Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: ZODsYxFrSxaiztBWv+G99OVPu5iQaNAYXr9gvy3ixHA=
Subject key identifier: 3F:AA:E0:87:68:51:55:DE:17:78:ED:9F:6F:41:71:B8:0B:C4:9B:3C
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 01A1AC39B3F565E0A8EE1FDA68F309581C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 1825
Signing time: Thu 05 Nov 2026 15:00:25 +0000
Manifest this update: Thu 05 Nov 2026 15:00:25 +0000
Manifest next update: Fri 06 Nov 2026 15:00:25 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: /sO7xIlW2n8uBqjRdUbHI6TwFsMJvPWGthjEeMkjO0Y=)
2: DvhjlrD4k8Ln_aeRkLT9oX8WaAo.roa (hash: yhb5vBNekieAt8tCcz4pxh0ekvD8nMPbWHt3jJMgJRs=)
3: iwqmKLXUuOArXvbBkZW7y-ChZt0.roa (hash: YnoIi/iHGRKLb9cTSBFYYYySVFtx+jH8kBK+SYHWRvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:39:b3:f5:65:e0:a8:ee:1f:da:68:f3:09:58:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Nov 5 15:00:25 2026 GMT
Not After : Nov 6 15:00:25 2026 GMT
Subject: CN=3faae087685155de1778ed9f6f4171b80bc49b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:79:7e:fb:85:d2:f0:0d:2a:98:4b:d6:dd:
c5:56:c6:9f:e7:4e:fa:cf:46:bc:cd:9e:b9:a5:fa:
9d:e5:8c:91:3e:b2:66:04:59:68:df:f5:78:8d:a2:
68:f6:bf:89:8a:77:52:0b:5d:ca:f6:b3:05:5c:7d:
c5:41:2e:43:f5:7d:d1:41:ac:f7:28:2b:26:87:4b:
43:3b:0c:c8:03:09:54:59:b9:5c:16:63:7b:c5:d0:
96:d4:55:29:0a:9b:cd:f8:1d:e9:d5:2a:3c:ce:b8:
a8:b4:e1:37:0e:e7:77:ee:0f:40:56:4b:b1:f2:a1:
e1:67:92:3b:71:1b:fa:8b:b6:80:23:29:98:60:dc:
82:58:f9:3f:49:09:f5:19:25:96:12:8f:9e:71:db:
c6:55:4a:63:6e:4c:e2:73:84:34:50:22:bd:37:77:
91:88:5a:21:8e:12:9c:a1:bb:27:bc:10:85:0e:7f:
a1:ec:92:3b:d9:e8:d2:03:f1:7c:e3:22:5f:5e:31:
e7:0e:6f:b1:8b:48:aa:c9:48:a6:12:b1:ce:78:e2:
ec:2a:d2:bb:57:b1:10:3c:66:c2:14:46:b1:64:35:
dd:68:94:04:1e:92:76:fb:bc:b2:48:b9:55:23:0f:
7b:38:2a:92:78:62:5c:76:e0:3f:59:fe:88:0b:12:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AA:E0:87:68:51:55:DE:17:78:ED:9F:6F:41:71:B8:0B:C4:9B:3C
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:19:92:3a:cf:72:0b:10:45:93:ab:bb:0e:48:db:3c:f0:6d:
37:61:4c:1b:ec:be:1e:32:d1:46:94:0c:17:d1:6c:64:e6:fa:
8a:84:6f:fd:79:ba:b0:a6:99:e8:e1:95:1c:6d:b1:2e:a9:fb:
20:62:93:33:5c:01:19:59:14:16:88:c0:18:3e:aa:4c:90:f5:
9d:28:0d:ac:c6:f6:a4:e1:fc:ff:a0:36:96:35:95:ed:d8:d0:
5e:ac:00:4d:52:29:6e:22:52:17:94:18:a8:85:20:bf:48:8f:
a8:3b:d5:67:dd:69:ed:97:5a:93:b2:06:ea:cb:22:e3:87:a1:
11:cd:7c:bc:3a:28:c9:a8:74:f4:bc:63:31:e6:fa:57:c3:19:
31:9c:16:8c:f6:a5:27:d6:fe:a1:42:80:9d:cb:8a:56:35:21:
7f:13:d7:d7:80:42:06:ab:22:24:b3:2c:da:ef:ee:25:8a:62:
e3:a9:ec:26:85:db:2d:cc:76:79:bc:0f:c2:bf:79:3c:96:b1:
de:3b:a3:78:29:a3:73:4a:dc:6a:72:ed:b7:ae:2a:aa:74:50:
d5:77:f5:2b:f8:a9:f1:23:74:29:38:38:a7:63:0c:8f:e6:85:
50:0d:a2:e9:39:26:95:60:eb:61:ba:97:3e:dc:10:db:af:0a:
3c:54:0b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:49:07 2026 by rpki-client