Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: YNNjrbLEaGn86RJG1F1PrGhEi7jKIxI+EpN0AuA9vtc=
Subject key identifier: 3C:0B:C5:20:5E:F8:0B:88:7B:63:EF:D3:E1:53:2D:3F:CA:11:E1:34
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 01A1DFF0ADC24CAF5D4A25FC49C4030B0179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 06EE
Signing time: Sun 15 Nov 2026 16:00:54 +0000
Manifest this update: Sun 15 Nov 2026 16:00:54 +0000
Manifest next update: Mon 16 Nov 2026 16:00:54 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: NM+OtKQmtZQBXTlhElnvmjQNbqQ1eO7Ed7nK431qEIg=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f0:ad:c2:4c:af:5d:4a:25:fc:49:c4:03:0b:01:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Nov 15 16:00:54 2026 GMT
Not After : Nov 16 16:00:54 2026 GMT
Subject: CN=3c0bc5205ef80b887b63efd3e1532d3fca11e134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:ba:f8:e5:ba:93:70:73:ea:d5:7d:d2:35:
74:39:73:68:22:6f:23:67:af:fd:14:92:ff:90:5b:
19:62:58:9f:d2:5e:00:aa:1d:d5:3b:3c:28:96:b1:
6f:ad:71:fe:e7:85:8e:ef:0a:c1:e6:a2:c7:8d:e9:
b6:2a:10:dd:2f:95:8a:0e:18:58:49:77:f2:1b:1d:
6a:67:0e:59:b5:fd:c2:ce:a8:50:0d:86:fa:07:72:
4b:e5:a6:9f:a2:de:64:f6:a5:f7:44:4f:46:b2:55:
63:ca:21:5e:a4:f7:65:44:7e:81:f0:80:8e:3f:3b:
9e:d0:de:b9:50:d4:36:14:0c:c3:75:2a:87:44:9e:
45:d5:21:7a:d5:5b:d5:e8:13:09:e0:41:4b:ae:91:
74:01:bf:97:f1:92:bf:41:49:4f:93:cd:2b:ff:06:
ed:43:c8:c0:76:60:d4:ae:be:d8:ff:54:0c:af:0a:
77:ca:6d:4d:ba:b5:a3:c7:c0:65:88:93:dc:42:2e:
25:fc:fa:c8:e8:51:c4:55:13:86:6c:6b:8f:bb:e0:
c4:d5:2b:50:60:85:fe:18:34:72:5b:8e:21:12:0a:
49:d3:3e:56:1e:6d:d9:17:8b:2a:6f:b6:24:3e:14:
98:f0:03:10:70:20:1a:f7:d8:3a:1e:50:f1:24:8f:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:C5:20:5E:F8:0B:88:7B:63:EF:D3:E1:53:2D:3F:CA:11:E1:34
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ad:1a:5c:89:4f:2a:95:a6:eb:8f:64:1d:c3:74:b5:fa:d8:
fe:80:3c:f8:4b:24:29:41:15:60:dc:60:3c:ef:8f:5e:bc:ad:
39:89:21:5f:b7:2b:f3:db:a7:1d:67:38:51:06:a9:84:e9:08:
d4:71:f3:af:0c:8f:a9:74:44:d2:2b:72:11:2c:4d:bf:65:e3:
ab:2f:fd:ce:aa:20:b0:73:db:70:c5:de:60:3c:aa:5f:a6:54:
54:49:a5:c9:4a:9b:f2:2e:ae:ae:67:88:30:c6:ca:99:1c:9e:
a2:99:ba:f4:e7:43:af:76:42:bb:2a:a7:5c:ab:88:84:f6:01:
75:bc:dd:56:53:de:0e:57:bb:dc:31:f4:1f:46:59:88:ea:a1:
de:e9:86:fa:54:69:80:91:38:4c:53:bc:5a:c7:62:45:4b:12:
b9:61:99:fe:79:de:6e:5c:9a:fd:48:5c:0d:aa:f5:a7:a2:22:
bb:51:3a:b7:b3:87:7e:9a:de:6f:9d:56:a3:ba:bb:8c:bc:bf:
ee:d0:c2:19:9a:69:91:81:a4:2c:78:07:0c:02:24:bb:01:f0:
aa:bf:52:5d:9b:65:69:b7:8f:7b:4b:3b:55:4c:f7:02:5d:58:
90:91:1d:e2:45:c7:e7:3d:9c:71:57:f3:8f:7e:0c:ac:f7:2b:
f6:3e:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:11:18 2026 by rpki-client