Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
File: MNs1tD7r7J26qD7xjrHv8CPxge0.mft (raw, json)
Hash identifier: U2LcC7xQvMDu9BorUFrS6sXdco8u43A1sxAA8B0txyE=
Subject key identifier: DC:DB:62:7C:7E:20:3D:93:6A:C9:A8:67:21:8C:C4:73:41:E3:DB:B3
Authority key identifier: 30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
Certificate issuer: /CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Certificate serial: 01A1DDCB975D9346EA8439FEF75EC0B30C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
Manifest number: D7
Signing time: Sun 15 Nov 2026 06:01:09 +0000
Manifest this update: Sun 15 Nov 2026 06:01:09 +0000
Manifest next update: Mon 16 Nov 2026 06:01:09 +0000
Files and hashes: 1: MNs1tD7r7J26qD7xjrHv8CPxge0.crl (hash: Ggv8Lp7Lc7ONIviJcATsB0DYEeAw9DT8jKFYlBFtmq4=)
2: laQy4Wer-MeK7_ZIFecIrIa3BYE.roa (hash: GIqBZqp8MxiBgUobnm0UVDm8lJqcl76WM/fO2JMPIBI=)
3: ojj7MWuR-byapBcCWPFFbQ9xUDE.roa (hash: B/r+JitPLdjn+OZZ1E6DqL9+MTPDYrTKHbUo7Y9Tfvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:97:5d:93:46:ea:84:39:fe:f7:5e:c0:b3:0c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Validity
Not Before: Nov 15 06:01:09 2026 GMT
Not After : Nov 16 06:01:09 2026 GMT
Subject: CN=dcdb627c7e203d936ac9a867218cc47341e3dbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:78:f9:26:e6:35:62:05:69:48:8d:77:a7:
72:bb:0a:7c:18:05:8a:c9:59:13:ef:66:f0:c0:9a:
9c:de:ae:f6:82:a5:9f:63:69:fb:18:f3:7e:e0:43:
cd:bc:5d:ba:ba:87:b1:08:54:bb:64:3a:a6:81:3c:
3d:58:0e:71:4e:fb:ef:73:07:9d:43:2f:a5:17:4b:
f1:af:3b:86:8f:7d:e8:bb:77:03:ba:97:a3:4c:9a:
bc:75:8a:7e:ed:41:03:d2:5a:41:16:53:b5:95:db:
63:1d:09:15:56:fa:e8:4a:ba:c6:83:be:bf:6c:c2:
2d:de:dd:50:a9:8c:ec:61:4f:28:f7:5a:6f:5f:74:
fb:f9:11:21:69:a7:93:9a:70:9e:e3:b8:cd:4f:32:
f9:4f:70:86:a7:84:71:9c:8a:9f:bc:03:73:6a:df:
50:61:c5:6c:38:63:0f:fb:77:b4:3c:bc:98:47:77:
0d:a7:53:34:13:91:be:48:9d:da:7e:0a:f8:a8:37:
ad:57:20:cf:d4:d8:b3:c6:07:e3:5a:24:14:31:79:
ec:7f:26:b2:08:2c:b2:53:98:1e:8c:13:95:dc:bf:
1b:40:e4:95:f2:73:6d:f6:e6:9c:bd:cb:a3:b1:65:
6e:94:fd:9b:7f:1c:2d:5d:1f:76:89:25:e5:c0:f4:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:62:7C:7E:20:3D:93:6A:C9:A8:67:21:8C:C4:73:41:E3:DB:B3
X509v3 Authority Key Identifier:
keyid:30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:78:12:0c:27:9f:3f:7f:a2:3e:b2:9d:9f:d1:e2:c3:d7:86:
11:ac:06:99:f7:9f:96:7d:79:96:68:e9:46:de:34:81:79:c7:
4d:a9:bb:39:44:39:f7:66:85:5d:a0:bc:06:c6:5c:8f:80:d2:
12:ec:c2:58:1d:8b:c4:18:75:2e:9b:6b:a7:43:5a:a6:70:6b:
24:0a:a8:3e:91:15:b5:2e:85:e4:56:a3:45:92:0f:07:92:21:
ff:b0:4f:e9:89:7c:30:b5:15:57:1c:45:2e:2c:4f:75:dd:f3:
5f:9b:9d:66:4a:3a:67:38:86:33:7b:89:eb:b1:9d:7a:51:b1:
fe:be:32:b3:aa:cc:0a:96:4d:91:63:a2:b4:5c:10:82:e3:46:
09:39:dd:2e:54:45:53:77:1a:d7:1b:e8:28:bb:41:74:f2:c1:
3a:97:52:34:a7:44:87:f1:ac:ee:e2:73:38:b5:a4:e6:4b:f3:
b8:8b:ab:75:c9:30:1d:14:61:1f:83:44:4b:8f:ea:1a:19:35:
ba:2f:24:82:d0:21:19:f3:00:7b:85:6c:78:1b:9a:16:eb:39:
87:cd:db:c5:ea:4f:69:bf:53:1d:f3:31:58:0b:d6:dc:e1:56:
10:93:50:1f:79:fc:e5:50:99:c9:ac:39:16:34:f4:33:ce:a2:
e8:66:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:50:38 2026 by rpki-client