Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: G38g56/NwI3M81haTkGQUynIKiclLRB5C/HnNZ1emYI=
Subject key identifier: DE:8D:71:84:4F:2A:0D:92:C6:AA:41:FA:DC:F3:05:06:43:83:48:6A
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 01A1DE715A5CA4D3EEF665CBA90160E4C3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 09:02:12 +0000
Manifest this update: Sun 15 Nov 2026 09:02:12 +0000
Manifest next update: Mon 16 Nov 2026 09:02:12 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: Fqi0j+0c0sR9BWRDGex/ef6SgZ3Mj8ozJF9I5S1xq3c=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:5a:5c:a4:d3:ee:f6:65:cb:a9:01:60:e4:c3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Nov 15 09:02:12 2026 GMT
Not After : Nov 16 09:02:12 2026 GMT
Subject: CN=de8d71844f2a0d92c6aa41fadcf305064383486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:2b:16:55:97:7a:b2:0e:8f:eb:22:ec:95:
3f:9f:0f:96:5d:74:99:8b:6b:2c:71:c4:10:f7:db:
98:2d:67:e7:1c:3e:16:60:6c:2b:34:90:cf:f7:d7:
27:2f:1a:45:af:4f:f8:18:8d:a6:6f:19:b5:a1:f8:
96:6a:80:a1:36:4a:2d:65:57:3e:dd:77:e5:ad:d6:
78:81:c4:f4:54:86:d8:46:a8:38:0e:6e:18:bb:52:
85:9c:84:21:19:5a:ac:dc:25:c0:15:79:97:3d:0b:
ef:15:f9:4a:a3:99:83:e9:a1:ba:1c:45:ed:18:72:
17:10:53:a3:3a:c0:a4:bb:cf:5e:47:58:99:d9:fa:
f1:e3:d7:ab:48:4d:aa:da:3c:f2:aa:20:e1:9a:ff:
93:39:e5:88:f9:20:bf:4e:1b:1b:c9:ef:77:14:14:
40:70:04:30:63:e7:49:4a:3a:f2:7a:9c:54:59:28:
49:ef:c8:b1:b4:96:c7:72:e8:12:59:2d:2f:7d:2f:
8e:a8:e4:aa:d1:45:d9:67:92:74:a4:e3:a0:46:d9:
ed:2b:f5:04:e8:dc:59:86:f6:5b:55:32:e5:68:a3:
29:4d:f8:ef:75:18:34:5b:cd:0a:bb:7b:a0:12:c1:
61:03:fd:b9:06:83:0c:5c:53:7d:77:12:cb:37:1a:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8D:71:84:4F:2A:0D:92:C6:AA:41:FA:DC:F3:05:06:43:83:48:6A
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3d:87:55:f4:2d:88:e1:2f:ca:cf:b7:e6:b7:c0:b7:e9:c5:
1d:e1:fa:48:d1:9c:30:7e:1e:0e:b6:05:82:71:38:b3:e9:0e:
8e:46:1e:18:a6:18:73:35:34:ce:10:6c:f2:26:54:25:74:de:
86:69:81:03:05:b5:7c:60:f2:e1:82:11:92:85:f4:b3:59:28:
6b:2a:08:fd:c9:bd:76:b2:17:44:33:17:be:6a:17:c5:9d:60:
f7:72:54:94:be:8d:7d:00:32:e2:92:e8:dc:f8:c3:c5:c9:e2:
fa:b1:17:ed:58:f6:e1:48:36:4f:c0:b5:6c:5c:23:54:b0:8e:
a6:c7:05:e8:3c:0f:31:c6:5f:4a:fc:c1:50:47:f8:73:39:f2:
04:fc:8d:80:75:8b:bd:88:97:9c:a5:bd:2b:83:54:0b:09:c1:
57:08:f5:4e:cd:6a:88:8d:62:38:39:cf:bd:62:2e:5e:6c:b6:
ac:d5:54:13:36:1e:83:86:d2:6e:e8:62:ee:a0:c6:35:22:b0:
c4:1d:1f:32:99:7f:76:eb:f5:ab:23:82:a9:96:9d:f0:a5:a4:
95:d0:77:c3:bf:73:bc:99:bb:ab:4a:9e:c8:c3:e4:b4:4c:44:
83:63:a2:11:0a:6c:12:31:d6:94:eb:56:ee:a7:ab:ab:8e:11:
28:d9:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:49:36 2026 by rpki-client