Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: UTAcfynsN4/ZF9h3VD+MiTmPDe8p/MkqDgCdFL4x3sg=
Subject key identifier: DF:06:42:F2:E5:B7:04:AD:BB:6A:9F:C5:E0:AF:56:36:67:D7:07:85
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 01A1DD946F6E64E6562D7C18A6A7EDC24606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 05:00:54 +0000
Manifest this update: Sun 15 Nov 2026 05:00:54 +0000
Manifest next update: Mon 16 Nov 2026 05:00:54 +0000
Files and hashes: 1: 3gWQQGBcbMv1PcGiymFULbhDgQk.roa (hash: R5FpPwb0TIXhum/MUuquZBI0EvROR3vjJFQryTKsboI=)
2: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: DvLUqrVm0k3rBDayXoJDSw1g/BTooJAhtEMDf3qhLAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:6f:6e:64:e6:56:2d:7c:18:a6:a7:ed:c2:46:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Nov 15 05:00:54 2026 GMT
Not After : Nov 16 05:00:54 2026 GMT
Subject: CN=df0642f2e5b704adbb6a9fc5e0af563667d70785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:81:b5:30:ea:2f:ac:f4:01:91:3c:3e:d7:3e:
60:f5:cc:cd:92:fe:a1:67:58:26:37:07:d9:bf:3f:
d2:e7:d7:e2:e7:80:20:04:03:27:f8:30:50:2e:ee:
4a:e6:58:9f:75:98:2a:e8:f2:70:56:43:49:7a:60:
c0:58:6d:3c:aa:99:8c:e8:23:2a:20:18:7c:0b:38:
06:34:d6:d2:55:e4:ab:cf:1d:7a:f3:41:93:12:a7:
e1:ae:77:5a:28:fd:91:97:11:fb:71:d9:dd:c5:0c:
60:72:20:88:04:2a:6b:ba:d2:a0:c6:1f:75:c0:22:
2b:4f:84:a0:e9:3d:d7:cd:ef:5a:65:7f:a6:d5:45:
3b:d0:3d:6e:82:ee:f0:43:6c:8c:e4:c1:ff:3d:a5:
9f:b6:fb:0c:d1:c5:d2:b8:a1:fb:5c:1c:81:b5:ca:
c2:42:7e:22:e8:05:40:70:d7:7e:62:cf:a1:34:01:
b9:68:41:69:a2:da:56:81:11:50:d0:b3:98:94:38:
02:82:f6:26:38:04:3f:b1:a4:cb:60:50:ab:52:ce:
28:b5:2c:c1:6a:dc:0e:93:78:26:b8:e3:60:fa:6f:
ea:6e:3f:77:3e:fc:43:dd:78:de:d1:0b:64:26:a4:
63:b3:95:1b:07:b6:5e:50:a5:bc:59:c8:0b:e4:56:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:06:42:F2:E5:B7:04:AD:BB:6A:9F:C5:E0:AF:56:36:67:D7:07:85
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:49:8d:b1:38:03:40:55:f8:60:d7:bf:aa:fd:5e:64:f8:35:
e0:81:4f:a4:59:84:1b:16:09:1f:fe:9a:e4:a2:10:b4:97:6b:
92:ff:38:31:e2:da:d9:40:ec:a4:97:33:bf:70:cf:b4:b2:e2:
58:52:09:59:d1:50:0b:49:76:eb:25:c9:40:23:16:d1:a2:ab:
fd:12:05:46:49:bf:80:b4:4e:be:50:36:d9:72:6d:8a:9f:32:
42:7e:2b:e9:45:cc:95:d8:32:3c:9d:54:40:03:99:9f:c3:e9:
a1:e1:c6:8f:09:af:eb:be:af:89:1e:02:c3:5c:fa:ef:78:6e:
9b:05:e2:a8:63:f7:27:50:a8:1e:77:f3:3e:03:97:2a:ec:3e:
92:f3:33:8a:fb:a5:59:3a:58:f6:2a:cc:74:b8:f8:5f:5b:63:
35:3b:da:19:03:bd:79:49:65:f5:03:f5:97:5c:0d:ba:c8:c7:
cf:03:43:a3:75:0a:19:08:8a:0f:37:40:49:0d:d5:17:d8:d7:
50:4e:37:87:89:30:c4:2a:3e:4b:e9:c5:58:00:4e:cb:24:2c:
ea:14:54:5b:b4:f8:7b:61:81:61:f6:9c:73:b7:42:b6:68:71:
b1:67:95:0d:b7:23:64:9c:a5:1f:11:fa:b0:e7:ae:15:ab:99:
2a:40:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:13:14 2026 by rpki-client