Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
File: lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft (raw, json)
Hash identifier: 53N4XkglXgvstSOYKwTkfhaQ95PWE1xUFTgndkyTB28=
Subject key identifier: CA:7E:89:7A:58:55:0D:84:A0:9F:17:67:D9:B6:95:55:2F:42:0A:09
Authority key identifier: 94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25
Certificate issuer: /CN=949dbd7faf8c3f93dcbffdc6105e4b00bec8c825
Certificate serial: 01A1DFF18ABD69A180C4C8F57C9CDB7F6B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
Manifest number: 012A
Signing time: Sun 15 Nov 2026 16:01:51 +0000
Manifest this update: Sun 15 Nov 2026 16:01:51 +0000
Manifest next update: Mon 16 Nov 2026 16:01:51 +0000
Files and hashes: 1: e3qzYZKsiXi2JvR8gSKvnSuYwtE.roa (hash: V3dxX8nRKOg3+e1hOcKrnPrRXrDt/Vgdwrv2Gxb63Tk=)
2: lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl (hash: pp8H0mTlj3xho1ghkY2BGdkLfn7TOL3RqtRwn5UpKSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:8a:bd:69:a1:80:c4:c8:f5:7c:9c:db:7f:6b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949dbd7faf8c3f93dcbffdc6105e4b00bec8c825
Validity
Not Before: Nov 15 16:01:51 2026 GMT
Not After : Nov 16 16:01:51 2026 GMT
Subject: CN=ca7e897a58550d84a09f1767d9b695552f420a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:7c:aa:37:99:3b:af:3d:12:9d:2a:b7:18:
fe:b7:52:31:12:77:ee:68:97:5d:fd:63:cd:25:e8:
b5:a2:bf:8d:f3:fc:c2:f2:a0:70:c2:da:36:cd:38:
5d:69:5f:fd:d5:a9:00:15:8b:68:86:8d:0a:d8:49:
e5:ff:2f:9c:a4:07:58:71:f5:bb:48:ea:85:ba:a8:
a4:dd:0c:18:59:66:4c:6b:2f:bb:63:25:26:9a:48:
83:88:73:45:6f:e6:0b:30:b2:ac:f6:aa:6b:23:1b:
b3:15:31:8a:94:5c:ad:6a:f0:fc:f4:f6:28:41:c8:
36:ff:f7:40:a6:ab:2f:f0:ae:49:0b:94:98:47:ad:
60:b7:ca:42:ce:75:fc:97:64:a1:37:26:09:da:f5:
74:ad:17:e1:79:e2:bd:c1:4d:f7:5c:13:1b:a2:84:
0a:f1:9d:1a:93:ab:fe:00:98:69:bc:4a:32:aa:73:
f1:56:f9:99:34:1b:26:07:bf:d1:c6:a4:b4:02:d2:
66:9a:45:4a:92:1c:77:e1:75:a6:5a:36:9d:44:f6:
f5:9d:b4:18:92:0f:51:6a:bb:8d:ee:6b:77:72:9d:
35:0a:70:a7:45:df:39:eb:6a:4f:bc:81:89:42:d8:
44:a0:37:05:62:04:52:14:79:3b:8b:86:37:00:1d:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:89:7A:58:55:0D:84:A0:9F:17:67:D9:B6:95:55:2F:42:0A:09
X509v3 Authority Key Identifier:
keyid:94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e5:ad:d5:eb:ca:2a:05:5d:e3:38:f7:28:8b:e5:32:93:30:
81:63:02:dc:a3:7c:2b:d7:f7:b3:ac:2a:96:5f:96:ab:66:c5:
8b:ec:f9:ad:aa:88:05:1e:af:0e:a5:ce:08:cc:94:67:e8:ae:
d1:28:a9:c6:b9:e6:de:cc:60:97:a0:c8:5d:ea:2c:f6:72:af:
45:b1:cd:69:b5:32:85:32:a5:ad:f4:94:44:13:10:95:e4:39:
43:77:76:f7:6a:43:73:71:ec:73:00:ce:d0:6e:27:f0:bc:82:
ff:25:ed:ac:ec:bb:44:c4:99:b9:02:39:7c:9c:e2:7d:59:19:
1c:3d:6d:9d:d0:20:9f:ba:09:9d:12:76:d8:2d:e5:37:c1:78:
d7:3c:d1:c7:9b:dc:3e:53:cc:da:91:91:9a:93:13:7c:9d:fa:
db:d5:7f:24:72:7d:19:d8:c8:7e:3e:51:88:96:a2:b2:c1:b9:
8b:bc:1b:67:b8:23:ba:b9:6b:02:86:af:06:1f:ef:5e:dc:25:
87:cb:53:d9:00:9f:72:04:9f:1c:90:67:eb:cc:12:5a:22:69:
3f:0b:61:17:60:79:fe:ab:56:c3:0f:76:56:cf:2e:35:cd:2f:
05:70:4c:82:49:bc:72:08:8f:d7:ae:5b:57:44:73:1e:e9:c5:
8b:df:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:19:03 2026 by rpki-client