJdJ+LJnkn
/wCcPZepWH0GuS2be9Xzx58+fPCFKeTgi3wWvYDBsAdBeLOV+iUYunoHf7atlO+O
OqpOFsU9M3Twc2hRhdbFqI5d782UKk13SAyokFoTi9+hEnkzmuSd47dRfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDaOEyLJhn8ipHgKOX7UUgV4H+MMB8GA1UdIwQY
MBaAFO3dYbrPZU5mXZEqdt6PY7UATH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEt
NzI2NmFmYzk4ZGJhLzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEtNzI2NmFmYzk4ZGJh
LzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgEughGr
MikB8IJHyf3cwAeYYy4mzwg1Mp4Se+zw+2/4029YAN3zREixjUh3U7d2Hp/vmze1
uCHl4lD7deZx9fyaE9L8AfqmevKKQJd+CEsGOV18lZIyS7uS7GtXIuj5uk3V5vmB
i8ZeYIkIxyliLLGsc8RZju5wmI7FOyAX0iNTH999pbmrPgoxUwX2/Isv5kN4Qq+8
LHZ/+zO/O8gvDAlUq7LEKFEsN2yOPuLkkNKheRC0ybVVb1y0VyFv0mYlLqaGCsdH
Wl0RzBXzkV5ToUlbBroz1cA9rnmoJ/SrxobrTFcNejmPtfRxqPe1JZJJfBccUJ1c
UMMgobsd2X7zUA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:39 2026 by rpki-client