Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
File: rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft (raw, json)
Hash identifier: afIw29bYi1xjTrViLTgt7hRFIexfGyNalzMwKyA3OZg=
Subject key identifier: 00:40:EC:AE:D0:29:F8:67:3F:FA:E6:2D:B7:9B:6C:B1:68:8C:69:58
Authority key identifier: AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02
Certificate issuer: /CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
Certificate serial: 01A1DFF18325AE1AC1F0F9FA7D462797CE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
Manifest number: 0126
Signing time: Sun 15 Nov 2026 16:01:49 +0000
Manifest this update: Sun 15 Nov 2026 16:01:49 +0000
Manifest next update: Mon 16 Nov 2026 16:01:49 +0000
Files and hashes: 1: 98BJtZ8NH6aSevEqWqlLkfFiuQw.asa (hash: hTcuvR32Oz/tjaB7bta0n2JHkuMa1soVw3r/PM22ytg=)
2: rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl (hash: KANWjglTsO0ODYwr/bp4yHfWzw3ogUVz1EcQPhcairg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:83:25:ae:1a:c1:f0:f9:fa:7d:46:27:97:ce:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
Validity
Not Before: Nov 15 16:01:49 2026 GMT
Not After : Nov 16 16:01:49 2026 GMT
Subject: CN=0040ecaed029f8673ffae62db79b6cb1688c6958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:47:0a:88:ef:6b:ef:29:30:d9:03:5c:d1:
c9:c4:4f:ea:a6:89:38:5b:ef:c0:d9:5f:01:53:49:
11:05:d7:ae:98:75:7f:29:65:38:2a:3e:b0:c5:c0:
6a:cb:1b:08:c5:51:d7:a1:5f:49:c9:0d:ea:7e:33:
cd:fa:33:ea:a9:9e:f6:81:45:e7:64:30:ba:a2:6e:
f0:82:5b:d4:7e:e5:4b:83:8c:1b:74:e1:cf:11:42:
71:d7:89:1d:57:ea:4d:30:d9:73:ef:1b:5f:9b:29:
78:5d:fd:38:6d:e7:31:c4:91:a1:bd:6b:e5:8f:75:
52:33:8d:4b:51:61:40:b9:4e:79:a5:8c:b7:f2:57:
ca:79:b4:e8:8e:42:a6:42:71:42:73:6f:b9:3b:3d:
3e:03:dd:9b:25:b8:46:dd:15:6c:dc:ef:49:79:fa:
9d:59:2b:34:17:26:4e:dd:5e:bb:3e:70:55:b3:8d:
00:47:4b:0c:02:8d:a2:b1:b1:be:02:20:35:c3:91:
7e:95:44:d6:70:aa:57:bc:00:76:76:da:ac:0a:5f:
54:8d:4d:84:66:ce:3e:eb:58:8d:b7:5e:20:34:bc:
e6:ef:af:ad:10:a3:9e:e4:38:ac:c6:01:29:6a:ad:
1b:41:0a:a7:35:d4:6f:89:57:ba:f4:e0:93:bf:76:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:EC:AE:D0:29:F8:67:3F:FA:E6:2D:B7:9B:6C:B1:68:8C:69:58
X509v3 Authority Key Identifier:
keyid:AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:17:fd:c6:5c:9c:86:1d:35:b0:06:97:7e:d1:d0:c8:18:02:
84:79:74:fd:e9:4b:f8:c8:7e:53:d0:17:22:3b:b3:45:17:e3:
b1:74:a6:06:15:0a:67:07:f0:f8:69:82:71:8a:00:6a:95:4f:
1c:e3:8c:75:c1:11:81:ef:3e:e0:16:92:16:25:79:83:d9:45:
f1:df:9c:80:ff:cd:74:2e:9c:e0:16:73:92:ca:7f:d6:1f:e3:
48:e2:cd:db:82:13:13:ba:97:04:c6:e5:10:cb:97:19:cc:5a:
41:d9:46:ab:37:b4:b5:3f:05:f2:1c:79:e1:46:ea:33:b1:53:
bb:cd:67:93:b4:e3:d2:40:48:02:05:74:88:a1:10:f9:80:6a:
94:aa:1b:37:1d:d5:49:e6:56:6f:60:e8:45:5c:c2:af:58:2e:
1c:38:63:55:6b:dd:cf:32:99:44:8f:42:42:11:37:70:8d:8d:
23:78:b1:ce:af:5c:ea:8e:b6:bf:b5:ed:93:3f:1e:8e:73:c8:
27:09:78:d0:09:40:a7:27:b6:97:26:b5:d5:9f:a3:bd:7b:3e:
9e:b3:aa:cb:68:f9:71:5b:7d:33:8b:60:ba:dc:2e:82:16:de:
ae:e9:89:30:35:6f:7f:6b:8e:41:1e:e7:31:35:46:40:c7:b5:
10:dd:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:25:37 2026 by rpki-client