Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
File: OneLgrqpeIoayvLsNothmB71HfI.mft (raw, json)
Hash identifier: hGxVB46Viw/pd2wTBKUTmQCvRBoQclXzKWtFITXE8lo=
Subject key identifier: AA:65:25:06:98:9D:AE:20:8D:86:84:38:61:1E:C5:B5:BA:A7:0D:B1
Authority key identifier: 3A:77:8B:82:BA:A9:78:8A:1A:CA:F2:EC:36:8B:61:98:1E:F5:1D:F2
Certificate issuer: /CN=3a778b82baa9788a1acaf2ec368b61981ef51df2
Certificate serial: 01A1DEDEC2B9F477FE5C08D16CD5464F5A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OneLgrqpeIoayvLsNothmB71HfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 11:01:43 +0000
Manifest this update: Sun 15 Nov 2026 11:01:43 +0000
Manifest next update: Mon 16 Nov 2026 11:01:43 +0000
Files and hashes: 1: OneLgrqpeIoayvLsNothmB71HfI.crl (hash: lFkcfe9Rod84yPSMNQ0im5/B6rSJ/YKXp/okKwhzHpc=)
2: rmxdb45InuBSh7zHSKjX_3Ic9rw.asa (hash: ms93rpOzTaQzsiJ/5aekKy6FCU0yNRqo6zpjr2HmPPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OneLgrqpeIoayvLsNothmB71HfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:c2:b9:f4:77:fe:5c:08:d1:6c:d5:46:4f:5a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a778b82baa9788a1acaf2ec368b61981ef51df2
Validity
Not Before: Nov 15 11:01:43 2026 GMT
Not After : Nov 16 11:01:43 2026 GMT
Subject: CN=aa652506989dae208d868438611ec5b5baa70db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:62:c0:37:94:1a:5a:cd:d2:0b:5a:82:35:ef:
88:42:9b:99:d6:f9:e6:c2:09:9e:c2:17:de:bd:cd:
a1:bb:5c:b4:7b:36:a8:0d:9e:f2:bb:55:50:fa:89:
a2:ab:22:53:d3:f7:a4:07:35:3e:f8:0e:1f:55:4a:
73:b8:84:fd:40:07:26:bb:4a:ed:65:b2:7d:b9:0a:
b8:1c:d6:4f:1e:b2:41:d0:48:7e:0e:83:5b:e0:95:
6e:60:95:06:7f:d0:96:67:0e:47:d5:e5:06:3a:15:
0c:bb:4c:6d:e6:00:f3:d0:fd:6d:b0:5d:18:7b:c1:
8b:13:dc:62:93:da:14:c0:ee:a1:17:2c:6a:01:d3:
22:75:3b:28:06:48:32:53:3f:8d:66:28:3b:96:db:
d1:00:66:91:b1:e3:df:42:eb:a2:0e:01:60:7a:fd:
14:9a:b6:12:62:f7:34:91:d1:88:bb:e8:43:cb:28:
50:8b:1d:ae:55:79:f6:79:de:7f:ec:ed:b1:f2:d0:
3d:f2:98:85:fe:23:b8:f1:e3:37:59:68:f4:e9:50:
4f:e7:88:c2:77:b2:f9:6f:5c:64:b2:a5:a1:56:6b:
82:c7:fe:7a:06:da:49:03:21:9d:cb:2b:33:82:31:
85:58:a4:73:f9:b6:b6:c8:22:60:a1:dc:28:b2:9b:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:65:25:06:98:9D:AE:20:8D:86:84:38:61:1E:C5:B5:BA:A7:0D:B1
X509v3 Authority Key Identifier:
keyid:3A:77:8B:82:BA:A9:78:8A:1A:CA:F2:EC:36:8B:61:98:1E:F5:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OneLgrqpeIoayvLsNothmB71HfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d2:5b:88:80:1c:2b:f3:f3:eb:25:9c:bf:cf:ae:ed:e7:97:
7c:20:16:b2:51:6f:e0:ee:c8:64:f9:23:eb:2a:ee:64:c2:9c:
5b:53:db:12:bf:d3:f3:2d:56:e7:49:fa:f6:e1:fa:b3:32:ab:
30:a6:2e:79:b1:f7:c1:75:ee:2f:ff:d7:4c:fa:c2:bb:82:41:
83:9c:e6:55:96:d5:d6:3d:be:e6:5e:75:f4:d4:63:4f:7b:c1:
20:df:27:53:a6:60:e1:63:40:f6:ed:d2:54:6d:62:ad:1a:f3:
46:0b:97:3e:a0:38:1a:53:3c:2f:61:1e:87:3f:81:90:a3:1e:
73:8c:37:a7:5d:3b:40:91:0f:b6:da:2b:65:e9:d3:db:ce:25:
86:c8:a0:08:15:36:63:61:96:e5:d7:9f:bd:ee:5f:32:97:5a:
9c:c7:39:f3:ff:f5:82:79:05:b3:ef:39:29:40:3a:3f:40:55:
06:98:11:60:7a:ed:39:93:6b:1d:73:c5:cd:52:90:72:79:b0:
93:3d:c9:14:f4:fb:46:9b:90:bc:ed:48:5f:5f:99:f6:bc:0d:
76:53:68:a9:bb:9b:21:3a:10:96:e4:44:91:dc:a2:4e:ff:a6:
db:6a:9b:59:dc:8a:09:d3:f7:f0:c3:59:a2:51:13:97:13:be:
a9:5e:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:12 2026 by rpki-client