Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: Lip15lQJNaYktCAiakYrgjNIlLHdRAFaA0Js6ULW7m0=
Subject key identifier: 3B:88:8E:72:22:51:A2:3C:E2:DE:E2:2A:9E:F7:91:0D:2E:5D:BD:43
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 01A1DFF1985D55DA33457995A9795D35BC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 101B
Signing time: Sun 15 Nov 2026 16:01:54 +0000
Manifest this update: Sun 15 Nov 2026 16:01:54 +0000
Manifest next update: Mon 16 Nov 2026 16:01:54 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: nE1j+3X2nuQNJGHhd1RfHpC9OEXOudcB6MDRSBKv45M=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:98:5d:55:da:33:45:79:95:a9:79:5d:35:bc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Nov 15 16:01:54 2026 GMT
Not After : Nov 16 16:01:54 2026 GMT
Subject: CN=3b888e722251a23ce2dee22a9ef7910d2e5dbd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:06:52:87:f5:4e:29:ce:36:ef:eb:e0:8c:
69:80:88:0e:62:6b:f3:43:78:a1:ea:15:7f:b2:a0:
77:5e:98:12:74:97:70:cc:91:34:5b:02:cf:99:21:
77:a4:b4:f7:08:13:8e:cb:ee:df:8e:1d:0f:94:72:
b1:3a:1b:68:ae:01:ba:ca:20:72:ea:f5:f4:9a:45:
2d:4a:ba:31:94:95:93:8d:04:3a:37:e0:8c:1e:a9:
2c:6a:8c:7f:2b:f2:e6:87:99:c1:53:ca:9e:13:47:
3c:c3:a3:f5:a9:e6:77:54:71:9f:c7:86:d7:c6:79:
3b:b9:9c:80:7d:00:d3:66:2d:cc:64:e8:04:d9:f1:
71:40:44:45:55:9f:87:c1:03:1e:ff:a9:80:7b:67:
79:55:ab:ca:d1:b9:5e:66:12:04:5d:e1:fb:d2:4b:
78:fe:ec:ec:1e:27:6f:25:2c:f0:4b:02:b1:29:cc:
c6:f3:40:00:2f:98:9d:59:09:ad:d8:e8:87:15:b7:
a8:2d:d5:e8:7e:6e:fb:18:16:c1:ef:69:61:fa:45:
da:32:28:14:91:63:d1:f2:b6:b2:96:37:a2:86:26:
1e:7c:03:e1:3a:8a:6c:57:6d:56:55:da:d5:fb:29:
2e:6a:27:0f:f5:a6:9c:39:06:03:a6:d5:ca:66:67:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:8E:72:22:51:A2:3C:E2:DE:E2:2A:9E:F7:91:0D:2E:5D:BD:43
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:53:42:66:00:00:af:80:bb:d7:cc:c6:30:2e:40:fb:7d:ae:
5d:fe:01:2d:29:2e:af:24:82:5c:ef:62:9d:f5:8f:ee:9e:d8:
f0:fc:28:15:a0:39:bf:a5:d3:e7:d3:81:51:5e:8a:9f:99:6c:
89:12:6e:19:5d:6f:f9:93:74:ef:5a:82:fb:f4:3f:6e:2d:b5:
4a:7b:e7:36:8e:9b:e0:f1:da:94:56:89:67:2d:0f:b2:05:9e:
72:18:86:15:6a:bd:91:06:bf:ba:8b:e7:80:1e:ef:1b:e3:f7:
20:a6:5f:01:1c:c4:27:d6:46:34:6c:a5:44:3d:9b:66:6c:73:
25:04:26:ce:23:c6:94:99:5a:a8:e2:73:20:96:9b:9d:35:bf:
56:00:40:ed:30:b7:55:1b:16:8d:d7:88:81:1a:8d:00:0b:af:
78:80:aa:ca:44:4a:5c:69:e2:c3:6c:a9:d6:5f:cb:9f:7d:3a:
c8:cb:e0:96:f1:d1:ab:4d:69:c3:07:9e:86:d0:32:a0:43:d6:
58:5e:0d:e1:74:41:a4:22:fd:e3:55:a9:bc:b7:58:86:bc:d1:
b8:9f:dc:f7:f8:0f:d7:f7:75:ca:78:b0:46:c2:4e:f3:6c:b1:
4f:95:51:36:c3:d8:b7:d5:76:75:86:a1:c6:cc:13:2a:c7:5e:
17:41:9f:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8ZhdVdozRXmVqXldNbwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTY4Mjg3N2I2YzhhZjc1ZTI3NjBjZjg1NDBlNzg0NTJk
NGJlYzAwHhcNMjYxMTE1MTYwMTU0WhcNMjYxMTE2MTYwMTU0WjAzMTEwLwYDVQQD
EygzYjg4OGU3MjIyNTFhMjNjZTJkZWUyMmE5ZWY3OTEwZDJlNWRiZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre4GUof1TinONu/r4IxpgIgOYmvz
Q3ih6hV/sqB3XpgSdJdwzJE0WwLPmSF3pLT3CBOOy+7fjh0PlHKxOhtorgG6yiBy
6vX0mkUtSroxlJWTjQQ6N+CMHqksaox/K/Lmh5nBU8qeE0c8w6P1qeZ3VHGfx4bX
xnk7uZyAfQDTZi3MZOgE2fFxQERFVZ+HwQMe/6mAe2d5VavK0bleZhIEXeH70kt4
/uzsHidvJSzwSwKxKczG80AAL5idWQmt2OiHFbeoLdXofm77GBbB72lh+kXaMigU
kWPR8rayljeihiYefAPhOopsV21WVdrV+ykuaicP9aacOQYDptXKZme83QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuIjnIiUaI84t7iKp73kQ0uXb1DMB8GA1UdIwQY
MBaAFNIWgod7bIr3Xidgz4VA54RS1L7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEt
ZGU5NzEyYzZlN2M3LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEtZGU5NzEyYzZlN2M3
LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1NCZgAA
r4C718zGMC5A+32uXf4BLSkurySCXO9infWP7p7Y8PwoFaA5v6XT59OBUV6Kn5ls
iRJuGV1v+ZN071qC+/Q/bi21SnvnNo6b4PHalFaJZy0PsgWechiGFWq9kQa/uovn
gB7vG+P3IKZfARzEJ9ZGNGylRD2bZmxzJQQmziPGlJlaqOJzIJabnTW/VgBA7TC3
VRsWjdeIgRqNAAuveICqykRKXGniw2yp1l/Ln306yMvglvHRq01pwweehtAyoEPW
WF4N4XRBpCL941WpvLdYhrzRuJ/c9/gP1/d1yniwRsJO82yxT5VRNsPYt9V2dYah
xswTKsdeF0GfvA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:11:33 2026 by rpki-client