Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: cep2XODHMqHzA9re9hknQV6VpDH9BTngzv7tgvfdToA=
Subject key identifier: F6:8E:50:AB:AC:5E:BB:B3:FF:E9:A3:59:39:C6:08:18:5A:CB:92:05
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 01A1DFBA051A1DAA50F1F70375BE12C610A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 15:01:12 +0000
Manifest this update: Sun 15 Nov 2026 15:01:12 +0000
Manifest next update: Mon 16 Nov 2026 15:01:12 +0000
Files and hashes: 1: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: tis1zbeib/YoIlCRF188V/s/1dZnnPwOIRjo6ym/flM=)
2: VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa (hash: yxhJeQxv5OL2X3W33orxeTr4UI2HV6MbDSVgY4g3PdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:05:1a:1d:aa:50:f1:f7:03:75:be:12:c6:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Nov 15 15:01:12 2026 GMT
Not After : Nov 16 15:01:12 2026 GMT
Subject: CN=f68e50abac5ebbb3ffe9a35939c608185acb9205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:22:c8:97:a8:22:03:91:30:6c:83:84:fb:
c9:61:00:77:b0:3d:f5:3b:b9:8d:3a:27:50:41:81:
a7:05:96:b1:dd:17:0c:fc:a2:f4:f1:6f:99:cf:e9:
e5:1c:c1:91:e8:a4:35:48:39:26:ba:66:39:97:a9:
84:7b:8b:61:b2:13:83:11:83:6d:b3:54:51:7c:65:
d5:c6:b4:58:4b:bb:51:9a:7a:4e:a0:18:b0:56:61:
c8:ce:c9:3d:ef:ce:52:a7:ec:a8:e3:78:a9:37:31:
e0:f0:04:3a:7f:aa:5a:13:0e:00:41:e2:bc:aa:e9:
55:f9:92:b2:78:9e:a6:e4:d4:15:89:ed:7a:d3:d1:
ad:5a:10:b9:8c:51:93:8f:58:d6:c2:71:00:76:b3:
5b:88:fd:95:9f:72:d8:ff:ef:dd:78:a8:30:e4:9a:
bf:19:05:80:9d:6a:40:c6:41:a2:6e:b7:68:93:31:
ea:9c:cb:57:0d:51:ea:32:be:1b:e9:de:d0:6d:b8:
24:3c:51:98:65:90:ed:b5:b6:fa:f4:91:2f:94:0d:
7b:14:f2:5d:67:f5:69:3f:a2:04:7b:c2:23:ab:b6:
3a:f3:4b:46:26:8c:af:c4:78:75:4f:32:34:e8:21:
e0:20:14:2e:4f:5a:55:9e:59:7d:9f:80:49:b2:28:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8E:50:AB:AC:5E:BB:B3:FF:E9:A3:59:39:C6:08:18:5A:CB:92:05
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:87:d4:70:c8:a9:98:39:5c:8f:22:4e:a4:b3:36:a6:57:0c:
02:9d:3b:62:70:24:65:3d:b4:02:9a:ed:ab:e9:e2:26:9c:b4:
fa:a1:c2:dd:35:02:dc:0d:29:8d:eb:cc:97:bd:ed:76:46:c7:
b9:18:50:cc:af:7f:e2:87:44:ca:df:a4:6d:8b:33:e1:85:75:
4b:8b:90:28:de:39:bc:e7:18:6f:d2:3d:ec:d2:71:eb:5c:1b:
ad:61:90:f4:71:1c:5b:08:7b:cd:8a:d8:18:a3:70:e4:ba:79:
56:d2:aa:6c:5a:cc:24:1a:2d:91:c1:91:c9:5f:fe:b0:f3:86:
22:3b:c2:a1:53:cb:96:7f:21:f7:1c:e9:d6:e3:45:c9:42:10:
51:bf:3e:24:4e:53:f5:20:52:8a:4c:0e:2f:d3:74:cc:07:67:
fd:0c:1e:73:65:81:fd:e0:59:ef:31:bc:61:3e:6b:a3:3c:c2:
dd:d9:2a:15:62:7f:8b:6b:b5:ac:73:44:9f:eb:2c:99:25:31:
92:08:7b:d9:c9:6a:c5:e7:34:05:5b:fc:f2:0a:b8:30:15:04:
81:d6:a0:d1:f1:4b:e5:db:f5:99:8b:4f:10:c3:49:f4:e7:44:
98:da:5d:25:91:69:19:d5:18:d8:40:08:bf:93:f6:22:13:69:
8f:a7:bb:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfugUaHapQ8fcDdb4SxhClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYWJlYjZlZjgyMGQzZDUyZjA1MzcyMjMzYzU0MWVlNGIx
NGYzNjEwHhcNMjYxMTE1MTUwMTEyWhcNMjYxMTE2MTUwMTEyWjAzMTEwLwYDVQQD
EyhmNjhlNTBhYmFjNWViYmIzZmZlOWEzNTkzOWM2MDgxODVhY2I5MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24wiyJeoIgORMGyDhPvJYQB3sD31
O7mNOidQQYGnBZax3RcM/KL08W+Zz+nlHMGR6KQ1SDkmumY5l6mEe4thshODEYNt
s1RRfGXVxrRYS7tRmnpOoBiwVmHIzsk9785Sp+yo43ipNzHg8AQ6f6paEw4AQeK8
qulV+ZKyeJ6m5NQVie1609GtWhC5jFGTj1jWwnEAdrNbiP2Vn3LY/+/deKgw5Jq/
GQWAnWpAxkGibrdokzHqnMtXDVHqMr4b6d7QbbgkPFGYZZDttbb69JEvlA17FPJd
Z/VpP6IEe8Ijq7Y680tGJoyvxHh1TzI06CHgIBQuT1pVnll9n4BJsighnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaOUKusXruz/+mjWTnGCBhay5IFMB8GA1UdIwQY
MBaAFA+r6274INPVLwU3IjPFQe5LFPNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEt
NWEzNzEyNjcwNWFkLzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEtNWEzNzEyNjcwNWFk
LzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYfUcMip
mDlcjyJOpLM2plcMAp07YnAkZT20Aprtq+niJpy0+qHC3TUC3A0pjevMl73tdkbH
uRhQzK9/4odEyt+kbYsz4YV1S4uQKN45vOcYb9I97NJx61wbrWGQ9HEcWwh7zYrY
GKNw5Lp5VtKqbFrMJBotkcGRyV/+sPOGIjvCoVPLln8h9xzp1uNFyUIQUb8+JE5T
9SBSikwOL9N0zAdn/Qwec2WB/eBZ7zG8YT5rozzC3dkqFWJ/i2u1rHNEn+ssmSUx
kgh72clqxec0BVv88gq4MBUEgdag0fFL5dv1mYtPEMNJ9OdEmNpdJZFpGdUY2EAI
v5P2IhNpj6e77Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:53:39 2026 by rpki-client