Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: C29o9HzwDbnM46ldamnr+8Tbke3U4DxSIvsqObBMmqg=
Subject key identifier: 2F:FD:C2:C3:9D:5B:E0:11:70:21:C2:4E:4D:D9:11:E6:10:E8:DA:3C
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 01A1C69F51728B5E330D5855F7A2B9D6871C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0DB6
Signing time: Tue 10 Nov 2026 18:01:32 +0000
Manifest this update: Tue 10 Nov 2026 18:01:32 +0000
Manifest next update: Wed 11 Nov 2026 18:01:32 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: 2Zpbp6dF3bzk+1+DuTp0LYPtb7qIyM4z6MLUIZIT5TU=)
2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=)
3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=)
4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:9f:51:72:8b:5e:33:0d:58:55:f7:a2:b9:d6:87:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Nov 10 18:01:32 2026 GMT
Not After : Nov 11 18:01:32 2026 GMT
Subject: CN=2ffdc2c39d5be0117021c24e4dd911e610e8da3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:a9:f7:c8:46:ca:b4:f9:27:5a:9d:b6:b3:
b6:55:9e:41:2f:8c:60:5e:66:39:ca:9e:04:1e:ee:
86:aa:a5:8a:61:d9:b4:30:0c:61:b7:74:4d:57:af:
76:da:01:7a:f4:ce:84:e2:8b:17:8d:7c:90:d5:e5:
73:a4:20:3e:6f:d7:93:81:32:07:38:1b:6a:3a:c2:
71:86:cc:7c:c0:06:e7:08:e2:5d:82:ce:6f:89:00:
e2:3c:6a:65:5d:de:05:80:93:14:38:e6:ba:8a:e4:
04:db:3e:ab:f9:50:34:1e:a6:6b:f0:bf:66:39:57:
5a:fe:3d:4c:1a:21:eb:34:12:56:1b:4f:d3:21:e2:
22:bc:d7:19:df:b6:65:60:70:a5:b9:6c:9a:50:d5:
07:a2:3e:d9:38:34:b1:f9:37:57:42:49:66:92:11:
9e:d9:24:aa:96:5b:d6:f4:c4:d2:9d:55:d4:fc:9b:
f2:c2:ff:33:30:aa:27:33:24:87:5d:64:47:03:79:
c1:44:44:bf:7b:5a:a1:1f:08:0f:5c:c7:a5:f3:34:
a7:3c:95:3a:09:8e:08:5b:a8:3e:0f:9a:83:eb:c4:
76:e5:0d:fb:68:77:a9:a4:c0:7d:46:db:89:e1:df:
3a:04:8d:4b:e6:4f:98:85:27:2d:41:e1:49:21:00:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FD:C2:C3:9D:5B:E0:11:70:21:C2:4E:4D:D9:11:E6:10:E8:DA:3C
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:17:fc:1b:4d:65:71:ae:c8:e4:e7:2a:30:67:bf:27:ad:92:
44:fc:af:f2:05:85:8d:02:c8:e4:6a:fb:95:b5:26:da:ca:04:
bf:cd:cc:1d:4f:8b:f8:40:eb:5f:1d:30:94:42:04:f8:22:c4:
ef:99:e1:a3:98:6b:80:ab:7c:d6:40:5e:d2:a9:d1:f2:0c:4c:
20:50:c2:f1:ca:83:08:69:6a:30:b9:24:2d:e9:82:81:69:ec:
8a:55:bf:a5:37:bc:5b:90:87:16:9c:f1:68:c2:ee:c9:00:01:
13:f3:a9:ef:87:9c:9d:88:d1:64:e1:02:11:c7:44:93:dc:2a:
57:63:da:f8:1c:41:99:82:6f:ad:c6:e4:28:9a:7c:fa:24:70:
75:78:33:2b:27:a8:b4:3a:d0:d6:b8:39:75:ae:07:96:47:b9:
63:9d:7a:bf:05:aa:e5:95:e8:67:40:21:60:83:d9:c2:b7:a1:
25:36:c0:7f:fd:5e:12:96:15:70:0a:3e:e8:28:bf:06:11:0c:
2b:44:77:7b:be:00:90:58:cf:85:32:6a:71:8e:6e:c2:61:62:
87:26:02:7d:d5:33:fb:b3:6d:2a:57:54:fc:ee:3b:04:44:ba:
d6:b6:58:0a:a6:0e:6c:31:61:e0:5f:5e:7a:6c:f0:18:df:ef:
a8:97:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 03:53:46 2026 by rpki-client