Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
File: OneLgrqpeIoayvLsNothmB71HfI.mft (raw, json)
Hash identifier: yJiYM2XsYKlvEvz7t/SDUtp+WQGgR7V5bOdy4iNK1eE=
Subject key identifier: 83:C2:78:E7:0E:83:EA:4C:FC:B5:0A:5D:54:C0:FE:9F:2E:72:B0:32
Authority key identifier: 3A:77:8B:82:BA:A9:78:8A:1A:CA:F2:EC:36:8B:61:98:1E:F5:1D:F2
Certificate issuer: /CN=3a778b82baa9788a1acaf2ec368b61981ef51df2
Certificate serial: 01A1AABA575729674F87BD8A8BA4DB9908E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OneLgrqpeIoayvLsNothmB71HfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
Manifest number: 1AE3
Signing time: Thu 05 Nov 2026 08:01:41 +0000
Manifest this update: Thu 05 Nov 2026 08:01:41 +0000
Manifest next update: Fri 06 Nov 2026 08:01:41 +0000
Files and hashes: 1: OneLgrqpeIoayvLsNothmB71HfI.crl (hash: /Ml5hVELT5Gnxgeo2oXtXOpzhw57hJE91Z8uNnlUAFU=)
2: rmxdb45InuBSh7zHSKjX_3Ic9rw.asa (hash: ms93rpOzTaQzsiJ/5aekKy6FCU0yNRqo6zpjr2HmPPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OneLgrqpeIoayvLsNothmB71HfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:57:57:29:67:4f:87:bd:8a:8b:a4:db:99:08:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a778b82baa9788a1acaf2ec368b61981ef51df2
Validity
Not Before: Nov 5 08:01:41 2026 GMT
Not After : Nov 6 08:01:41 2026 GMT
Subject: CN=83c278e70e83ea4cfcb50a5d54c0fe9f2e72b032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:83:13:ad:6d:96:00:3f:27:58:5d:f3:89:
2b:91:9e:9a:2b:50:17:62:b6:b5:0d:50:d8:b8:82:
5f:df:75:27:6f:6b:82:26:7f:1d:8e:be:1e:f7:ad:
12:1e:56:f2:b2:c5:53:46:8f:d6:f8:bf:12:f0:9f:
09:47:22:d6:8e:8d:a6:50:9f:e2:7d:87:3b:3d:a9:
94:f6:e0:95:f0:66:52:d2:16:b7:db:f8:1f:97:d7:
96:75:e8:0a:99:a2:c9:dd:63:47:b9:6e:e9:a8:b8:
59:8c:59:77:0a:04:42:75:9c:7f:5f:27:51:c4:fb:
ce:7c:8b:e3:eb:95:ae:5a:17:07:3f:7e:a9:aa:cf:
ce:69:72:2f:12:43:b2:19:43:fe:ab:c4:b5:05:b9:
4a:e7:3f:87:82:a9:4a:f4:5f:85:7f:69:52:de:1d:
ec:a6:75:70:83:08:b5:c9:f0:45:e8:3a:c8:30:83:
d2:6a:21:d0:ce:91:e6:2f:e9:31:27:b7:71:0c:cb:
1b:5e:19:d8:77:b8:fd:d3:77:02:4f:38:0b:70:16:
17:ad:a7:0d:c2:97:b9:9e:3e:fe:39:42:c3:39:b2:
2b:a8:93:1a:4f:12:18:88:9e:18:2c:14:e3:75:0b:
3a:79:c8:ca:6a:2e:81:45:3c:3a:27:3e:08:36:6c:
6a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C2:78:E7:0E:83:EA:4C:FC:B5:0A:5D:54:C0:FE:9F:2E:72:B0:32
X509v3 Authority Key Identifier:
keyid:3A:77:8B:82:BA:A9:78:8A:1A:CA:F2:EC:36:8B:61:98:1E:F5:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OneLgrqpeIoayvLsNothmB71HfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8f:af:51:e0:75:40:64:75:06:fb:2f:71:20:04:85:49:2f:
77:c4:c8:38:39:85:ed:1b:af:73:f6:f9:da:d5:b2:47:0c:cb:
48:09:40:2c:b3:52:8f:5a:fa:6c:73:26:64:f0:f0:17:1f:58:
18:ee:c7:03:bf:ae:9e:3a:91:55:b9:42:66:e6:a2:fc:5e:39:
6e:4e:96:b6:61:79:60:08:70:2f:d9:ae:1a:04:cc:64:40:17:
d4:18:7a:bb:6a:03:0c:8b:30:08:f6:a0:33:2a:3b:f7:02:87:
41:fe:8c:bd:fa:05:cf:7d:40:e7:18:3b:67:73:60:b5:9e:b6:
8c:a6:65:b6:3a:1a:eb:6a:3c:70:ee:df:19:07:8f:79:cd:f4:
d8:cd:b6:81:63:94:9d:87:83:4b:97:94:fc:97:ff:aa:d3:a0:
1d:b0:e1:f5:5e:46:32:19:db:84:27:60:e7:d5:0d:17:40:a9:
20:52:07:2f:72:56:00:45:41:65:fc:eb:62:f2:93:ce:cb:f6:
bc:ca:40:19:48:40:e7:bb:1c:82:1c:74:a7:a1:c7:09:a6:04:
28:dd:a8:9b:45:d8:f8:68:fa:eb:87:75:38:89:41:49:69:d7:
c6:35:e2:d7:b6:52:c3:cf:92:1a:78:ab:37:9f:d1:12:56:b0:
90:0c:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:53:37 2026 by rpki-client