Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: cQkqttLVckEZdVqj8s1nRIIhx5jgu3piWd0TRs08j5Q=
Subject key identifier: 11:95:24:5E:3E:3B:61:4F:09:10:98:59:AF:E9:53:E6:5E:68:9E:67
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 01A1CA0D62F0A7B9B0C6ABEB2278D8F07123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 0443
Signing time: Wed 11 Nov 2026 10:00:37 +0000
Manifest this update: Wed 11 Nov 2026 10:00:37 +0000
Manifest next update: Thu 12 Nov 2026 10:00:37 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: kJntZZnzgSDGzA/WnFPJP03D7vvSmAkAHsXumO5qzCY=)
2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:0d:62:f0:a7:b9:b0:c6:ab:eb:22:78:d8:f0:71:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: Nov 11 10:00:37 2026 GMT
Not After : Nov 12 10:00:37 2026 GMT
Subject: CN=1195245e3e3b614f09109859afe953e65e689e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:09:fc:a3:7b:e9:16:67:cb:6a:e9:3a:1d:
ad:b9:97:29:f9:12:62:49:db:c6:b6:08:de:ad:d2:
7d:24:b9:b6:1b:6a:2e:20:1d:03:a7:e1:df:00:f8:
4d:5a:17:f2:f2:61:f6:99:b2:1c:74:24:ab:92:c3:
05:7a:4e:be:d9:14:78:49:25:f1:d7:c0:96:c3:ad:
c4:ad:71:31:cf:07:8a:d0:c3:d3:ef:4a:14:72:f6:
0a:ea:06:b9:66:5b:9a:81:19:7d:29:52:42:c7:17:
62:5a:1f:47:1f:8b:79:5e:31:df:8e:be:f3:3e:f9:
ce:bc:4b:5f:b4:6d:ff:c3:f3:05:64:56:a1:21:19:
71:f2:5e:78:a2:ac:cf:4d:5b:d7:7a:bb:ff:a2:ec:
3d:92:c7:b7:f4:b9:0f:1b:65:6c:8b:ec:d0:5b:98:
cf:b7:43:95:e5:ff:d0:e1:9e:f9:99:b1:a8:a0:07:
26:de:28:dd:34:e7:16:3d:c8:67:8a:bf:c6:ad:1e:
4e:a4:d0:66:04:05:91:6d:62:0f:a6:3a:4a:56:52:
bd:78:e3:86:39:07:a0:c7:f7:9c:5c:2b:41:4c:7d:
0a:06:d9:6b:73:09:60:18:09:53:a6:bd:cf:96:77:
f0:e4:12:25:97:4a:c4:e4:b1:ae:e7:b6:80:1e:47:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:24:5E:3E:3B:61:4F:09:10:98:59:AF:E9:53:E6:5E:68:9E:67
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:39:ce:96:d7:ff:26:6f:1a:46:bc:a6:64:2c:b6:8f:16:ae:
89:94:c4:a5:35:a9:05:ed:18:da:82:46:a4:1a:b0:3e:17:5a:
e8:4f:ec:30:61:8c:08:24:da:9a:6c:67:b9:78:8d:33:ed:97:
b2:d9:46:01:54:09:d7:16:5a:8c:80:b6:ad:2f:f1:1d:14:6d:
8a:e6:62:b4:de:b8:01:7c:e9:15:97:9a:9c:b0:88:b8:a8:55:
b9:69:4a:06:d8:63:72:d9:92:30:d1:79:18:98:7e:ad:74:2d:
2c:71:92:1d:ea:bb:7e:b7:bc:f0:70:49:59:3b:a3:61:cc:93:
58:ba:7c:d8:40:fd:0c:fb:5c:9a:fa:5d:a7:7f:a9:a7:bf:cd:
ea:c0:d7:eb:79:fd:4d:2f:99:d3:55:06:f1:be:9a:aa:a7:7e:
f8:f1:3d:c2:56:eb:f7:53:bf:ea:37:23:eb:c1:01:ce:29:4b:
72:91:c9:52:05:b2:5d:c7:aa:ca:39:cb:d7:31:62:ad:f1:4b:
19:fd:c9:06:14:0e:9f:98:28:f3:b4:57:20:ed:ac:ee:71:52:
1f:80:de:e8:fd:ef:c3:30:a6:d3:50:bd:5f:0d:54:eb:72:fd:
6d:2f:b0:a7:82:b3:01:1d:91:13:cc:2b:0b:ca:f0:9b:82:0e:
fe:6c:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:36:43 2026 by rpki-client