Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: UOF1ZKwRjbtNXLa1AJpoPPQaz6kDk9dp0+zSQnlZWN0=
Subject key identifier: F3:72:33:FD:9D:3E:00:79:94:5E:C8:A4:60:E9:FC:06:4C:5B:02:74
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 01A1A78229F490CABD5C657823528E728BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 1691
Signing time: Wed 04 Nov 2026 17:01:27 +0000
Manifest this update: Wed 04 Nov 2026 17:01:27 +0000
Manifest next update: Thu 05 Nov 2026 17:01:27 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: 29caKG6MBmTikPwHkdSs+jRGPd8LDCbVeoE15TjIeH8=)
2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:82:29:f4:90:ca:bd:5c:65:78:23:52:8e:72:8b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Nov 4 17:01:27 2026 GMT
Not After : Nov 5 17:01:27 2026 GMT
Subject: CN=f37233fd9d3e0079945ec8a460e9fc064c5b0274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:bf:4c:54:dc:e1:f6:5f:0a:5e:3e:13:b9:
43:d1:1a:28:42:e0:70:4d:97:e5:82:38:8d:bc:62:
3a:37:4f:ff:a9:bd:7a:11:42:1b:c7:9c:d9:1a:68:
56:5f:2a:1c:15:56:61:2d:e7:68:5c:e0:f8:98:f8:
5e:be:6c:c4:b0:91:17:b1:d5:8c:54:f0:48:39:c9:
36:99:ec:0f:22:58:a3:d9:87:b4:03:b3:fb:b0:f4:
d9:af:7e:66:41:7d:70:97:27:1e:e6:9b:4e:73:08:
44:01:ad:c6:91:af:09:b1:70:1f:85:50:ae:83:56:
37:28:75:ff:64:42:1f:0f:4a:a5:13:2c:23:d7:9c:
05:00:a5:b7:2f:b0:1b:b9:d0:f5:6a:4c:86:48:2f:
a0:a2:a6:cb:4e:b1:12:eb:e7:f2:03:b6:44:e2:e8:
40:ef:7e:0a:a8:8a:9e:9b:22:c9:4a:25:48:51:48:
84:67:40:ae:9c:ef:59:66:de:eb:fd:95:5b:1e:3a:
73:5a:ce:d7:b1:fe:1c:0c:05:73:07:f4:1c:b5:da:
0c:a6:e2:52:b2:79:5b:e4:12:04:89:35:36:79:32:
81:87:7e:db:6d:5a:bf:ff:d0:18:4c:d6:26:d5:51:
8c:84:7e:c4:7a:cc:39:a9:34:f7:4f:bf:2e:0d:a5:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:33:FD:9D:3E:00:79:94:5E:C8:A4:60:E9:FC:06:4C:5B:02:74
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f9:2b:c3:6c:d1:f3:3f:11:2d:ee:65:c9:63:9d:0b:9b:5e:
76:01:f5:66:96:d8:6c:9c:2b:ab:e8:af:4e:89:46:b5:c1:e7:
d2:61:5f:1d:01:b6:a4:d7:1b:35:4c:06:c6:33:47:01:7e:56:
cc:b5:1e:2b:43:2e:b5:cb:c0:7b:ac:3a:b5:70:4d:17:79:ba:
ee:6d:b6:5c:f3:93:02:f9:ba:32:0a:a2:4a:18:72:23:81:c5:
e1:01:71:62:da:6a:4c:82:61:50:36:9e:92:d8:f2:66:d6:18:
dc:3b:b1:09:ba:06:4b:36:86:c2:20:a7:84:20:61:4b:09:a3:
ee:c5:50:be:5f:87:64:94:e9:72:2c:aa:a7:a8:c7:b5:7d:7e:
4a:f7:83:d7:3a:3c:ca:ee:10:01:b0:f6:f2:29:d7:33:9c:d2:
73:7b:bd:7b:2c:23:5e:99:bb:a1:3a:d3:af:5b:df:a5:77:1b:
2a:c3:1a:67:4c:ce:5e:1e:e8:c9:e5:f9:29:1b:b1:6a:2f:1c:
75:6a:75:04:7f:27:5a:3e:68:ca:09:46:fd:e5:d8:54:4c:ad:
7a:09:8c:43:12:24:a5:2a:19:ad:82:c4:5f:f7:c1:47:f7:02:
5e:ce:a7:0c:a8:31:86:13:bb:43:5c:4e:61:79:78:a5:cc:e2:
11:0d:31:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:43:23 2026 by rpki-client