Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
File: C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft (raw, json)
Hash identifier: E8+U5ilde+cOD3imjEtTBn3LdqZkDgNDRazWKlI/G8g=
Subject key identifier: DC:44:CF:5A:28:4F:0F:C2:B0:BE:1E:6C:5F:15:A6:67:19:F8:85:A3
Authority key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
Certificate issuer: /CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Certificate serial: 01A1A7143D5CA8101D297E34D642FCFE9F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
Manifest number: 0321
Signing time: Wed 04 Nov 2026 15:01:23 +0000
Manifest this update: Wed 04 Nov 2026 15:01:23 +0000
Manifest next update: Thu 05 Nov 2026 15:01:23 +0000
Files and hashes: 1: C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl (hash: KFTp4DnoJOkxvqadztg12njlR/BORNVzGaYu+ni/M50=)
2: f8Fa-1BgGSCDRddRgU0_kBA1sf8.roa (hash: 3X3V1Td6yfTIoqJh6y0NH6OR9q9jh8r7Y0iQcYhxcco=)
3: q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa (hash: 6I5OLAD4XJOUPBEb7WYc+qrHbMwA5+oW8O7b01lul68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:14:3d:5c:a8:10:1d:29:7e:34:d6:42:fc:fe:9f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Validity
Not Before: Nov 4 15:01:23 2026 GMT
Not After : Nov 5 15:01:23 2026 GMT
Subject: CN=dc44cf5a284f0fc2b0be1e6c5f15a66719f885a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:72:2e:df:9c:a6:0b:98:aa:05:44:75:e4:
76:ae:99:a2:96:ec:8c:a8:a4:3e:80:2a:91:65:17:
42:3f:a2:40:6f:34:59:1e:26:a7:31:9f:df:5c:98:
e1:2c:5a:bf:9c:f2:45:da:72:1e:af:26:e6:22:9c:
3f:fd:25:cd:e0:ba:02:da:fe:64:2f:da:7d:ba:52:
94:d6:47:24:90:a1:73:1c:72:60:03:d0:81:d5:26:
ae:4e:77:9a:5b:77:75:26:0a:32:0a:bc:bc:de:3a:
60:90:e8:03:eb:b7:61:32:13:a1:91:a3:c4:5f:45:
dc:64:19:90:fd:09:6d:8f:13:08:c7:80:36:e6:d6:
f9:84:65:b4:7d:fa:f4:bb:5f:be:e2:f2:ee:b9:f2:
d0:05:b8:0d:60:8f:ad:c1:50:d5:64:b8:63:fc:09:
60:cb:f8:db:b7:0c:70:eb:37:6f:73:54:4f:11:11:
15:88:55:28:d2:1a:90:ce:de:71:96:ae:df:8b:98:
b2:b6:87:aa:b3:ea:a2:8d:6f:ba:61:5a:ca:4f:db:
ef:60:ef:36:6a:ad:63:27:9f:80:cc:f1:3d:56:bd:
ff:75:0b:bc:65:25:f5:c2:55:b1:d2:ff:97:ac:1d:
8f:1f:13:df:af:f3:74:db:49:84:4b:b9:b7:92:bd:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:44:CF:5A:28:4F:0F:C2:B0:BE:1E:6C:5F:15:A6:67:19:F8:85:A3
X509v3 Authority Key Identifier:
keyid:0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:43:13:15:94:1b:1d:ed:23:08:c9:4b:de:73:16:fc:51:dd:
a1:20:6b:00:17:08:69:eb:6d:bb:d5:4a:81:05:f9:8f:dd:44:
73:72:10:6b:c3:97:28:51:12:fe:e8:78:96:43:60:a9:f2:08:
1b:6f:3c:11:f3:2e:a7:b1:27:0d:3a:70:c1:3b:50:0b:36:ff:
3d:da:62:e8:38:7e:84:fb:b4:a8:12:50:e0:b1:00:da:35:73:
98:62:ac:0c:80:57:83:2a:53:ac:0f:a4:7a:46:53:c2:e4:22:
c4:eb:89:38:aa:b9:61:42:d9:3c:3b:83:03:cd:a8:17:49:2b:
92:a0:db:38:81:f0:f0:f3:94:99:5d:9d:ef:ec:d2:3a:3b:0d:
ab:c3:20:84:c6:9c:e2:a4:c0:79:35:4c:1f:80:bf:13:e5:f8:
d7:ec:17:39:92:9f:e9:9f:c3:33:b6:61:27:fd:03:35:35:4a:
56:6a:40:cc:9b:04:8c:98:0a:d1:b6:b7:35:44:5e:f8:6c:7b:
02:37:d3:35:38:b9:97:9b:d3:75:70:e5:e4:81:de:ac:72:7f:
76:48:4f:b6:85:9c:dd:29:ed:62:a2:63:8f:b7:d9:13:09:36:
b5:4e:9f:c8:7a:a4:8c:30:7c:23:e9:17:24:3e:6d:31:37:42:
ce:be:05:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:15 2026 by rpki-client