Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: CLZz0/e7xwtX40ps08W2W29RYQrY9MU+yOziZmR92pI=
Subject key identifier: CC:2E:BB:D4:3F:AF:39:54:4F:4C:12:F4:8E:67:AB:AF:28:99:CF:92
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 01A1C1AF0E32626D957F7E5D262B95EAAC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 1AE5
Signing time: Mon 09 Nov 2026 19:00:37 +0000
Manifest this update: Mon 09 Nov 2026 19:00:37 +0000
Manifest next update: Tue 10 Nov 2026 19:00:37 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: ABsLD2wi6tB+9UG0B6bnOtWwng1oUgQWl50KcXYM6KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:af:0e:32:62:6d:95:7f:7e:5d:26:2b:95:ea:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Nov 9 19:00:37 2026 GMT
Not After : Nov 10 19:00:37 2026 GMT
Subject: CN=cc2ebbd43faf39544f4c12f48e67abaf2899cf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:0c:a3:06:34:cf:d0:ba:e3:7a:43:40:a1:
fe:32:19:22:db:e0:04:81:f9:cf:0c:80:6f:3e:33:
d9:07:ec:00:0c:3b:ff:c4:ee:2c:61:67:52:d3:20:
d1:50:46:17:ba:9c:38:44:08:f8:86:d6:7f:2f:98:
a0:8a:80:1a:61:98:0b:b1:e1:a9:ff:f8:5b:ff:60:
f4:c5:8b:40:bf:fc:16:18:dd:80:31:e4:8c:f5:bf:
51:84:1a:1c:97:5d:9f:ed:1b:c9:b0:da:fe:42:0c:
95:af:93:b8:3f:47:6a:a6:2c:0f:a0:7a:26:35:02:
ad:8b:84:db:14:d2:47:c3:c0:45:6b:a0:25:21:a2:
de:6d:97:68:c5:9a:b9:fc:f5:fa:ea:10:de:9e:fc:
ec:1c:31:92:96:37:f3:6c:4d:f2:45:c8:9c:0a:96:
26:29:b5:df:6c:9c:19:3b:a9:6f:10:82:b6:7b:65:
b7:39:01:a0:c9:a4:eb:60:83:22:69:cd:b1:27:30:
92:b6:05:89:c0:9b:cb:49:d1:f3:a8:90:1b:6b:a1:
06:5b:04:fd:c3:dc:66:35:cd:e3:74:fb:ef:f9:43:
98:ff:8b:44:f0:f7:2e:1b:fe:5a:ef:ed:00:a3:54:
51:b4:c4:d5:20:56:ef:64:cd:e7:cb:a7:ae:3e:59:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:BB:D4:3F:AF:39:54:4F:4C:12:F4:8E:67:AB:AF:28:99:CF:92
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3a:77:0e:6f:6f:f1:44:22:96:37:4c:7c:86:4e:8c:3c:f2:
a5:13:2d:72:3b:60:29:2d:34:1e:ee:5b:aa:75:0d:0f:d5:9b:
66:7b:94:82:27:db:5a:ef:ef:10:32:53:fc:14:eb:60:b2:e4:
8e:d0:22:15:08:7c:d8:63:ff:35:bb:15:63:45:c3:c3:c4:2d:
c8:fb:91:ef:63:c2:8f:57:2c:a8:86:18:b0:7f:f7:d8:ae:c1:
e9:2a:c8:32:11:62:f2:00:f4:5e:d6:13:9b:9b:d2:17:9f:75:
e4:11:06:bf:6f:38:fc:1f:c8:14:15:df:15:5c:c6:65:dd:f8:
99:00:f2:82:b0:e5:4d:63:1c:96:87:44:03:1b:a3:e0:75:2a:
35:76:87:3a:ad:18:81:8f:ef:31:5b:28:63:43:81:0a:fa:d8:
2a:6f:8e:c2:f1:e0:bb:85:7c:1c:33:9e:d8:b9:f0:7d:78:3c:
6b:c7:6e:3c:14:77:49:ae:3a:7b:3a:a9:18:7b:d8:c1:b2:75:
f3:b1:dd:94:3c:da:ba:a5:4c:0c:65:5a:c0:93:92:0c:7c:f9:
d6:06:e8:32:ab:31:65:ac:7f:6e:3c:87:fa:03:70:95:97:68:
98:d1:e0:e4:8f:1e:5c:39:30:18:95:a3:07:5b:10:9f:64:ca:
1a:cc:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:42:59 2026 by rpki-client