Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: j8gEQn/p7UvNQjHR9tuORsiLMZoLaED0xuqHwkYQuo8=
Subject key identifier: C5:F1:D8:8A:47:DF:69:B2:5F:50:5A:FB:0C:71:28:E5:D9:F1:ED:AE
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01A1C065D97D175F8F34AFA308DD30366E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0C03
Signing time: Mon 09 Nov 2026 13:01:02 +0000
Manifest this update: Mon 09 Nov 2026 13:01:02 +0000
Manifest next update: Tue 10 Nov 2026 13:01:02 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: I/zgNHRAbG9DQ2olRvxKqtY8fXPo9u1cAzaTag+Fk+Y=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:65:d9:7d:17:5f:8f:34:af:a3:08:dd:30:36:6e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Nov 9 13:01:02 2026 GMT
Not After : Nov 10 13:01:02 2026 GMT
Subject: CN=c5f1d88a47df69b25f505afb0c7128e5d9f1edae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:52:97:82:4d:26:6a:14:eb:db:f4:78:13:
67:84:32:58:fd:75:e2:5e:a6:05:96:de:bc:06:4d:
eb:c5:80:84:31:45:85:d9:29:a5:ea:57:b9:37:81:
e7:21:72:24:76:c5:27:e7:96:1a:0d:55:e3:f1:1e:
1d:ab:ec:c1:c3:05:d9:e4:0f:65:ba:c8:ac:59:58:
1c:a9:ab:df:cc:99:fe:06:f7:1e:a6:a2:6e:b6:f8:
d3:7b:46:65:88:18:b9:47:88:3b:20:5d:b8:ad:c4:
ec:e3:ac:b6:e8:2b:66:db:ca:8d:5c:03:88:b4:5e:
bd:b3:38:ca:9c:d3:23:05:a2:f8:da:3d:75:ff:a4:
fe:1e:5c:38:53:57:a6:4d:32:a1:00:9b:bb:e1:db:
10:91:53:ad:3f:1d:01:84:28:a4:f5:da:28:8f:71:
9a:6d:69:d0:b6:e0:c7:a6:1f:89:f0:49:a3:75:6c:
aa:28:11:0e:77:c9:9b:ab:36:b6:c2:ed:10:6b:c1:
58:dc:85:e1:d8:a6:bf:c4:70:a7:f9:35:e4:5d:aa:
08:2b:9e:17:8e:c8:34:72:e8:3a:7f:df:a1:f3:13:
c7:39:54:5f:85:eb:1c:3a:b6:14:1b:9a:bf:16:6f:
93:dc:67:2f:05:78:0d:a7:4c:d1:6d:92:db:0e:03:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F1:D8:8A:47:DF:69:B2:5F:50:5A:FB:0C:71:28:E5:D9:F1:ED:AE
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:6d:2d:b7:9c:01:ba:c2:d1:e2:37:bb:d8:3a:ad:86:00:
a1:0b:8c:8e:4c:98:67:ba:c9:1d:11:be:73:14:37:52:84:7a:
2e:78:ad:8d:3c:a0:8c:39:2c:dc:1c:00:b5:e5:c9:f4:7e:13:
13:2a:52:5f:19:8a:4c:39:95:68:d1:4f:63:a3:ac:d2:15:e9:
f6:bf:dc:bb:d6:d5:ee:50:cf:b0:9e:0c:f0:11:71:c0:31:27:
10:9a:af:00:fb:c6:73:0d:57:32:a3:22:45:41:0b:42:9f:3a:
89:27:eb:5f:cf:c1:97:23:f3:61:3c:d9:cc:b0:73:78:70:29:
38:b4:80:e3:a4:4a:55:0a:80:c5:15:ef:b5:3d:d6:42:a0:f6:
7d:96:95:3b:61:cd:69:55:f3:39:d2:78:de:79:8f:99:e8:33:
c1:e9:21:2f:63:7b:1d:24:a5:1d:d0:fb:b9:c1:69:e3:98:44:
11:54:f4:09:b2:c4:a0:21:5b:1c:41:ab:1e:97:2e:fc:ef:f4:
3a:46:d0:8a:b4:a4:50:7e:b8:4c:2d:14:f7:62:2a:d6:37:e3:
19:ad:8c:33:05:49:fd:1b:39:62:79:b2:9d:89:a4:49:e9:8b:
c0:43:df:a4:fc:b5:49:0a:1f:69:3e:27:56:54:5a:5d:4a:55:
e2:69:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 17:42:40 2026 by rpki-client