Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: Ua7h9eNK8uKgNDe74piYaiHEq9YAI3Zuy0QUawc+3Ks=
Subject key identifier: 11:F1:89:FA:6C:A5:DA:BF:0F:8A:C1:4C:DB:24:B5:ED:6A:4E:94:A0
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 01A17C976EB4BC0468664F0EF9556E22B09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 1ACB
Signing time: Tue 27 Oct 2026 09:01:01 +0000
Manifest this update: Tue 27 Oct 2026 09:01:01 +0000
Manifest next update: Wed 28 Oct 2026 09:01:01 +0000
Files and hashes: 1: 1-ijVMFl6GCcC6GGP7jpRptAbkME.roa (hash: 6WwqDb4fLLuH7fqrOWTiw7oz+ZLJGp2PJoPRlWydUCs=)
2: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
3: RpRW9hgIjPMfAZ842QdrIrNI7fk.roa (hash: 3sOUZl0+LvcVI79+33YVuGWAx3JxO70FfZgzplNUMc0=)
4: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: 2KJHtyQ4RTeIIRnAVDcupQb+Wlk6OvHqsTJqoPSuftw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:6e:b4:bc:04:68:66:4f:0e:f9:55:6e:22:b0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Oct 27 09:01:01 2026 GMT
Not After : Oct 28 09:01:01 2026 GMT
Subject: CN=11f189fa6ca5dabf0f8ac14cdb24b5ed6a4e94a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:a6:da:74:7a:16:8e:5b:06:62:d1:ec:a0:
f2:6a:06:cb:2e:bf:02:30:2c:72:39:b5:07:5e:d8:
0d:3c:57:53:73:39:b1:f3:c8:05:ef:0e:e0:b9:ef:
63:51:13:8d:ad:94:c9:47:87:2c:09:12:a9:86:3a:
d5:9a:d8:bd:59:fb:8a:e6:be:73:68:60:15:32:04:
25:5d:bb:3a:49:ee:3b:8e:3d:ff:72:50:79:3b:85:
70:9a:c2:1c:d3:1b:70:3c:90:5f:46:d8:7b:f7:cc:
e1:fd:c4:37:cd:e7:8b:f8:91:af:cc:c3:6e:c1:a2:
35:24:7f:23:0e:a7:b4:7b:a9:5b:66:cc:77:d6:cf:
fc:35:86:97:cc:ea:c3:9f:ae:99:a1:ff:14:75:b8:
9c:95:f2:cd:19:f6:5f:bb:ff:a1:af:05:3d:1f:b5:
69:6e:a0:d4:72:e6:60:7b:ca:33:6d:9a:28:f5:bb:
f8:f3:bb:c8:36:d1:33:e4:e3:fd:ef:64:df:f4:03:
fc:a6:54:39:59:d9:ff:c1:26:80:87:42:b4:41:f2:
6c:45:f0:cb:5d:b2:1e:40:9c:b2:c8:62:54:b2:09:
ea:73:a1:14:47:ba:8f:ec:47:15:2e:14:d5:0f:2e:
32:10:01:37:59:8f:2c:e1:cf:16:c0:c8:8c:36:23:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F1:89:FA:6C:A5:DA:BF:0F:8A:C1:4C:DB:24:B5:ED:6A:4E:94:A0
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bb:3f:b8:c5:53:98:bb:72:86:e3:e7:c9:c2:69:a2:2f:60:
7b:66:d4:af:36:97:fb:90:74:1e:a9:67:07:73:3e:2f:8f:28:
89:f3:40:7e:9e:cd:e5:a7:f6:e4:2b:6c:c1:05:70:3c:9e:49:
5a:cc:af:81:ea:1a:a1:04:bd:25:e4:cb:6d:5c:cd:2c:16:8d:
5e:d0:5a:42:3d:22:a4:87:e4:cc:1e:49:f5:89:d8:94:e1:69:
9f:12:5c:b5:61:b3:84:70:77:d5:b8:d5:52:00:73:a4:c4:bc:
25:51:ac:76:73:42:38:06:96:b0:89:e0:95:23:e4:34:1a:cd:
d8:a5:27:a6:7d:91:dd:9c:ac:26:a7:21:9a:de:c2:da:d9:78:
9f:7d:a3:5e:69:e3:d7:37:4a:13:36:b3:25:ba:77:c1:39:b8:
fc:73:57:95:be:2c:d5:b1:0a:1d:b2:3f:ea:67:cc:00:5a:2b:
1b:2f:25:89:1c:66:23:ab:6d:a1:aa:0f:8f:89:2c:12:07:06:
8e:4f:66:e5:4b:96:c5:87:6c:4e:c8:d8:c9:fa:5b:ea:08:2e:
bf:11:9d:a9:8d:5e:d2:f5:6a:70:ee:5c:ac:73:75:e4:bb:35:
4d:54:34:b6:e7:7e:30:9b:09:0c:9c:92:e4:7b:d0:69:c2:6f:
d0:0c:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:29:53 2026 by rpki-client