Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: rSTyz+b9D4x1LWAXqB4NOibfgiCTdvIR6Kyk8A4ND3U=
Subject key identifier: 31:25:F4:EF:C3:14:A1:C0:27:29:FC:7E:6E:F8:55:E7:3F:48:11:38
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 01A1C14134EA419B772908C55DAC9813503D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1AE7
Signing time: Mon 09 Nov 2026 17:00:38 +0000
Manifest this update: Mon 09 Nov 2026 17:00:38 +0000
Manifest next update: Tue 10 Nov 2026 17:00:38 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: NF8QQO7QIu7k/3irGGCc4Tr5G94AL+bO9Q+lFqsY3Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:41:34:ea:41:9b:77:29:08:c5:5d:ac:98:13:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Nov 9 17:00:38 2026 GMT
Not After : Nov 10 17:00:38 2026 GMT
Subject: CN=3125f4efc314a1c02729fc7e6ef855e73f481138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:75:37:5a:10:de:22:09:4d:f0:2e:d8:59:
88:8b:88:0c:02:62:59:09:ea:ef:6b:28:b1:8b:0d:
73:73:1f:47:e8:46:31:90:12:26:13:9c:79:96:2f:
a3:5a:f9:9b:85:a1:5c:cc:36:8e:84:91:cf:bb:1e:
1b:e2:4e:bf:1a:68:47:c0:a5:18:e2:16:90:f8:d1:
af:be:04:bc:14:da:cb:70:79:f1:16:1b:a1:a5:eb:
b4:ae:28:55:b2:b0:63:ca:74:51:70:70:12:b6:69:
b9:65:ac:65:99:5e:31:35:9e:1b:5f:7e:95:58:6e:
87:b7:56:ed:53:76:43:46:7d:de:83:1c:8b:47:b9:
1e:23:d7:3b:3c:78:d0:b4:1b:31:4a:7b:ad:63:ad:
ee:39:29:b5:9f:41:e6:a0:14:20:f2:b3:26:c2:60:
75:6e:15:9c:4d:63:9a:5a:18:08:13:2e:00:7f:34:
5d:39:4f:b5:69:6e:c0:19:b3:80:bb:6d:7f:16:1e:
8c:8e:bd:3d:fc:93:91:bf:cd:08:25:00:76:3d:39:
8b:da:bb:31:bb:cf:de:5a:4b:1a:91:da:ab:80:d0:
e8:79:20:eb:29:29:60:fb:7f:e1:9a:6e:66:6f:32:
2d:3f:11:af:a7:e8:4a:7f:80:fc:a9:d0:7d:58:d4:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:25:F4:EF:C3:14:A1:C0:27:29:FC:7E:6E:F8:55:E7:3F:48:11:38
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0d:c3:e3:5b:37:fa:12:ea:26:bd:a0:c8:ea:74:74:72:de:
07:6b:2f:dd:0c:92:0c:ce:25:97:cb:16:01:06:a2:33:b9:84:
17:fe:cb:07:02:77:c4:07:69:2b:6b:88:5f:5d:02:d9:f6:05:
17:5e:74:24:df:02:10:18:d5:29:b6:97:13:4a:7b:5a:bd:c5:
df:93:fb:cd:27:e8:44:ff:d6:34:33:5d:e8:df:bc:47:58:e2:
27:f9:1e:bf:f5:6d:33:b6:8e:40:70:5b:10:4e:0f:1b:37:95:
49:31:2a:57:02:92:12:c4:72:8a:cd:63:e9:0f:1d:1e:95:f5:
bf:db:c2:23:1d:62:0a:f6:f3:2f:49:29:4a:30:78:86:f3:a7:
8a:bd:66:9a:b5:de:a4:69:a2:f4:5d:bf:d4:07:c9:6b:33:f7:
31:12:1f:11:d5:25:4e:a3:4e:80:0d:4b:b9:c9:24:d7:8f:92:
f4:0a:1d:ac:18:25:85:58:8e:2e:fc:6c:ae:d4:30:a8:91:52:
35:be:b0:b3:21:8f:b0:f8:f5:d0:80:a4:92:9f:3c:67:9e:c8:
2e:55:ad:f9:ca:8f:2d:ab:53:54:11:05:a7:a4:ec:2a:fb:52:
62:50:15:17:16:1f:38:c2:c7:01:26:e2:91:7a:04:c6:14:d7:
90:55:20:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHBQTTqQZt3KQjFXayYE1A9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzk3NjA1MjBiN2MxNWMyZTQyNjAzMDgyNzJiODQ5Zjg4
ZWQ2NzcwHhcNMjYxMTA5MTcwMDM4WhcNMjYxMTEwMTcwMDM4WjAzMTEwLwYDVQQD
EygzMTI1ZjRlZmMzMTRhMWMwMjcyOWZjN2U2ZWY4NTVlNzNmNDgxMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTd1N1oQ3iIJTfAu2FmIi4gMAmJZ
Cervayixiw1zcx9H6EYxkBImE5x5li+jWvmbhaFczDaOhJHPux4b4k6/GmhHwKUY
4haQ+NGvvgS8FNrLcHnxFhuhpeu0rihVsrBjynRRcHAStmm5ZaxlmV4xNZ4bX36V
WG6Ht1btU3ZDRn3egxyLR7keI9c7PHjQtBsxSnutY63uOSm1n0HmoBQg8rMmwmB1
bhWcTWOaWhgIEy4AfzRdOU+1aW7AGbOAu21/Fh6Mjr09/JORv80IJQB2PTmL2rsx
u8/eWksakdqrgNDoeSDrKSlg+3/hmm5mbzItPxGvp+hKf4D8qdB9WNSkiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEl9O/DFKHAJyn8fm74Vec/SBE4MB8GA1UdIwQY
MBaAFA95dgUgt8FcLkJgMIJyuEn4jtZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUt
MDA0MjQyNWJhYjFhLzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUtMDA0MjQyNWJhYjFh
LzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdA3D41s3
+hLqJr2gyOp0dHLeB2sv3QySDM4ll8sWAQaiM7mEF/7LBwJ3xAdpK2uIX10C2fYF
F150JN8CEBjVKbaXE0p7Wr3F35P7zSfoRP/WNDNd6N+8R1jiJ/kev/VtM7aOQHBb
EE4PGzeVSTEqVwKSEsRyis1j6Q8dHpX1v9vCIx1iCvbzL0kpSjB4hvOnir1mmrXe
pGmi9F2/1AfJazP3MRIfEdUlTqNOgA1Luckk14+S9AodrBglhViOLvxsrtQwqJFS
Nb6wsyGPsPj10ICkkp88Z57ILlWt+cqPLatTVBEFp6TsKvtSYlAVFxYfOMLHASbi
kXoExhTXkFUgrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 00:55:59 2026 by rpki-client