Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: KXmGHdSvVgxRiAyTPYi+gKjQg+igbRz9natt6t4f9Vs=
Subject key identifier: 56:36:E7:D2:3D:10:07:72:6D:1A:32:6D:B0:28:88:2A:49:0A:9D:16
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 01A1DD94DB801C7D98855560E86FD2078C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 1B07
Signing time: Sun 15 Nov 2026 05:01:22 +0000
Manifest this update: Sun 15 Nov 2026 05:01:22 +0000
Manifest next update: Mon 16 Nov 2026 05:01:22 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: xCL/dqOQat4z4cdFVA82/yxVFXTDHsy9K1ofvjOUheI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:db:80:1c:7d:98:85:55:60:e8:6f:d2:07:8c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Nov 15 05:01:22 2026 GMT
Not After : Nov 16 05:01:22 2026 GMT
Subject: CN=5636e7d23d1007726d1a326db028882a490a9d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:92:ac:36:d3:0b:35:f0:99:bf:72:5a:d2:72:
f0:5b:75:04:69:5d:6a:c6:05:0e:fe:60:bb:b0:7b:
ee:62:a1:3b:6b:23:79:d8:59:8e:4c:b1:4e:e3:52:
e6:7b:ad:45:67:c7:f2:ad:63:7c:7c:5b:61:0e:2b:
32:dc:e8:a4:4e:e3:ba:41:50:d7:d4:06:61:3c:a9:
82:56:a4:2b:fa:5c:03:b0:ce:15:e8:f6:01:3d:ff:
78:c0:93:97:7a:d4:13:44:d8:41:4d:63:76:12:7b:
6a:f2:ce:96:25:d1:5d:1f:32:e5:f0:35:0e:5e:ca:
e1:96:5b:2e:83:cc:f6:d5:ab:47:92:1c:0f:97:39:
c4:29:e0:8f:e3:36:84:a7:d1:c6:ab:af:a9:95:f9:
05:eb:83:c5:74:0c:4a:81:50:e2:3f:45:54:d0:98:
a4:85:c7:5c:8b:20:2f:98:f1:f4:b5:46:15:59:c2:
82:62:b9:46:c0:aa:67:b8:de:04:16:80:2f:83:b0:
fb:af:10:b8:bc:3e:a0:13:1b:ce:4f:fc:d0:47:14:
02:73:ac:71:3d:aa:e2:2d:c5:ac:2a:b1:b2:7c:43:
24:df:1e:9a:57:9a:93:dc:22:b1:22:8a:0d:85:db:
41:66:0c:60:e6:fb:c1:46:53:98:c7:d6:fe:80:89:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:E7:D2:3D:10:07:72:6D:1A:32:6D:B0:28:88:2A:49:0A:9D:16
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:06:40:4d:74:89:94:4b:ad:62:43:ba:c7:c9:34:bf:32:31:
56:f3:34:0e:40:57:5e:3a:1a:3d:f0:13:59:4f:bd:fa:50:bb:
3b:6b:9a:5b:fc:0d:26:4c:82:e7:dc:ba:70:d0:46:17:ad:1d:
8b:55:b3:be:34:ee:fb:71:51:0e:66:50:8b:8a:a9:b5:1a:58:
27:79:ef:fd:11:d5:23:17:73:01:99:30:bc:b9:64:52:2b:84:
28:4e:60:17:50:c8:75:1e:22:e1:0f:fb:94:9e:0e:e9:10:38:
e9:ea:47:bf:94:e3:3b:a9:d7:0c:d7:2b:38:cf:10:68:86:9d:
58:78:cd:c4:02:29:51:b0:34:e6:ad:d0:a2:84:44:b6:34:7a:
9f:4f:bb:d3:eb:9d:6d:9d:65:c0:e5:87:19:33:b0:64:79:0f:
20:c0:39:f8:7d:69:61:4d:85:e9:93:c2:1d:ad:e8:5a:24:ee:
7c:f2:1f:e7:df:bf:17:93:69:c1:cc:4f:ad:0e:5f:2d:5f:70:
b1:a5:31:f4:de:f3:56:11:2c:8f:08:b5:c7:8c:a4:b3:31:16:
fd:b6:5a:39:a9:2f:57:74:6e:31:14:47:1d:ac:b5:57:1d:fb:
8d:f7:db:dc:f7:0f:0b:f6:a6:ae:b6:78:a0:68:b7:1b:95:07:
80:b9:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:08 2026 by rpki-client