Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier: WrjEld5GqpD7k89N5cXFMI2qZdp+zTNg4k7tLPS5BIs=
Subject key identifier: 3A:79:0B:B5:E7:3A:77:76:38:E4:B0:DE:68:8E:BC:C4:C7:80:23:E5
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial: 01A19BEBBE511CC3E2FE45FC27892FA00262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number: 1AD5
Signing time: Mon 02 Nov 2026 11:01:20 +0000
Manifest this update: Mon 02 Nov 2026 11:01:20 +0000
Manifest next update: Tue 03 Nov 2026 11:01:20 +0000
Files and hashes: 1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: 0KYyWsztl40iFp3VRKFyTKgHO+QlHNunxFuU1RpXx1A=)
2: XTIB3wAu-H5jaJDXDYV1NuX8wKg.roa (hash: XT8YNrFmajQC+0dTcA0EhEoUbR7GPWJZO+G57x2fMrQ=)
3: npLxbCkBfsvzh12Sr2_JC_OdCbc.roa (hash: F8mcnlSRs2fM48WMAEjA+peBFWEIlebDFAmNFUnpLxw=)
4: wFYmGE5l1chJ5-wTECpTY_pMIXM.roa (hash: hK07/sPk/5vCM2raR2H19xhYBW6r/31Luy7kDtFVbII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:eb:be:51:1c:c3:e2:fe:45:fc:27:89:2f:a0:02:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Validity
Not Before: Nov 2 11:01:20 2026 GMT
Not After : Nov 3 11:01:20 2026 GMT
Subject: CN=3a790bb5e73a777638e4b0de688ebcc4c78023e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:52:c7:2b:9e:be:15:3c:52:89:d4:84:73:
a1:6c:fc:a4:66:1f:fc:d0:82:e8:f5:be:ee:e8:65:
de:1a:8b:24:8b:d6:14:8f:2c:50:a4:0b:c0:30:5e:
66:44:ce:d8:4b:22:4f:f6:01:d7:f0:ef:e4:0e:9b:
bd:ac:c4:f3:e4:7c:8d:a5:bb:e0:2f:4c:40:5f:80:
06:1e:2d:66:8a:95:88:6f:7c:cf:2d:16:a9:e3:10:
c2:92:b1:69:a1:fe:05:bc:43:64:97:6c:91:43:06:
5d:46:79:5a:40:c5:60:fe:1b:ab:f2:7a:3f:d3:5f:
5f:eb:24:bd:87:c1:e4:12:25:c4:98:56:51:a3:3b:
8e:c0:d8:ac:d3:94:01:6c:96:d0:1d:2d:d5:d7:47:
16:ce:10:fc:1b:7a:69:fc:e7:97:b3:6c:02:49:e0:
f3:28:45:df:55:75:b4:fe:5e:45:70:25:7e:83:7f:
61:b0:41:2f:2f:74:35:6c:58:89:a1:e0:f5:d9:92:
f1:42:65:b7:05:92:5f:14:d9:8d:8e:85:fe:88:07:
20:9e:76:96:3c:43:21:b7:06:35:95:20:53:ed:f9:
93:21:dd:2a:a8:5c:fe:0e:59:ca:7a:d8:4b:fd:81:
6d:4b:c0:f1:70:a2:a2:ac:bf:ae:77:11:11:0f:73:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:0B:B5:E7:3A:77:76:38:E4:B0:DE:68:8E:BC:C4:C7:80:23:E5
X509v3 Authority Key Identifier:
keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a8:5d:13:31:6a:70:2a:da:2f:24:c2:b0:7f:08:28:f2:07:
4d:d5:29:52:a6:3d:81:0d:07:a2:73:f7:02:5b:29:0e:76:16:
48:8e:22:9e:1a:9d:5a:88:0a:46:9c:ca:d8:da:03:09:75:0e:
5a:98:8d:93:be:76:05:2b:70:1a:3a:dd:ef:d2:b4:69:56:56:
7b:e4:9e:36:f5:d4:cf:21:19:31:6b:b5:c0:23:9a:c3:5f:c3:
1e:9e:0d:0e:19:25:29:a5:2a:50:2e:a3:ad:90:09:10:95:7a:
ee:ca:41:73:89:a8:36:05:f9:13:b5:c2:21:e8:5e:26:a1:27:
7c:35:7f:d9:b6:2d:d7:50:24:04:52:eb:a6:81:94:73:da:5e:
69:1d:7a:e4:8e:68:8a:04:24:56:42:25:7f:5c:d0:01:36:39:
27:0e:11:b2:a5:09:3c:24:f9:c5:71:06:70:bb:ba:66:d7:64:
40:f2:1e:3f:51:f7:c2:27:37:a1:39:82:a2:23:9d:97:5a:59:
5c:2a:ea:3f:91:e9:67:20:92:6f:c4:ef:f8:71:61:e0:a4:bf:
61:7e:04:44:d1:48:f8:af:1a:9f:02:bc:8b:32:be:40:8c:ad:
d4:93:8b:0a:46:0a:d2:6b:d2:a2:a1:8e:14:02:30:6a:2d:b7:
90:24:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 13:19:25 2026 by rpki-client