Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
File: 1CBnFtuSM_7qn465ct6JErxbg_U.mft (raw, json)
Hash identifier: AA7joATqWdoCHRSjoaLHzWhAf68JYB7gxI6xsV4uR20=
Subject key identifier: A2:A0:5E:7E:B4:0A:87:AA:42:EB:66:AF:39:D7:29:B9:4D:D4:03:F9
Authority key identifier: D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5
Certificate issuer: /CN=d4206716db9233feea9f8eb972de8912bc5b83f5
Certificate serial: 01A1927A307B0984C494372B9C1CE96A3642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
Manifest number: 014D
Signing time: Sat 31 Oct 2026 15:00:43 +0000
Manifest this update: Sat 31 Oct 2026 15:00:43 +0000
Manifest next update: Sun 01 Nov 2026 15:00:43 +0000
Files and hashes: 1: 1CBnFtuSM_7qn465ct6JErxbg_U.crl (hash: TkCs+OHMOUDv6iQGnoC6AoJ9NnFVmT/1psCspWgyIL0=)
2: E3b8U4MK9zLHSw0vVgZu65brCFM.roa (hash: boy8Q47zYskY8Da4ltEfvmVWaHLuWoM/3t70bBBpqRE=)
3: YfghBe7VMTFqE-kLeVs1Wdg80Qg.roa (hash: 5DBPLxm9csP2rBiY+V/zbPysPEH1rb2P5PzVpV2usmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:7a:30:7b:09:84:c4:94:37:2b:9c:1c:e9:6a:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4206716db9233feea9f8eb972de8912bc5b83f5
Validity
Not Before: Oct 31 15:00:43 2026 GMT
Not After : Nov 1 15:00:43 2026 GMT
Subject: CN=a2a05e7eb40a87aa42eb66af39d729b94dd403f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:9c:11:8a:b4:04:81:20:64:a2:34:d0:75:
cc:38:b0:2f:2f:cd:fd:c0:c1:b7:6e:d2:5a:94:7f:
66:d0:51:52:6c:52:7a:ee:13:47:38:0f:24:e8:30:
5f:8b:b0:71:57:e9:45:49:cd:4e:91:33:cf:88:f8:
2b:55:e5:a8:80:b5:30:c2:0f:36:b5:f8:86:39:08:
6d:aa:0c:ef:81:97:62:b0:f0:88:a0:aa:e8:f3:d1:
27:90:54:85:b8:57:44:57:d6:92:fa:11:af:2e:31:
27:12:82:f3:7d:e6:f0:80:37:cc:87:61:93:e5:d4:
b5:1c:58:c7:f8:a8:cb:07:47:70:3c:93:7f:51:0d:
87:43:3b:6f:d2:46:14:3d:e8:9e:3d:1b:c9:2e:ba:
73:fa:b2:aa:71:53:74:0f:a2:a8:40:05:de:dc:02:
98:93:d3:0f:0a:cc:b3:aa:1b:59:15:ad:3d:30:dd:
18:db:58:7d:8a:fe:a6:3e:d1:8f:7f:f7:af:45:8d:
cf:cf:55:ea:3d:c7:0e:d0:a0:18:c6:5e:c5:5e:ff:
b1:c5:fc:44:4a:61:64:db:24:bb:49:04:11:aa:9d:
68:63:ac:2d:5d:72:85:5c:9c:f8:00:7e:2d:b3:ac:
7b:3f:73:7d:bf:00:0e:1f:fd:a7:ae:88:f0:a8:60:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A0:5E:7E:B4:0A:87:AA:42:EB:66:AF:39:D7:29:B9:4D:D4:03:F9
X509v3 Authority Key Identifier:
keyid:D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:d1:e8:d2:af:71:30:20:94:01:fd:56:58:28:69:d4:fd:12:
d5:31:29:99:e0:ad:4f:03:58:49:1a:a3:f5:6f:6f:11:71:2b:
c1:1c:66:6b:1f:e0:f3:ef:87:89:90:dc:97:b6:fc:6e:ac:b5:
ef:9c:3e:8c:11:10:3d:a5:05:f1:24:e2:4d:53:6e:42:71:8a:
3a:ae:45:d9:32:d6:03:7a:38:c4:15:16:f3:76:16:f3:b3:33:
3d:2d:b8:0f:cb:e7:03:50:6e:ed:c6:18:08:f6:2a:a7:ae:70:
36:31:0b:d2:9d:7d:08:4d:f8:91:85:3b:89:de:3c:e0:01:03:
cd:9e:fe:60:d9:18:d4:9b:28:47:4e:a0:b8:c3:40:98:7c:e4:
02:af:88:4b:5a:3f:ea:65:b4:cc:9b:40:fc:e2:c6:28:2f:37:
1c:d6:f2:19:f5:53:7b:26:ab:15:b2:66:73:5d:d3:dc:0f:c5:
6f:8e:cd:ec:09:b5:80:82:51:f7:bb:a0:98:f1:60:86:15:f5:
7c:cf:e1:83:05:05:79:a2:0a:20:d2:68:ff:ef:b3:fb:55:41:
1f:f7:fc:2e:63:86:22:d7:16:7c:8b:bb:28:e3:3c:27:41:85:
76:3f:da:ed:57:7e:c3:22:f9:25:77:f2:04:4d:57:47:1b:fb:
cc:0a:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:12:50 2026 by rpki-client