Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: GyoT2UmTEZ9Eh+0BlJcpXgHc6Xwa8JCZMJ22tZD0jNM=
Subject key identifier: CF:88:2F:D8:C2:37:47:48:8E:F8:9F:31:56:BF:20:A1:1C:0B:48:FA
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 01A1DD26E77463C70EB96404D9BFA2D3EDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0AB8
Signing time: Sun 15 Nov 2026 03:01:16 +0000
Manifest this update: Sun 15 Nov 2026 03:01:16 +0000
Manifest next update: Mon 16 Nov 2026 03:01:16 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: WwXcdd7hErvnSWeN/dBXVdc6juaKMe/gqAR4KIHCuFs=)
2: KY98OK9jKpqbO2GmZe7Es_X3AuY.roa (hash: cBxNonBZQsdFtI0G+UJX4+MOa5fw7YrWs9H/ZAWUf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:e7:74:63:c7:0e:b9:64:04:d9:bf:a2:d3:ed:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Nov 15 03:01:16 2026 GMT
Not After : Nov 16 03:01:16 2026 GMT
Subject: CN=cf882fd8c23747488ef89f3156bf20a11c0b48fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:88:d6:23:04:5a:69:e0:bf:08:6a:2f:0e:
02:e3:8c:18:75:26:a7:a6:92:a9:ce:9a:99:3f:96:
21:af:f1:2d:af:f6:a2:a8:6a:90:8c:2d:96:8d:1b:
95:88:23:4a:6b:25:4b:ba:53:1a:2e:92:80:6e:6a:
6e:9c:ca:b0:f3:c0:a3:a6:58:1d:50:12:e9:e8:ae:
2b:b7:d2:ce:09:d2:ab:1c:e0:59:7f:8b:ac:08:9e:
be:df:32:f4:f8:1f:5a:11:54:58:45:da:d5:04:a5:
59:df:5c:22:4d:21:4c:fc:cf:17:7d:9f:27:d8:4a:
71:c5:8d:3a:80:f3:76:f6:8e:96:ee:02:d4:56:d0:
e6:4e:5d:b3:4a:8c:c0:b8:0c:77:95:0f:05:6b:c5:
00:25:89:0e:6a:12:02:32:c5:b8:71:f1:c8:78:28:
7e:b9:4f:9e:ba:a8:0b:39:94:bb:56:eb:29:c1:be:
b9:7c:83:ae:51:36:23:90:05:a1:89:59:8d:b8:02:
6a:f0:ac:71:e0:05:25:6d:de:e9:6f:9d:11:d1:e8:
ee:a8:5e:65:53:81:f5:05:f9:3b:07:ee:47:31:23:
19:7c:66:f4:33:44:5b:6e:ee:46:78:6d:e2:19:01:
cb:cc:66:72:2f:8b:00:46:2c:76:2a:81:af:97:a5:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:2F:D8:C2:37:47:48:8E:F8:9F:31:56:BF:20:A1:1C:0B:48:FA
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:54:0a:5e:b4:ab:f5:ad:2c:b8:c3:4f:0e:de:27:f7:f0:5e:
81:66:db:72:77:d9:70:e7:ac:49:a7:1d:eb:20:71:9d:b4:d2:
0f:d0:55:d3:a5:31:19:36:6b:3b:64:a6:24:71:42:83:be:26:
ed:91:2a:a8:0c:d3:8d:21:51:6b:ce:51:dc:b4:4e:5d:26:d4:
75:e9:47:31:92:a6:3a:d1:8e:5a:56:3e:18:a2:77:c3:4f:fe:
9e:89:44:9d:72:19:54:ce:5f:d3:22:4f:59:d5:c8:4a:60:cb:
7f:b4:dd:d8:9e:b6:ad:d4:89:4e:91:98:a0:2d:03:5d:63:68:
f0:f2:e5:40:7d:72:a7:76:d9:0e:28:21:20:43:50:d4:5b:bf:
f5:ff:b4:44:a8:7d:ee:bd:79:3b:9a:0c:2f:d5:87:c4:a7:9e:
00:78:c5:f0:52:73:d7:46:3b:72:92:d1:2a:a9:d3:20:ed:91:
a8:29:82:3c:ac:63:b3:95:de:2a:d1:94:b6:ed:93:1a:61:86:
09:5e:d5:7a:60:0d:b7:2a:b6:e5:30:d6:57:db:5c:31:8d:2b:
6b:af:94:6c:4c:3d:f6:45:d6:79:3c:d4:fa:c1:42:38:d0:65:
1f:70:e4:15:24:36:5a:fa:4d:8b:0e:0a:e8:ad:8b:5e:f6:b4:
42:f8:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:25 2026 by rpki-client