Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: SONEaZDP5HI3KzO+CX+gFhsOxmJX0KoB6shc+KEX9/k=
Subject key identifier: DE:D1:5F:DF:B2:0D:50:FD:56:52:A7:75:2F:C9:BB:19:65:23:C0:85
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 01A18FE73FC7D948686B903F4C0F336929AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 04DA
Signing time: Sat 31 Oct 2026 03:00:59 +0000
Manifest this update: Sat 31 Oct 2026 03:00:59 +0000
Manifest next update: Sun 01 Nov 2026 03:00:59 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: Wtnqerr6JZxFiRFFg87PgGS5+zEtYPdL95a7LgtKVmk=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:e7:3f:c7:d9:48:68:6b:90:3f:4c:0f:33:69:29:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Oct 31 03:00:59 2026 GMT
Not After : Nov 1 03:00:59 2026 GMT
Subject: CN=ded15fdfb20d50fd5652a7752fc9bb196523c085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:e4:35:b0:40:76:a9:02:1d:d6:95:b9:ea:
46:3e:64:de:db:f7:b4:ca:10:30:19:18:57:fd:e2:
de:54:44:bc:91:6e:35:6e:cc:89:46:cf:0d:39:61:
6b:fe:b7:15:52:da:40:82:2c:91:7a:53:87:a0:13:
52:09:3f:8d:f3:c2:d3:33:ac:c4:50:b6:25:c5:7c:
3c:22:34:ab:0e:96:62:af:23:80:73:f9:fe:a3:b7:
8e:09:d2:ea:06:c2:e1:cd:94:23:dd:83:49:0f:f1:
1e:c2:21:d8:ec:37:49:80:d5:4d:de:3d:fd:1c:89:
68:92:82:a7:07:38:bc:c1:06:ab:db:a1:da:04:6c:
da:53:21:12:f8:5b:54:24:59:45:9c:0c:46:c4:08:
6a:05:2c:ad:e4:ad:b9:6b:10:0c:ab:71:df:87:5d:
08:25:dc:1d:d2:dd:98:38:04:83:43:b1:b1:20:87:
09:97:bd:5b:62:e1:d7:bf:a1:71:da:cd:38:36:ba:
d4:92:3b:d9:87:1f:2b:b3:9d:af:82:33:8a:2e:81:
8e:c6:00:62:38:8d:1d:59:1e:e1:eb:07:76:06:c2:
88:05:c5:40:ea:6a:85:0e:1f:27:8b:14:be:3a:36:
63:c2:6c:d1:3d:9a:ce:c6:67:c9:45:8c:ad:f6:27:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D1:5F:DF:B2:0D:50:FD:56:52:A7:75:2F:C9:BB:19:65:23:C0:85
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b0:cb:e2:ba:56:71:1d:14:de:8e:91:3b:26:23:6a:15:47:
64:79:fb:94:76:13:5a:79:5a:ec:46:e1:5a:7e:cd:4e:1d:ff:
a1:eb:cd:00:e2:52:8e:8c:2b:53:4a:cf:9e:e2:ec:7b:95:7c:
3b:30:f4:4f:82:b3:83:30:e4:da:51:26:cb:e4:a8:c9:43:be:
a1:b8:e6:2c:2d:1b:80:a7:cc:14:a9:bd:3c:ba:3c:67:41:04:
31:35:c1:15:67:16:80:e0:4a:e3:41:af:22:7e:28:ab:b0:72:
30:8b:fe:fe:6f:f6:a0:07:d8:32:0f:a9:13:d7:c6:2c:a6:60:
2f:37:6a:4e:2e:22:c7:87:ab:14:30:27:90:90:fb:db:a2:4e:
be:06:54:80:d7:d3:25:75:2f:ee:bb:e7:13:1d:f1:c6:78:8f:
04:4c:d6:36:ee:10:ab:5b:a1:b9:b6:ee:a0:31:d5:cb:1b:25:
1f:98:3b:7e:b2:55:b2:3a:70:30:d1:f8:c5:1a:06:62:4d:cd:
6e:ee:26:a7:a6:78:ae:7b:0d:3c:24:f8:08:1d:d8:80:f7:ae:
3d:df:32:9a:bc:f4:f6:a2:fc:7b:3d:04:e9:10:4d:1d:b7:91:
aa:d3:6f:9c:e2:bc:a0:ac:59:c3:bd:72:da:94:f2:b9:7c:40:
29:3e:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:45 2026 by rpki-client