Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: 0oid3wPTJI+mWVtzKLvrg4RVIX++CZYYU4EF2CYWb+w=
Subject key identifier: 66:15:B5:AD:21:5A:F5:F3:08:1B:8A:5E:BB:44:0C:4B:FF:1A:67:BB
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 01A1C25467B620A28AA84B7C81812D0DD7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 22:01:13 +0000
Manifest this update: Mon 09 Nov 2026 22:01:13 +0000
Manifest next update: Tue 10 Nov 2026 22:01:13 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: 6ufWlgKeeSw7m9Xdb/wCQIsISK3epd+noKR+l8G9gbw=)
2: uVyWlFLKciqrsAXXjZQjx39QcNU.roa (hash: jEDtg9ux39nelJUaz7u7+ZJxoa/PnUqwfRMuyqZC6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:54:67:b6:20:a2:8a:a8:4b:7c:81:81:2d:0d:d7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Nov 9 22:01:13 2026 GMT
Not After : Nov 10 22:01:13 2026 GMT
Subject: CN=6615b5ad215af5f3081b8a5ebb440c4bff1a67bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:ac:fe:e5:8c:f2:4e:40:64:ba:1b:0b:4d:
bd:ac:55:b9:80:47:ba:c6:01:5d:74:f4:79:d0:e2:
e2:17:39:92:31:fd:2c:e2:66:01:26:cd:7c:99:9f:
e3:c8:dd:da:63:0c:ae:74:0a:84:71:28:fc:71:55:
24:59:84:23:35:08:c1:07:45:e3:e9:c1:fc:ea:83:
dd:7a:bd:ab:a3:a5:20:ca:ac:49:48:30:3d:cf:77:
e0:d5:db:68:f9:22:1e:a1:31:4d:40:ff:a3:08:b7:
64:3d:16:a9:01:75:c2:59:60:0e:2b:56:64:86:f4:
8a:6f:c0:58:33:c1:6c:e2:35:a3:52:b6:c1:57:1c:
06:93:a7:44:5a:dd:41:50:b2:24:f1:65:b6:ab:6b:
33:51:93:34:d6:25:76:67:4c:1f:a8:a2:4a:f9:57:
f6:b4:c5:19:63:0c:66:73:55:70:e5:0c:a5:12:db:
da:3d:d2:59:ad:6a:79:95:5a:84:58:59:87:e5:c6:
67:24:0e:c3:4d:a3:7a:5b:5e:7e:21:b7:67:d3:b6:
2e:75:5e:41:f0:3a:8b:05:52:6a:3d:c4:7c:24:48:
18:ac:83:ad:dc:18:4e:b1:19:2f:16:d4:0b:21:63:
8e:e4:16:ec:b2:4d:8f:47:db:b4:1c:42:bc:9a:e0:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:B5:AD:21:5A:F5:F3:08:1B:8A:5E:BB:44:0C:4B:FF:1A:67:BB
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:88:67:e7:37:e5:94:18:c7:8e:2e:f3:d5:5b:8d:56:27:1f:
0e:b0:94:7f:d1:47:3c:c3:d2:ec:55:d7:02:36:00:43:3b:5e:
68:bc:7d:26:54:b9:5f:22:fa:da:c3:c5:ce:97:69:8c:15:f2:
37:85:87:5d:b6:e5:98:4b:85:ed:ff:c2:06:f9:50:99:53:ec:
0b:9b:65:ae:8b:3e:7a:dd:86:d3:f2:99:7c:05:b5:b0:6b:9e:
63:c6:8c:97:e3:9a:6f:d9:c4:ba:fe:53:d4:89:3a:57:69:ce:
9e:fd:af:ec:0d:a9:bb:ea:b5:3a:35:f5:f9:75:58:1a:23:65:
3f:8b:67:d2:ac:8c:51:d4:e3:b9:9a:55:7a:65:a9:f8:d3:97:
8b:de:67:09:29:c9:b0:3c:a1:f8:e8:1a:79:d7:59:00:f5:fe:
64:ef:29:4a:cd:83:aa:f7:a5:d2:2b:46:e7:08:c4:b3:2f:54:
80:0b:8f:b4:11:6b:27:20:dd:3b:cb:34:d4:87:a2:cb:85:78:
a3:fe:f9:7e:08:53:68:70:8a:93:3c:10:51:64:df:99:c5:85:
d0:7e:de:4c:6f:10:3e:36:83:30:14:17:9d:70:1c:0c:a2:f7:
64:98:f2:c8:f9:f2:76:62:af:4f:0c:69:05:e1:17:57:fb:8f:
fc:b9:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:01:53 2026 by rpki-client