Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: uOMdu6LoX6OFxqHfLEZbWzdFdwtJ6j74vjPezSRtNyk=
Subject key identifier: 14:BD:E5:BA:7A:A7:06:E9:07:E7:06:89:16:08:72:1E:C6:89:EE:9F
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 01A1DE02E45E958104FAF5C4C7C44FF1638F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 07:01:33 +0000
Manifest this update: Sun 15 Nov 2026 07:01:33 +0000
Manifest next update: Mon 16 Nov 2026 07:01:33 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: 6otcw6kXU9MQ/jqfzHqPn69GOxjblHk2pXbXwFD1HMk=)
2: _L8W4pQYN95d_ru9437-S9YHe24.roa (hash: 7Vq9DgyAlsbGrBriOiUBAAmu/kBfnz1j1W0Ug2fBKPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:e4:5e:95:81:04:fa:f5:c4:c7:c4:4f:f1:63:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Nov 15 07:01:33 2026 GMT
Not After : Nov 16 07:01:33 2026 GMT
Subject: CN=14bde5ba7aa706e907e706891608721ec689ee9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:0a:35:41:c0:00:9f:4d:a6:6b:5e:97:c7:
64:af:24:45:02:66:f6:ae:90:c1:02:83:32:b7:3e:
f3:43:e3:d7:72:8b:75:d2:59:26:79:54:f9:47:f9:
55:c4:2a:50:ef:cf:53:c3:a2:b9:cc:a9:39:ef:67:
14:10:a8:b4:a7:06:8f:b8:8f:1d:21:bc:27:49:00:
fa:a8:0b:8a:c3:13:c5:31:06:b4:52:93:ce:ce:2f:
99:26:40:25:6b:b2:51:bf:58:c0:67:85:cc:6e:db:
bd:57:02:fc:5b:b5:0d:a1:7a:0a:25:3c:b2:91:d0:
22:f6:fd:45:36:a3:71:3e:0d:42:26:a9:ee:ce:cd:
11:30:60:f6:1f:96:a2:9f:57:9f:ca:93:da:ee:69:
c1:7f:8d:49:9e:a7:20:4a:d0:02:d2:85:e8:d5:7a:
77:1e:31:00:b6:1c:3b:21:93:19:10:54:e9:b9:85:
5f:8f:ae:0b:de:c8:de:87:33:88:d7:d2:3e:e9:f7:
a9:33:6c:10:7f:02:ad:14:7f:47:6b:12:0d:34:e8:
06:2e:ea:ff:48:2b:d6:9a:fa:73:67:96:45:a2:b0:
37:6e:fe:b9:8e:68:51:a8:19:5b:d6:81:12:ff:24:
aa:e6:6d:eb:27:7e:f1:e5:c9:61:9a:59:c1:fb:d4:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BD:E5:BA:7A:A7:06:E9:07:E7:06:89:16:08:72:1E:C6:89:EE:9F
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b0:34:df:60:a6:c6:93:bd:50:48:de:41:7c:44:b9:f3:84:
41:69:7b:94:e6:ee:72:7f:65:ea:26:ad:2f:07:21:32:5b:5c:
df:d1:3c:68:c3:e3:14:62:4b:3d:a1:03:4e:b4:1a:2e:1b:7b:
9a:ac:6a:eb:81:c8:1c:ec:0c:a8:1e:a0:60:f7:60:d4:01:6e:
6e:96:16:65:6b:11:66:e5:f2:a3:1e:94:f0:b8:f4:50:88:d2:
eb:80:53:7c:b5:ef:62:0b:02:3c:e5:30:c4:25:5d:20:9d:5b:
85:54:79:fc:4e:7a:9a:3e:4e:db:42:4c:cc:e7:a5:1d:24:2d:
3d:f8:c2:cb:57:9e:3b:13:40:57:ea:a5:7b:ad:b9:91:fb:01:
5d:39:8d:d2:b6:bc:2f:84:00:62:74:38:7c:0a:b2:07:50:44:
c5:a6:9a:f9:31:d7:08:9d:a4:f3:5d:14:50:be:41:44:ac:06:
c1:cc:f9:f4:d9:f2:df:88:e9:3b:6f:85:68:93:07:b9:7a:36:
cd:2b:93:c2:8e:14:81:de:25:ef:c6:c3:b0:1c:bb:d4:3f:d2:
6b:b0:e1:f6:c2:b8:8a:44:29:52:47:54:d5:f1:f8:7a:29:21:
22:ad:ec:2e:a4:06:45:af:55:a2:af:58:3a:cc:bb:96:7c:67:
d6:a3:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:28:36 2026 by rpki-client