Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: P2enimtdW/4nPqbZfTH8+fhRWQdKaoZaC6ydjOOqxZ8=
Subject key identifier: CF:BD:C8:3B:A2:DC:B1:9C:AA:B5:74:49:FD:6E:10:7D:C8:1F:D0:8C
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 01A1DE70C9D880489D273F4CB2BEB1BF4C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0C45
Signing time: Sun 15 Nov 2026 09:01:36 +0000
Manifest this update: Sun 15 Nov 2026 09:01:36 +0000
Manifest next update: Mon 16 Nov 2026 09:01:36 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: ZjajPY+Qfg0ve8V1NOVjU//8HHcRJ6lVVtJm51oSPo4=)
2: EZY7A-eju651goeVkZLLp1VSmig.roa (hash: aCnJkcFWyIJao1foOWzQ1b4E1esuGzdYX4+9n2A6cdM=)
3: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (hash: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:c9:d8:80:48:9d:27:3f:4c:b2:be:b1:bf:4c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Nov 15 09:01:36 2026 GMT
Not After : Nov 16 09:01:36 2026 GMT
Subject: CN=cfbdc83ba2dcb19caab57449fd6e107dc81fd08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:cc:35:78:79:d6:17:0c:4c:ac:c1:40:ee:
db:2e:47:a6:3c:47:b9:77:53:6c:1c:bf:9f:f2:2e:
eb:d7:f2:bd:29:46:fc:b8:fb:e2:10:32:f4:79:4e:
ab:09:21:fc:e3:38:71:84:9b:a6:0f:50:eb:b6:d5:
0b:43:38:59:62:db:ec:5b:72:41:b4:9a:a9:8a:19:
9e:d4:7f:85:c0:9b:88:15:19:17:6e:c5:80:18:79:
55:2a:e2:d8:37:c7:17:bd:4f:e9:a6:c9:d3:d4:aa:
54:c1:a8:67:e4:66:a8:79:bb:09:8d:54:73:82:9b:
00:aa:f8:50:99:fe:ac:19:58:15:0b:d1:6e:ea:11:
5a:bc:57:83:9d:5e:dc:3a:2d:15:0b:71:0e:15:22:
b5:94:2e:1e:16:da:83:8c:ab:4a:4a:fe:ac:fa:e7:
40:10:a5:71:7e:92:5a:6a:65:3a:95:31:af:1e:35:
34:ce:66:17:4c:3c:61:db:f0:b7:9a:59:ea:b7:be:
30:3d:38:8a:dd:be:eb:90:9b:10:8f:cf:f2:be:5f:
74:b3:dd:f4:eb:21:d5:4e:9c:37:e7:7c:2e:53:24:
8d:a2:86:b2:38:30:e9:7b:02:5c:87:67:59:a8:97:
f0:d3:6c:00:ba:dc:b7:7d:7a:1a:b6:af:e2:ba:9a:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:C8:3B:A2:DC:B1:9C:AA:B5:74:49:FD:6E:10:7D:C8:1F:D0:8C
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:53:34:93:34:0a:c3:75:78:04:05:bd:6c:e7:51:0a:c6:3f:
66:6b:73:d1:f7:05:e1:5b:87:cd:15:70:b5:3f:b2:39:6e:00:
09:e7:32:92:bd:ed:21:41:bb:f5:f1:a8:7b:53:6a:13:59:65:
a1:01:e3:0d:76:a9:7c:8b:b2:09:d9:45:7d:40:0f:02:f6:cc:
6b:e7:48:17:d5:a7:77:13:54:5a:7a:b4:47:5f:42:0f:21:2f:
90:60:a1:63:74:98:2a:70:42:ec:77:d2:3c:3a:2b:34:18:d9:
b9:27:64:4d:f0:23:a3:0b:43:17:47:b1:74:7b:bd:d8:58:70:
15:73:fe:dd:54:6e:52:2d:75:80:73:39:72:89:13:ab:8e:4a:
df:e0:fb:a5:30:d7:d0:88:75:9d:f6:5a:4b:e3:d6:cf:97:37:
ac:9c:f5:ed:3c:14:fe:4c:6f:95:f1:d1:bf:f1:b4:ff:e4:f8:
fa:ad:83:69:f2:85:ef:be:3d:b7:19:67:c8:73:e4:c4:ea:bf:
f7:23:10:fa:3a:4a:51:4a:64:e4:e4:04:8b:3b:07:9a:a2:ff:
02:f0:54:59:b8:d4:42:18:14:18:79:6b:b2:23:ea:0d:de:e4:
7b:ad:de:11:13:f3:1b:0d:35:40:8e:7d:b6:da:9a:22:f1:93:
fa:07:90:f4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHecMnYgEidJz9Msr6xv0wlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1
Y2IzNmYwHhcNMjYxMTE1MDkwMTM2WhcNMjYxMTE2MDkwMTM2WjAzMTEwLwYDVQQD
EyhjZmJkYzgzYmEyZGNiMTljYWFiNTc0NDlmZDZlMTA3ZGM4MWZkMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ivMNXh51hcMTKzBQO7bLkemPEe5
d1NsHL+f8i7r1/K9KUb8uPviEDL0eU6rCSH84zhxhJumD1DrttULQzhZYtvsW3JB
tJqpihme1H+FwJuIFRkXbsWAGHlVKuLYN8cXvU/ppsnT1KpUwahn5GaoebsJjVRz
gpsAqvhQmf6sGVgVC9Fu6hFavFeDnV7cOi0VC3EOFSK1lC4eFtqDjKtKSv6s+udA
EKVxfpJaamU6lTGvHjU0zmYXTDxh2/C3mlnqt74wPTiK3b7rkJsQj8/yvl90s930
6yHVTpw353wuUySNooayODDpewJch2dZqJfw02wAuty3fXoatq/iupoCJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM+9yDui3LGcqrV0Sf1uEH3IH9CMMB8GA1UdIwQY
MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2
LWVlMDU3Y2Y5YzE2MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YxL2Q5ZTdlZC0zYzBmLTRhOTItODcxNi1lZTA1N2NmOWMx
NjEvMS8xLXlxbHJQeWJzUDVya1I4ZXl0UHJWTlJjczI4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVM0
kzQKw3V4BAW9bOdRCsY/Zmtz0fcF4VuHzRVwtT+yOW4ACecykr3tIUG79fGoe1Nq
E1lloQHjDXapfIuyCdlFfUAPAvbMa+dIF9WndxNUWnq0R19CDyEvkGChY3SYKnBC
7HfSPDorNBjZuSdkTfAjowtDF0exdHu92FhwFXP+3VRuUi11gHM5cokTq45K3+D7
pTDX0Ih1nfZaS+PWz5c3rJz17TwU/kxvlfHRv/G0/+T4+q2DafKF7749txlnyHPk
xOq/9yMQ+jpKUUpk5OQEizsHmqL/AvBUWbjUQhgUGHlrsiPqDd7ke63eERPzGw01
QI59ttqaIvGT+geQ9A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:27:15 2026 by rpki-client