
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: dl6zuf8lsy+utiiE+RCrboUwrvihR+AoZxTQBoZwT3w=
Subject key identifier: 01:6D:F5:BD:95:7A:DE:5B:3A:89:E4:DD:F3:9B:FF:2C:D5:C3:51:1F
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 01A1C1AEE362364D1A4807BB35460DCD6EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 19:00:26 +0000
Manifest this update: Mon 09 Nov 2026 19:00:26 +0000
Manifest next update: Tue 10 Nov 2026 19:00:26 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: 2uosSfcq5b02nrd9xSFAV7JRWtdD0NMBE8zQ/NHIsg8=)
2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:ae:e3:62:36:4d:1a:48:07:bb:35:46:0d:cd:6e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Nov 9 19:00:26 2026 GMT
Not After : Nov 10 19:00:26 2026 GMT
Subject: CN=016df5bd957ade5b3a89e4ddf39bff2cd5c3511f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:9a:6a:5a:4c:b6:b2:16:c5:c2:32:a3:ea:
a9:24:2d:31:a3:77:ce:f2:c0:e1:f1:6b:9b:7c:d7:
a4:5f:c5:8a:1f:ee:8c:5a:78:61:86:10:43:a9:60:
7f:b9:de:3b:78:73:3a:f2:ad:aa:24:b4:62:eb:ce:
46:2b:51:96:b7:03:44:c1:6d:12:8e:ca:cb:2c:b6:
ce:34:c8:be:ad:6a:67:7f:63:33:7a:8c:a2:9a:d2:
d4:81:fe:bc:60:e1:24:5c:eb:e1:de:8b:79:5f:54:
c0:f2:49:65:be:ef:84:76:83:d3:59:bf:2f:0a:01:
03:cf:05:2c:2f:ae:49:54:9e:cc:f9:e9:19:0f:cf:
74:43:c9:78:e7:61:0c:1b:dd:65:fc:08:cb:a5:a3:
9c:fc:6d:1d:08:ff:53:f4:1e:f4:ec:9e:6f:5c:80:
f6:de:3a:cf:cc:52:e1:40:57:04:6e:d8:76:9e:dd:
5f:95:98:44:76:64:2a:17:1e:36:8d:4e:39:0a:f7:
6e:d8:c1:dc:ea:20:f2:12:5d:27:b8:dc:30:c9:1a:
23:85:4f:22:d5:a2:a4:c5:2a:e7:9c:48:fb:30:bf:
b4:8d:35:de:b6:c7:6b:46:36:fc:e7:f8:81:c8:d4:
dc:d5:93:70:11:05:7a:e2:69:35:95:5d:85:e8:1c:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:F5:BD:95:7A:DE:5B:3A:89:E4:DD:F3:9B:FF:2C:D5:C3:51:1F
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:63:47:16:aa:73:34:75:12:ba:c9:6f:47:10:fd:65:80:54:
68:70:44:c1:e1:49:c9:da:ae:54:4a:56:12:49:8a:a0:34:68:
74:89:70:fd:05:85:ee:08:04:91:aa:31:65:6f:f7:31:33:83:
c7:da:af:1e:cb:01:30:8c:6c:df:e8:b6:3a:4c:da:19:53:3c:
f5:8a:03:cd:c0:75:12:d6:27:88:81:7c:e1:2a:17:42:d3:8f:
1f:cd:93:92:ad:25:e7:10:ef:fd:74:e6:18:cd:38:6b:b7:23:
d1:ca:35:19:11:0f:f6:b5:47:cd:20:a4:a9:e8:83:b2:78:86:
78:7e:76:3c:e3:53:67:ab:93:8c:fd:ab:79:1a:f9:d1:ce:5d:
ca:ba:84:09:d1:a5:13:d2:5a:e9:90:07:68:bb:04:ee:96:e4:
76:f4:1e:7a:f3:cc:36:a5:6e:f7:86:80:e7:ef:e1:16:95:d8:
2a:a4:fb:7c:cc:da:c2:85:6d:5f:c3:7d:68:75:28:65:e7:c4:
2d:c3:74:21:aa:16:3c:78:f3:45:3b:fd:6e:c4:ed:01:3e:2b:
43:58:59:df:92:af:92:30:48:71:ed:f6:aa:2b:c1:e6:25:31:
63:4d:c4:52:6b:4b:0f:42:f3:5f:16:f4:c0:1a:0f:3d:86:78:
39:e1:62:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHBruNiNk0aSAe7NUYNzW79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzhhNmJjYzg1ZWM4YWRlNmVjY2U4ODBlZTA3M2Q2Mzc3
MDc5NjUwHhcNMjYxMTA5MTkwMDI2WhcNMjYxMTEwMTkwMDI2WjAzMTEwLwYDVQQD
EygwMTZkZjViZDk1N2FkZTViM2E4OWU0ZGRmMzliZmYyY2Q1YzM1MTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JiaalpMtrIWxcIyo+qpJC0xo3fO
8sDh8WubfNekX8WKH+6MWnhhhhBDqWB/ud47eHM68q2qJLRi685GK1GWtwNEwW0S
jsrLLLbONMi+rWpnf2MzeoyimtLUgf68YOEkXOvh3ot5X1TA8kllvu+EdoPTWb8v
CgEDzwUsL65JVJ7M+ekZD890Q8l452EMG91l/AjLpaOc/G0dCP9T9B707J5vXID2
3jrPzFLhQFcEbth2nt1flZhEdmQqFx42jU45Cvdu2MHc6iDyEl0nuNwwyRojhU8i
1aKkxSrnnEj7ML+0jTXetsdrRjb85/iByNTc1ZNwEQV64mk1lV2F6ByweQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFt9b2Vet5bOonk3fOb/yzVw1EfMB8GA1UdIwQY
MBaAFO94przIXsit5uzOiA7gc9Y3cHllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTIt
OTZmMjE2ODkzZGVjLzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTItOTZmMjE2ODkzZGVj
LzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2NHFqpz
NHUSuslvRxD9ZYBUaHBEweFJydquVEpWEkmKoDRodIlw/QWF7ggEkaoxZW/3MTOD
x9qvHssBMIxs3+i2OkzaGVM89YoDzcB1EtYniIF84SoXQtOPH82Tkq0l5xDv/XTm
GM04a7cj0co1GREP9rVHzSCkqeiDsniGeH52PONTZ6uTjP2reRr50c5dyrqECdGl
E9Ja6ZAHaLsE7pbkdvQeevPMNqVu94aA5+/hFpXYKqT7fMzawoVtX8N9aHUoZefE
LcN0IaoWPHjzRTv9bsTtAT4rQ1hZ35KvkjBIce32qivB5iUxY03EUmtLD0LzXxb0
wBoPPYZ4OeFinw==
-----END CERTIFICATE-----
Generated at Tue Nov 10 03:14:36 2026 by rpki-client