Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File: A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier: z2bCIlj1jyIspQMqzHSvp82tHY3zEyXtgm6fvhXqGv0=
Subject key identifier: DF:D0:4A:30:E6:32:A8:B3:66:5E:55:3D:60:90:64:77:5A:DC:CB:C9
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer: /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial: 01A1C2C1FE614AC16A953C1F9A23EC0541F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number: 14E3
Signing time: Tue 10 Nov 2026 00:00:55 +0000
Manifest this update: Tue 10 Nov 2026 00:00:55 +0000
Manifest next update: Wed 11 Nov 2026 00:00:55 +0000
Files and hashes: 1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: ZCED16liNPKJQg2eAMRYxN9EmyYOAb4pQs6qVlf5Rd0=)
2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:c1:fe:61:4a:c1:6a:95:3c:1f:9a:23:ec:05:41:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Validity
Not Before: Nov 10 00:00:55 2026 GMT
Not After : Nov 11 00:00:55 2026 GMT
Subject: CN=dfd04a30e632a8b3665e553d609064775adccbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:05:3b:f2:a5:f5:08:18:ca:19:25:72:47:
b0:1a:3b:34:72:76:89:8c:5e:35:0f:a5:cf:aa:b6:
95:71:81:ae:c6:36:7f:5b:5d:93:d7:a9:8f:c6:a1:
3c:ac:d5:3b:43:da:90:ce:51:ac:2b:20:62:36:74:
12:ff:e4:a4:4e:bf:db:c3:6f:fb:d7:2d:03:ad:a3:
0f:f6:00:76:d2:40:3c:ad:79:67:d8:db:d7:f9:d2:
00:5f:36:14:38:1e:40:ac:f5:94:16:bb:dd:8f:9f:
e2:7d:d7:2d:b2:c7:56:a8:ed:b8:89:59:58:a0:76:
a2:9f:10:20:c7:43:cb:e2:c5:bd:3d:e1:d6:f9:be:
44:35:ad:cd:5b:72:2c:ae:8a:50:9e:b8:54:07:3f:
36:e3:10:ec:c8:cc:31:ab:17:2c:1b:89:2d:7d:ba:
e2:79:d5:db:1e:13:b7:71:aa:85:9f:f4:44:9d:bb:
9d:e3:52:13:9f:04:49:70:ee:88:c3:36:60:66:e1:
3d:60:50:b0:53:aa:34:e9:af:0f:01:ba:51:f9:b0:
d0:0d:88:0d:9f:5f:bc:92:6b:47:a2:1f:03:22:44:
36:2d:d9:24:dd:71:ba:a8:dc:e2:3b:d7:11:f0:ec:
63:79:34:e6:51:15:c1:fe:b2:d7:7e:c5:a6:ef:89:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:4A:30:E6:32:A8:B3:66:5E:55:3D:60:90:64:77:5A:DC:CB:C9
X509v3 Authority Key Identifier:
keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:78:ba:8d:ec:c0:d5:48:d1:2c:92:c7:7e:a4:48:e8:20:b0:
c8:46:b4:ef:08:de:68:67:73:0f:19:2d:80:30:b8:47:68:f6:
b9:e4:58:96:6b:34:ae:08:49:db:62:15:c2:78:9d:d5:36:b3:
9b:90:28:85:24:96:55:06:53:31:6a:15:10:6d:a0:96:44:80:
4b:af:95:f3:12:5e:7e:1d:00:15:bd:d0:d2:b3:ba:d1:5e:7e:
d7:59:75:53:89:7b:d1:1d:5a:7a:d1:a2:1c:fb:14:62:59:49:
b1:63:5e:d2:a4:26:42:8e:d2:16:f7:a0:b2:a3:94:04:54:32:
60:f4:7b:63:c5:09:74:26:c9:2e:db:5a:00:2d:ff:38:51:fa:
e7:ef:b1:bd:0e:13:22:c3:0b:4f:11:fb:7f:3d:8d:fb:fe:9f:
b0:33:a1:e0:ee:28:8f:d8:94:7e:c1:db:f3:5b:c8:cc:e1:33:
35:84:35:eb:5a:59:84:00:72:2c:f1:eb:ac:1d:21:b5:cb:6d:
60:5e:f0:84:23:34:39:b4:da:4c:ef:26:93:ba:84:21:f8:62:
a3:9a:5f:0d:6a:78:68:7f:15:4c:cb:03:8b:aa:b6:fc:22:85:
6f:8c:73:f7:8d:12:cf:3c:d5:be:42:ec:53:26:da:ba:fb:dc:
e7:af:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:31:13 2026 by rpki-client