Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: uo3gljHsDsdnd8Kvwf8R4A0/v91UVgBL363WXXFUne0=
Subject key identifier: 32:87:80:C0:23:0F:F8:71:B8:42:36:C1:77:56:2E:C4:BC:89:27:5E
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 01A1DF154B0159A89A5D7900EDC2D4DC20C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 12:01:16 +0000
Manifest this update: Sun 15 Nov 2026 12:01:16 +0000
Manifest next update: Mon 16 Nov 2026 12:01:16 +0000
Files and hashes: 1: 1-ijVMFl6GCcC6GGP7jpRptAbkME.roa (hash: 6WwqDb4fLLuH7fqrOWTiw7oz+ZLJGp2PJoPRlWydUCs=)
2: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
3: RpRW9hgIjPMfAZ842QdrIrNI7fk.roa (hash: 3sOUZl0+LvcVI79+33YVuGWAx3JxO70FfZgzplNUMc0=)
4: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: RdeBEFCjvY7XyI+3J6wuOoh1nKKuGkHDAAl5SVwDE08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:4b:01:59:a8:9a:5d:79:00:ed:c2:d4:dc:20:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Nov 15 12:01:16 2026 GMT
Not After : Nov 16 12:01:16 2026 GMT
Subject: CN=328780c0230ff871b84236c177562ec4bc89275e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3b:c4:30:06:29:ba:25:be:1d:37:6a:87:5d:
b5:f5:d1:db:34:91:96:96:5b:77:93:90:1d:cc:45:
62:3d:4b:8c:2c:19:dc:f0:f2:69:48:ec:cf:da:d6:
23:7d:37:af:1e:88:7e:36:d0:d8:e2:16:7e:44:2c:
98:c8:9b:6f:01:5d:79:b1:89:1f:de:6a:df:6a:09:
74:45:57:f0:50:0b:9c:25:bf:ed:7e:95:34:8f:c0:
3c:b4:db:8d:23:b9:00:40:48:51:08:a8:ee:69:c9:
e7:83:95:34:e1:00:73:6a:fe:e2:9d:86:07:de:20:
cc:c1:6e:9d:71:0f:b3:69:8e:80:5b:6a:ca:55:cb:
37:4f:20:e0:a7:e8:ac:a4:c2:56:d3:97:27:92:55:
ec:86:97:a5:85:33:f5:c0:d1:8f:75:e0:47:12:e5:
05:55:af:46:b3:cc:f7:6a:4c:9d:52:e5:ab:2e:cb:
d6:7b:10:c6:1e:83:0f:cf:8e:4a:81:c7:8e:4a:fe:
4b:61:42:d1:74:6f:41:41:b8:ad:ed:a3:b4:87:72:
04:17:4b:4b:3d:13:06:80:d2:e0:0f:c4:d3:92:45:
d7:4f:6f:62:8e:34:ca:d1:42:50:5c:1f:0a:c1:05:
2e:bc:23:ec:59:4a:c5:bc:23:2f:b8:a8:c6:f7:8c:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:87:80:C0:23:0F:F8:71:B8:42:36:C1:77:56:2E:C4:BC:89:27:5E
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0a:65:fd:d8:62:c5:39:01:2a:39:db:2d:50:d3:76:00:10:
ff:64:82:a6:b6:a0:8d:ad:86:15:f0:b1:be:78:53:33:fc:8e:
f1:bf:eb:7c:53:7a:14:a0:35:d2:5d:e1:73:ed:8b:17:9a:7c:
e7:7a:cf:62:84:77:5b:65:63:41:17:89:ed:57:64:cb:ff:dc:
24:79:c9:82:ac:24:8b:9a:08:48:d5:fe:0c:ff:52:28:f8:44:
98:1c:db:1c:07:73:d9:c1:8d:55:9a:f0:c7:31:50:32:b7:f9:
c2:d7:35:79:11:25:59:21:df:7e:d2:d2:50:0a:0b:4f:8b:68:
2e:a6:2a:5e:3b:13:5d:5a:d7:8a:ca:e0:bc:3f:49:04:2a:8e:
ad:65:ec:25:02:f5:1b:fd:69:b4:a9:1c:e0:a2:97:ab:91:93:
12:3d:6e:36:da:58:2d:31:f9:fa:e5:c2:4d:0d:f6:3d:08:dd:
2f:9b:4e:e7:ff:20:4d:23:e2:cc:16:81:31:c9:a6:bf:a6:90:
be:86:5c:5a:ce:bf:7a:38:66:64:6e:be:cd:f2:56:4e:09:8f:
4f:07:87:02:5c:e2:54:8d:84:52:53:09:aa:62:fe:e6:fd:2e:
2c:bb:15:17:af:fe:0c:81:b0:2c:21:4f:15:e0:e8:14:32:e1:
5d:a5:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:38:30 2026 by rpki-client