
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File: 0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier: LT/pl4I/aqysd+ECCZdc9ZDZ+96595nPcobT7QAX3SA=
Subject key identifier: FF:F1:36:8F:69:3C:55:89:D9:A8:AF:48:D7:1C:6D:BA:38:3A:D6:0B
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer: /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial: 01A1DFF0CEA2D05C6CA4BF169298AEE4E16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number: 1567
Signing time: Sun 15 Nov 2026 16:01:02 +0000
Manifest this update: Sun 15 Nov 2026 16:01:02 +0000
Manifest next update: Mon 16 Nov 2026 16:01:02 +0000
Files and hashes: 1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: sfviyZjotXbZLAaer8vnrb75/vnWce3DFNB/quPH1K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f0:ce:a2:d0:5c:6c:a4:bf:16:92:98:ae:e4:e1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Validity
Not Before: Nov 15 16:01:02 2026 GMT
Not After : Nov 16 16:01:02 2026 GMT
Subject: CN=fff1368f693c5589d9a8af48d71c6dba383ad60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:3a:54:a9:77:1e:4b:06:a1:4b:f9:7e:6e:
e7:30:ff:5e:ac:69:f6:9c:e2:fb:5d:a9:fe:77:5c:
33:26:24:d3:7a:fa:a7:0d:6d:f2:28:5c:c1:de:d6:
b3:c7:d5:4f:d7:c6:6d:30:ff:e0:7d:b1:39:85:8a:
53:80:b2:0e:d6:b3:1f:a0:53:7d:62:22:41:68:d3:
6f:d3:9a:68:f4:aa:0c:7f:fe:29:8a:37:19:82:27:
4f:4b:e7:7b:0a:3e:ca:3e:5a:95:19:b4:07:69:0a:
50:11:15:20:6d:c0:c8:e9:97:14:3e:0a:ed:1c:e6:
f4:3f:a5:a0:ef:89:87:f6:e8:07:ec:ef:31:64:c9:
c4:a4:c0:f4:d1:3f:37:9a:a8:7d:1b:c3:fa:cd:7e:
ad:9c:48:09:42:0b:dc:e9:16:12:de:c8:b4:fe:01:
99:8c:3f:6a:04:bb:98:d1:50:bd:71:50:25:bd:fc:
1c:34:7a:b7:a7:24:4e:d2:13:38:b8:1f:82:6f:43:
9e:ed:f3:79:0e:62:f9:41:80:d4:3a:78:9c:c0:96:
83:cb:df:c9:b3:da:ca:ac:3e:ba:c6:33:80:e1:f3:
c5:a1:d9:6c:c2:23:a2:89:58:4b:9e:bb:6a:7e:a5:
5d:5e:50:75:89:24:bb:1b:0c:41:21:fb:da:54:b0:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:36:8F:69:3C:55:89:D9:A8:AF:48:D7:1C:6D:BA:38:3A:D6:0B
X509v3 Authority Key Identifier:
keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:af:27:01:1b:e5:e9:2c:41:23:69:bd:5e:f3:91:33:22:c5:
11:d1:2c:56:84:f2:b4:17:d9:6d:a4:48:35:7f:95:70:44:50:
0c:4f:13:28:35:85:54:22:eb:b8:ba:bc:8f:d3:8d:b2:50:1c:
dd:86:42:78:89:83:5f:e0:f1:49:6f:94:fa:c2:f6:3e:ba:c3:
44:ca:21:df:95:a7:fc:fb:a9:2d:2d:32:1b:5d:79:39:44:e1:
5d:15:04:53:87:e4:ca:7b:4b:23:54:b2:6a:10:9d:84:3e:46:
bf:33:cd:56:32:97:d5:3c:1b:3d:4c:c8:30:06:af:6e:4d:29:
1c:ed:76:58:a6:41:1d:8f:2b:37:44:83:05:ae:ae:cd:5c:a4:
8e:50:a6:08:3f:7c:17:ea:52:b8:3f:b8:a1:9b:89:4f:21:62:
60:3e:2e:aa:fd:e5:a5:72:f0:8a:d5:32:6b:da:96:39:27:dc:
3a:c7:80:b4:ad:f7:53:b2:20:52:a9:34:c5:81:a4:99:63:1e:
55:30:52:20:f3:3d:54:9c:a6:55:f3:b5:d9:62:16:bc:52:ae:
ce:72:7f:03:48:2e:73:bd:08:44:98:c0:55:4a:94:40:4b:f6:
6d:6f:ca:b1:0a:a9:55:ea:e8:e8:33:5a:4b:a2:af:52:d2:8c:
55:41:53:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:49 2026 by rpki-client