Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: S6+SG8yBmBraKtFeMPOLkFdlZf85umMxLEKDvq8PHIw=
Subject key identifier: DD:C9:5E:6F:8B:B0:46:40:93:CE:84:64:98:6A:EE:86:42:55:A2:57
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 01A197D7FE5B6ABC845E4EEE32D8F3201C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1AD1
Signing time: Sun 01 Nov 2026 16:01:17 +0000
Manifest this update: Sun 01 Nov 2026 16:01:17 +0000
Manifest next update: Mon 02 Nov 2026 16:01:17 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: p3eWgvWbd/wtbRPdDZQmAt8UzOQjR2K98UdVo5QJo/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:d7:fe:5b:6a:bc:84:5e:4e:ee:32:d8:f3:20:1c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Nov 1 16:01:17 2026 GMT
Not After : Nov 2 16:01:17 2026 GMT
Subject: CN=ddc95e6f8bb0464093ce8464986aee864255a257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:20:7f:75:a3:75:00:f6:d6:da:f0:c0:69:
42:7b:5e:0d:ca:3f:a0:a7:7c:f9:c4:19:4d:1a:fc:
ea:cd:f2:c6:06:35:fb:1c:08:aa:32:4a:7d:5d:a8:
20:d3:e3:a7:51:b8:f6:14:b1:6c:bd:f1:3d:e1:c7:
e8:69:19:28:bd:97:70:8e:18:23:c7:10:7b:d8:73:
d6:85:d7:0b:53:7e:c8:b5:60:93:e4:3d:b1:5d:93:
dd:0f:47:8e:c2:1a:08:fe:7c:05:54:9a:50:3a:b9:
92:d3:2b:df:2d:90:d4:44:d7:be:14:f6:7b:8c:5d:
bd:f1:05:5a:cf:f8:2b:20:f3:f9:58:76:a5:ff:0c:
66:a5:a0:78:d0:63:08:87:6b:35:92:b9:01:d8:9e:
e2:0b:67:b0:c1:b9:83:26:c6:19:0d:55:8c:ce:f3:
79:3b:60:fc:a9:df:6f:72:56:fe:56:c9:80:75:c4:
05:be:74:9f:44:1f:d1:6b:c0:3a:54:97:71:5e:d7:
cd:43:dd:77:7d:ca:4b:d1:54:f9:e9:74:af:fa:6a:
42:e4:d9:9b:fc:eb:1c:d3:83:d2:84:5a:01:3e:03:
40:5f:ff:3c:71:83:9c:06:09:eb:6b:cf:50:cb:62:
ff:95:05:9a:7b:6b:e0:5f:36:b5:dd:61:9e:67:1f:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C9:5E:6F:8B:B0:46:40:93:CE:84:64:98:6A:EE:86:42:55:A2:57
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fa:d6:e3:42:2e:ae:2b:53:4a:f8:ff:93:14:81:a5:b5:64:
6b:bf:4d:13:cc:85:6d:82:7a:e3:4f:8d:ae:f5:cc:4e:4e:86:
bf:b2:99:6e:87:72:8a:e0:42:54:88:7a:b7:d3:4d:20:9f:49:
e8:98:f8:e4:b7:14:d4:4e:ea:bd:57:ff:3b:08:a7:4a:e6:6f:
ae:55:58:82:1e:38:c2:35:be:0b:66:0b:3c:cc:17:73:29:29:
e3:08:d9:0e:44:a9:df:a1:49:05:ad:09:a6:25:84:54:fc:c5:
62:9f:f0:e3:2b:c7:0d:11:ef:30:90:cf:78:b3:82:a9:6b:0c:
83:fe:70:37:6a:9a:a9:ad:6b:64:c3:8e:d1:ce:e5:03:94:cc:
fc:4f:b2:e9:9b:62:b2:c7:b0:95:2a:ce:b2:46:e9:61:4b:d1:
0a:f6:f6:4c:5d:45:db:e9:a4:50:87:70:a1:cf:95:20:26:66:
cd:69:09:dd:13:05:83:4b:8c:ea:73:54:f4:96:54:a0:16:eb:
ca:8d:cf:ef:1e:7f:b5:80:e2:48:fb:63:d4:38:be:b1:65:c5:
ba:20:55:a1:c8:9a:71:ef:9c:96:be:c9:e3:ca:59:be:5f:f4:
55:d4:d5:00:ef:a2:25:b8:c1:68:fd:d6:76:3b:b8:c2:b3:19:
9a:29:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:05:04 2026 by rpki-client