Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: tDOXspRaCUQd1P8CjFO1Z9dEPA8/YQytpeK1RWVVJuU=
Subject key identifier: 87:23:8E:47:A3:F4:18:24:44:A3:7D:7E:B6:BA:53:52:57:6F:3F:9B
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 01A196FC059BC78B4F9FB4D31E2D7FCA17DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 0917
Signing time: Sun 01 Nov 2026 12:01:01 +0000
Manifest this update: Sun 01 Nov 2026 12:01:01 +0000
Manifest next update: Mon 02 Nov 2026 12:01:01 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: NgRdnnk8s/i0+Hkc9lt7ySct1EuJFG/LlJI/2mZJupk=)
2: Of6AglNJHlgcluYUlIjfioWiCKI.roa (hash: sDgKEq0ut0vUDDCpX/3A3ZadxIlIok7qphOucEB2uLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:fc:05:9b:c7:8b:4f:9f:b4:d3:1e:2d:7f:ca:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Nov 1 12:01:01 2026 GMT
Not After : Nov 2 12:01:01 2026 GMT
Subject: CN=87238e47a3f4182444a37d7eb6ba5352576f3f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:bb:f6:de:67:46:6b:93:f0:b4:dc:23:c2:
c7:9d:86:eb:06:ec:b6:f3:41:21:d9:7a:f5:a0:b4:
32:87:8e:bc:a5:41:16:7e:f1:f3:3c:8b:94:dd:cf:
a7:fa:60:b1:c9:83:3f:9f:01:95:29:8f:dc:86:80:
8a:94:97:ba:f7:34:e1:a0:b9:da:23:d4:94:48:aa:
d7:d6:62:5e:28:6d:37:f0:ec:dd:2b:d1:9e:c2:48:
65:6d:a2:42:34:0c:5e:04:bc:68:3b:e4:69:7b:b8:
63:0d:a2:12:09:50:54:d2:e0:8d:64:9b:89:fc:5c:
96:ed:12:d6:4c:13:b6:65:26:4a:1c:93:c3:bc:c8:
b5:02:65:c8:a2:7d:fa:e4:37:47:fb:77:3f:81:e4:
08:a2:22:b2:f4:c0:8f:a0:4f:15:ce:b8:9c:d7:7f:
f2:70:a6:9b:9b:be:0c:b9:b3:9d:5d:00:3f:39:c4:
e4:50:d8:b3:d1:75:9c:95:a4:2a:3b:58:54:75:76:
3a:44:98:e1:52:a9:af:86:87:28:5e:91:3f:69:bc:
1f:bf:f0:d5:bb:1d:7a:42:85:9a:8f:44:67:97:c6:
28:b0:f1:d6:d4:28:10:07:51:ac:00:37:eb:e4:2f:
c2:39:a1:e3:5c:4b:84:d1:02:38:41:3a:91:05:e0:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:23:8E:47:A3:F4:18:24:44:A3:7D:7E:B6:BA:53:52:57:6F:3F:9B
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dd:73:05:fa:fa:98:df:3d:38:bd:74:b1:2b:4f:40:de:39:
0c:b6:c4:8e:1f:0f:d4:5a:8c:5f:3d:b9:ca:59:51:f2:56:14:
61:76:55:9e:d6:1d:fe:b0:84:0b:70:b8:1b:f6:f2:2c:77:e9:
b7:cf:0e:96:6a:6e:5e:6c:c5:1f:f9:db:ba:d9:23:1a:37:0f:
34:95:0b:f0:5a:0b:ee:2e:1f:3e:d4:a6:9f:68:9e:ea:5f:6c:
30:74:17:a1:91:78:cf:94:63:8c:d4:0c:a2:5f:17:28:9e:2d:
df:43:86:fb:52:4d:91:76:d4:38:09:97:13:59:38:a9:0f:63:
b6:3b:d8:2c:0a:2e:da:96:01:a7:45:48:f3:bf:a5:bd:4b:13:
80:26:62:3c:53:69:07:db:18:df:b5:a9:c5:f5:a3:f6:c6:5a:
74:b7:84:6c:b0:98:e6:6e:65:8f:76:59:fa:2b:58:64:7f:1b:
14:89:e4:38:c3:16:cb:47:2f:62:db:16:d9:46:a6:c9:c8:c0:
fb:78:e5:1a:52:14:28:85:fc:60:1d:18:19:6d:cd:53:d9:28:
5f:3b:32:81:e4:6b:2f:4e:c0:5a:96:aa:58:cc:66:07:b7:d8:
c2:69:0a:ae:19:ac:e9:8c:b4:20:7d:14:03:1d:94:46:3d:8f:
b3:3d:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 18:38:55 2026 by rpki-client