Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: n0EgO9odpbs7Bv3SsBvrWJJqCoDzLfFcefZ8C+s7UeU=
Subject key identifier: 7B:94:73:54:09:26:46:32:1E:3D:C8:4C:0F:36:65:1A:54:0F:FD:43
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 01A1DE397811032C82E03C007B00BC45386C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0E0D
Signing time: Sun 15 Nov 2026 08:01:10 +0000
Manifest this update: Sun 15 Nov 2026 08:01:10 +0000
Manifest next update: Mon 16 Nov 2026 08:01:10 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: R3k9eL06E/o3Khjxl1Agtg9iRBYtTCHp9rK9/qgTP/M=)
2: Bnu29pluL1AD4wD2GgQvr07xtcs.roa (hash: I+PJfEbbOSJZNIrwOCyiS4eKNFmjFbXF4CqvEyNzfEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:78:11:03:2c:82:e0:3c:00:7b:00:bc:45:38:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Nov 15 08:01:10 2026 GMT
Not After : Nov 16 08:01:10 2026 GMT
Subject: CN=7b947354092646321e3dc84c0f36651a540ffd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:c2:84:8d:f6:bf:8e:7c:67:a2:12:b4:17:
37:c4:dc:e6:af:55:f0:49:e3:96:03:9c:54:f7:87:
9e:d4:53:3d:e4:ff:18:5b:ac:32:93:6f:5e:e0:d8:
65:ae:bb:07:ac:c7:9a:3d:96:b6:d2:85:6f:5d:bf:
ec:46:48:80:8a:59:36:2a:2b:a5:cf:4f:c6:b7:4d:
ab:4f:7c:49:8a:74:eb:75:f3:09:81:47:cc:bb:0b:
79:4e:99:07:be:9b:eb:83:8c:cc:87:3e:b1:b0:3e:
b8:be:b4:12:c1:e5:26:70:81:1e:f1:fb:96:3b:3d:
49:c4:60:fb:ba:90:91:71:1b:1e:13:9d:92:19:c5:
58:4d:b6:a6:b6:76:4f:bb:d1:1a:3b:11:59:0a:a5:
b0:db:c5:19:a0:8b:33:05:4a:86:b7:ed:8d:eb:69:
bc:ba:43:64:a8:b2:09:8d:52:02:7e:3f:df:08:df:
4e:39:82:3c:cc:0a:2d:0c:8a:0a:b9:8e:d3:67:1e:
05:49:78:40:49:78:27:0b:b9:8b:3e:08:28:97:1c:
30:2f:14:f4:93:7f:d7:bd:f2:8b:f3:f5:f5:68:cd:
06:44:54:ec:bb:48:73:eb:bc:32:47:67:a0:39:cc:
bb:1e:8e:d5:5d:48:45:f9:6f:5f:0c:21:55:b6:8b:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:94:73:54:09:26:46:32:1E:3D:C8:4C:0F:36:65:1A:54:0F:FD:43
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9f:a6:30:8b:f6:38:2a:4c:69:ac:b7:80:4f:0d:56:23:7b:
ee:6b:ce:d8:8d:24:bb:7d:33:63:9b:5b:fd:be:14:49:df:e4:
55:0c:b5:c5:4a:51:ec:ea:45:a2:5f:ad:0f:9c:e7:cc:be:50:
40:8a:1d:37:32:c0:fd:49:87:db:23:e9:8a:68:b7:39:47:ad:
da:9e:3e:75:74:ec:e3:b9:b0:92:f0:66:60:16:77:5f:1d:57:
eb:90:31:52:b8:d6:62:ba:1b:10:34:cf:7b:4a:cf:87:f8:d3:
64:34:5e:eb:c1:a3:59:65:77:eb:8e:c2:99:e5:c7:a6:56:f1:
ba:9d:46:06:bf:6d:db:4e:5a:4a:51:48:54:33:34:86:df:54:
74:72:9a:66:15:82:f0:40:f1:be:be:25:43:2e:02:7f:35:8a:
c5:d0:25:fa:bd:bd:6e:cb:30:27:42:2f:98:4f:80:df:bd:82:
05:a9:48:c4:2c:a9:a8:bc:35:ff:15:77:4a:60:f0:f2:1c:99:
8e:7a:3a:04:ca:30:cc:29:9e:3d:b4:aa:66:da:0d:b4:0b:54:
09:fe:65:b8:51:1a:06:ec:9c:fc:e0:52:f8:c8:92:56:67:ed:
32:f7:8e:a9:0e:4c:15:90:3a:25:0c:0a:a8:ed:da:ad:c6:ea:
0a:25:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:19 2026 by rpki-client