Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.mft
File: 0vQtOjWiTNF0V-4iGDJx05MQXW0.mft (raw, json)
Hash identifier: hDOrzBKujFBrgPd5p2ecdAxcMjxXPQzrt0c1QLFnyQw=
Subject key identifier: AC:AD:A1:DD:79:88:E4:D9:73:CB:61:20:04:09:90:04:D3:8E:3C:9B
Authority key identifier: D2:F4:2D:3A:35:A2:4C:D1:74:57:EE:22:18:32:71:D3:93:10:5D:6D
Certificate issuer: /CN=d2f42d3a35a24cd17457ee22183271d393105d6d
Certificate serial: 01A1A7F024330FE85362656F6AB59483238C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vQtOjWiTNF0V-4iGDJx05MQXW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.mft
Manifest number: 3B
Signing time: Wed 04 Nov 2026 19:01:35 +0000
Manifest this update: Wed 04 Nov 2026 19:01:35 +0000
Manifest next update: Thu 05 Nov 2026 19:01:35 +0000
Files and hashes: 1: 0vQtOjWiTNF0V-4iGDJx05MQXW0.crl (hash: w7I1pFYlt3OIQYxZvquzby3sC5GYJF+rxKHXUK842Xc=)
2: Dg3oN8bt8W-kvTdsLoc6IkgaWIk.asa (hash: JU3W51kSE9J44sxrCi2xiSPugUXCMQ5yS0NJxQjmzI0=)
3: w_yQbyKdiE94Mb72dKd-SbLSx2k.roa (hash: vGGx9ettkcYhX5Bp4/XEoGqQrwKQfoK/xf0et5bahxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vQtOjWiTNF0V-4iGDJx05MQXW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:f0:24:33:0f:e8:53:62:65:6f:6a:b5:94:83:23:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f42d3a35a24cd17457ee22183271d393105d6d
Validity
Not Before: Nov 4 19:01:35 2026 GMT
Not After : Nov 5 19:01:35 2026 GMT
Subject: CN=acada1dd7988e4d973cb612004099004d38e3c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:f8:d5:3c:62:2c:b6:c9:18:d9:a6:0d:3d:
6d:4f:d3:90:58:31:aa:f4:49:ff:f2:02:13:ed:c8:
1f:bc:76:05:e1:2d:2d:8b:23:f4:69:b4:8a:7b:fb:
ad:49:4e:05:f0:cc:75:35:a8:8c:3c:83:3e:1e:c0:
c5:32:ac:ea:b6:99:cc:49:54:8f:b4:87:38:90:69:
e9:bf:ae:db:76:30:96:6a:08:db:8b:e0:91:d6:03:
9a:bd:e1:0b:db:e1:53:40:bb:d5:03:0a:03:5d:66:
62:fc:ea:4f:c8:6f:e0:88:b7:d1:fa:43:5f:55:93:
f0:cb:8f:2a:7e:6b:bb:fd:bc:b0:a3:80:9f:8f:ad:
d7:45:80:d5:4f:01:96:78:18:3a:07:b8:93:88:6c:
dd:b7:42:69:27:e3:31:79:45:03:17:a2:21:20:b7:
58:39:bf:e2:f5:22:0e:22:2a:3e:52:05:2d:e6:0f:
97:9d:63:25:2d:a0:6d:d8:dd:c4:76:f8:58:15:9f:
8e:29:e2:78:c1:95:9f:97:4e:dd:80:2d:f8:60:c8:
78:a4:85:9b:df:ab:ee:fb:9f:29:ba:cb:ad:e7:da:
e8:0a:e5:dd:00:9f:fb:91:a2:1a:15:13:96:52:a7:
fa:90:73:77:98:c0:8b:8c:87:c0:e2:ab:b5:81:21:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:A1:DD:79:88:E4:D9:73:CB:61:20:04:09:90:04:D3:8E:3C:9B
X509v3 Authority Key Identifier:
keyid:D2:F4:2D:3A:35:A2:4C:D1:74:57:EE:22:18:32:71:D3:93:10:5D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vQtOjWiTNF0V-4iGDJx05MQXW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5846c2-6cd6-415a-8236-82eb8eaa9ef1/1/0vQtOjWiTNF0V-4iGDJx05MQXW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4c:1c:05:d4:c8:b2:fc:12:14:85:2f:7a:ae:49:2c:f7:c0:
22:1e:4d:e2:a6:20:5f:75:d0:57:d9:70:cd:e3:3c:d6:47:08:
a6:6a:89:83:21:43:77:b1:1a:a1:50:f4:5f:06:d8:60:15:23:
7c:ee:38:07:e6:ea:07:4e:79:8d:39:b4:7c:89:d8:ae:19:76:
99:1e:91:0a:b8:17:ca:00:16:0a:0d:90:ed:d4:cc:d4:71:a9:
bb:e3:0c:1d:29:3d:bd:f0:24:59:d0:f3:e0:b6:70:73:cb:ab:
e9:e0:c2:a3:0d:d7:4c:e7:c0:23:6a:df:71:83:62:f7:70:30:
50:00:60:68:8c:5f:fd:45:67:90:73:80:55:ba:3d:b6:ec:4b:
96:2a:85:d1:c8:df:16:3c:8a:72:2d:b8:ee:36:39:15:99:85:
56:a0:6b:9d:d4:f3:24:2f:80:4e:45:d5:60:15:0c:32:59:e3:
e1:a4:b6:54:cf:3e:ab:b0:1a:f8:9e:4f:c5:97:a4:b7:4a:94:
ac:6b:0f:2c:56:ce:23:91:12:72:d2:5c:28:c0:0e:23:aa:ad:
76:99:af:ad:30:c3:3a:d3:d3:24:1e:26:ef:0e:0b:1b:0a:17:
fd:ae:22:ef:2a:25:63:5a:56:5d:64:7e:df:46:21:ec:b0:c0:
f1:60:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:56:48 2026 by rpki-client