Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier: fFjj33oiCb9R1P9RD+1viGIVbwMxWZzN/pei1DT4bVs=
Subject key identifier: A4:1B:20:1A:A0:B0:0B:C5:D5:DE:36:ED:65:1E:80:BB:0D:3F:05:40
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 01A1C63493C1259392CA7823C449AB19CD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number: 17AB
Signing time: Tue 10 Nov 2026 16:04:56 +0000
Manifest this update: Tue 10 Nov 2026 16:04:56 +0000
Manifest next update: Wed 11 Nov 2026 16:04:56 +0000
Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: tC7ZUzw4mN9bY90zHLRgwBqs38zScRdCYzmK9JtD+h8=)
2: xIF2UGZRRTWnw2cURV0PZKTBa6w.roa (hash: jOXJYZwibplzOq9OM0jJw8XY3WOY1xhVWRMp1xB8JX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:34:93:c1:25:93:92:ca:78:23:c4:49:ab:19:cd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Nov 10 16:04:56 2026 GMT
Not After : Nov 11 16:04:56 2026 GMT
Subject: CN=a41b201aa0b00bc5d5de36ed651e80bb0d3f0540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:f9:4a:01:50:f7:f3:a5:cd:5f:28:0d:2a:
97:f3:92:fe:50:71:ab:d5:71:ae:72:72:8f:74:4e:
a9:9e:7f:e1:93:83:56:d7:37:f6:fd:f4:72:2c:41:
01:44:f6:9d:db:5e:ac:fd:53:4b:3b:14:27:3e:92:
25:c8:0a:68:d6:28:00:3c:13:92:54:65:5e:f4:8d:
44:c1:22:f2:1b:1c:c3:a2:ec:64:04:51:eb:48:bf:
50:3d:20:f5:be:3e:08:c5:74:b5:02:5a:98:72:71:
03:e6:33:4f:57:dc:0a:4e:56:c8:1c:b6:c3:71:43:
e1:56:bd:d2:ab:c9:dc:a9:07:97:ab:c7:21:3d:73:
48:63:9b:0f:10:00:01:4f:14:94:49:66:79:51:fd:
19:cc:8d:1e:1d:01:64:4a:cb:a8:f6:bc:92:cf:3b:
f6:e2:82:fd:58:83:6b:ca:22:f2:e1:d8:cb:56:67:
a9:6e:66:28:8f:08:9c:e6:87:f3:7c:9c:9f:63:1f:
65:22:78:af:25:6e:a5:30:4e:76:22:cd:71:61:8d:
82:3a:ab:4b:a7:98:10:35:6b:24:55:53:ca:59:ad:
a1:f4:3d:ff:13:66:b4:73:b9:70:44:35:a5:7f:c0:
e5:48:54:49:09:5a:ab:de:5e:f0:8a:7f:ff:46:7a:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1B:20:1A:A0:B0:0B:C5:D5:DE:36:ED:65:1E:80:BB:0D:3F:05:40
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1b:7e:15:f5:52:b6:a3:ed:b9:37:2d:67:91:a3:d2:f0:e4:
fa:ad:00:b7:b7:86:bf:f9:9f:e6:bd:77:25:2a:1c:98:21:a3:
2d:27:5b:70:73:33:62:6b:34:65:6b:58:fc:53:e5:79:63:22:
bf:36:a9:89:b3:45:50:b1:71:76:4e:92:31:a0:67:c1:b2:4c:
d6:71:3d:05:c8:c8:36:bc:f5:f4:85:0f:7b:9e:70:ad:66:2f:
59:cd:88:53:de:d8:71:fd:a7:b0:e0:c6:9e:b9:b9:50:91:b3:
c9:ee:b3:10:29:f5:67:bf:67:49:db:86:db:50:55:75:08:bf:
b6:6d:59:e5:49:72:d9:ff:b0:e4:ba:7a:15:be:8b:fd:f8:27:
7d:37:e9:4e:80:3c:e5:f2:2c:f2:7c:c0:86:0b:23:37:f0:a1:
bb:3f:68:47:1b:5a:93:5d:7d:81:04:52:4d:d7:48:18:80:47:
ec:a9:db:9e:c5:2d:b4:c1:7e:ef:86:d5:c6:3c:2c:18:8d:46:
a7:9c:f9:ce:08:40:a6:8e:11:60:8a:14:30:9a:50:e3:a0:43:
c1:ca:19:08:ab:f8:63:44:b4:80:64:39:62:f8:e3:df:e7:99:
16:3d:4a:97:05:d0:90:89:99:13:f2:42:12:df:50:9e:4c:09:
d4:f6:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:02:43 2026 by rpki-client