Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: 7rRmh/2hZU1Rn2PLG7X3kvHmPvJl1Nhpf1lLAzwh8dQ=
Subject key identifier: A3:5E:09:B1:96:D7:8A:6C:A4:5E:6F:26:A6:4E:44:FA:E1:96:10:5A
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 01A1C44215993EDE3D287355E538E19464E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 17CE
Signing time: Tue 10 Nov 2026 07:00:27 +0000
Manifest this update: Tue 10 Nov 2026 07:00:27 +0000
Manifest next update: Wed 11 Nov 2026 07:00:27 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: yNnGP+Xuqsuu4+zIOcrpNVl/qu/yti4WBIRJkYY8zIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:15:99:3e:de:3d:28:73:55:e5:38:e1:94:64:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Nov 10 07:00:27 2026 GMT
Not After : Nov 11 07:00:27 2026 GMT
Subject: CN=a35e09b196d78a6ca45e6f26a64e44fae196105a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:bd:39:67:1c:cd:9b:da:6e:fa:db:a9:a5:
6d:fb:c2:16:36:61:d1:3d:1d:ed:de:54:82:38:06:
4c:16:2e:3d:ba:bf:88:8c:af:e2:b1:c2:b8:c0:56:
08:04:12:bd:24:e7:2d:b4:7c:e6:92:2a:30:ac:b8:
89:43:eb:7b:a6:86:8d:2f:fa:ac:95:4d:b3:66:9c:
84:b5:3e:70:42:77:02:bc:3f:b3:42:f0:b2:29:16:
64:08:df:4a:03:71:78:db:01:4e:67:15:33:ad:92:
55:26:b3:f4:08:54:00:d7:2c:69:fa:0c:93:00:74:
a3:2e:3a:c6:ec:5c:ab:f4:99:e2:63:d0:ca:b4:14:
05:f0:6d:fd:ba:aa:86:de:42:15:e6:c6:42:35:85:
18:34:ab:33:87:b9:ac:11:90:c0:80:44:fd:c9:5d:
2c:d9:26:af:e5:f6:ed:ea:bd:e7:94:27:8d:61:05:
5b:b1:fc:9a:48:ed:6d:a1:7a:eb:ba:59:b3:17:04:
0d:fd:2c:6a:e3:dc:00:3f:ac:d4:fe:9e:3f:15:43:
4b:14:00:bf:4b:16:2a:3d:e5:1c:41:df:89:c9:af:
a1:78:12:18:24:f1:38:8b:16:a9:d9:aa:9c:d3:99:
50:6e:c0:72:5d:79:66:ad:c2:04:c4:a6:78:b7:d2:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:09:B1:96:D7:8A:6C:A4:5E:6F:26:A6:4E:44:FA:E1:96:10:5A
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:15:07:09:f0:c8:36:4d:2c:65:c1:b4:a7:2c:8e:9c:d7:5c:
f1:b7:21:e3:b1:31:ab:4c:cf:cb:2d:62:24:6b:51:fc:7b:4d:
67:f9:3c:64:0a:89:21:37:23:b4:e2:e8:31:78:4a:76:41:2a:
74:b2:08:f5:98:49:06:77:66:73:b5:c8:c6:73:4e:51:ef:1e:
d9:44:12:89:6f:df:5e:56:f2:f1:c8:bb:f8:12:a5:25:92:9c:
14:f3:ba:14:79:12:ab:ac:86:55:07:dc:3f:e0:53:63:5f:0f:
34:41:01:19:d4:84:ad:e0:5f:ae:fb:71:3f:b3:1a:7d:a5:01:
7f:f9:4d:1c:95:e9:22:86:d1:41:27:c8:7f:73:4d:fa:8c:b7:
60:74:cb:97:85:f0:0f:f2:84:3c:aa:e1:6b:32:a9:ec:e2:72:
08:9e:d1:50:b4:62:7f:51:10:ca:45:2d:05:c1:bb:96:41:31:
3e:58:ff:82:98:f9:f8:30:be:12:b0:95:b0:f5:5b:5b:3e:10:
3c:7b:fd:be:c9:2d:3d:51:0f:b1:60:04:b8:c0:ed:a9:f4:67:
d8:c7:fb:2e:2f:9a:54:73:6f:6c:fe:40:96:df:d3:75:2c:54:
38:50:36:a1:6b:cf:8e:57:cf:f2:20:73:98:1d:4f:c0:ce:11:
85:bb:8f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 09:54:04 2026 by rpki-client