Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: zVDb3lpulc64mpCccBtayNGcMvJVzZ/H3i5OWIdspH4=
Subject key identifier: 43:E2:7B:B4:4C:23:7A:95:57:C9:92:9F:FA:A3:FE:1F:2B:E4:72:68
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 01A1950D1FFEC6B526E437648A8EDD72DAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 16DE
Signing time: Sun 01 Nov 2026 03:00:27 +0000
Manifest this update: Sun 01 Nov 2026 03:00:27 +0000
Manifest next update: Mon 02 Nov 2026 03:00:27 +0000
Files and hashes: 1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: zG7U1EHNHf0mkxjVJPjIyb+PQA1eEXNX9Zy9rgnwS5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:0d:1f:fe:c6:b5:26:e4:37:64:8a:8e:dd:72:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Nov 1 03:00:27 2026 GMT
Not After : Nov 2 03:00:27 2026 GMT
Subject: CN=43e27bb44c237a9557c9929ffaa3fe1f2be47268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:eb:81:d0:4a:5b:d9:cf:64:b7:9b:ec:2a:
5a:0b:28:66:d2:29:9a:4b:d1:68:54:10:cd:ac:1e:
4d:0e:38:9a:89:ef:e3:eb:4e:6a:1a:0e:6e:83:25:
8d:30:a2:70:ed:1f:e1:1b:20:d6:d5:ef:82:71:88:
2c:b7:c7:08:b4:54:de:09:c7:ce:35:11:cd:c8:07:
a0:a4:66:be:4e:d2:23:03:65:0e:c7:ef:79:28:29:
75:67:b8:b9:a2:80:77:43:4c:7b:2d:3f:be:3b:72:
d0:6c:bc:d7:be:93:12:ac:c6:ac:a7:64:67:0a:47:
6e:4b:bc:c6:19:ee:c4:b4:66:56:48:ef:bc:d8:ba:
a7:1d:19:d3:ae:77:ce:14:fd:ee:45:ba:a2:c3:89:
54:0d:42:1a:2c:bf:e7:43:58:30:12:d7:cf:a4:8e:
80:34:fb:2b:cd:44:2d:c7:7a:0b:59:be:37:4e:16:
f3:29:80:d3:74:21:57:ef:c8:36:4b:57:4a:83:45:
81:e5:e0:27:01:ec:4d:0f:0c:46:6d:dd:73:68:60:
b1:9c:63:2e:96:ab:54:98:e5:6d:45:20:cd:fe:b4:
3a:7b:2b:a8:2d:f6:76:d4:32:ed:27:55:8c:a5:d2:
61:20:49:76:fe:ba:4f:a1:2d:c5:cc:15:8a:cd:29:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:7B:B4:4C:23:7A:95:57:C9:92:9F:FA:A3:FE:1F:2B:E4:72:68
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2c:14:cb:94:b9:f0:00:60:2a:cb:99:c6:bf:df:63:ec:c3:
a5:55:00:1d:f3:c2:0a:35:6f:12:1d:7f:f2:c2:3b:07:0c:9f:
1a:21:51:92:3d:f6:4f:ef:02:5f:79:40:dc:76:59:eb:98:54:
4d:c6:d0:9c:af:03:93:56:e6:6e:e4:89:d9:47:68:58:4f:cc:
50:3a:d9:c7:ae:00:c4:24:1b:3d:a4:0a:27:83:d6:ff:9f:1f:
a5:bf:0c:ec:0a:59:41:72:f7:cb:42:1e:27:06:65:95:07:eb:
4e:f2:09:bb:00:44:ec:9e:0d:10:7b:95:3c:d0:32:1a:19:5e:
82:e3:70:bb:b0:94:5b:bf:44:1a:6e:11:e1:cb:3a:df:ef:85:
d5:81:ac:9b:4c:71:c8:2e:01:3d:7b:92:d5:dc:3e:d0:7b:08:
c3:68:56:fc:88:81:0d:b8:8d:ac:2f:dd:99:37:28:01:c2:f8:
5f:96:b1:28:60:53:bd:37:2d:a2:f0:8c:cd:f2:a2:5f:f3:83:
7f:5e:e5:33:c0:85:93:f8:1b:6d:74:60:b0:63:1d:bb:e8:d4:
7f:6b:ce:b2:af:fa:f2:6a:3f:39:c5:ae:25:47:4e:7f:55:64:
e3:fd:d6:28:e3:9a:84:5b:15:ef:4a:36:4f:06:2d:bb:dc:96:
5a:80:e7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:47:47 2026 by rpki-client