Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: eOkE90Nv7L6KLOyirCxoN85ej4l6tg/aDyTETK31GR8=
Subject key identifier: F1:A3:84:8B:C6:80:FD:B4:90:70:72:04:2A:3D:D3:94:2E:F0:6C:4A
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 01A1CF6B96DC93F60801D65A1D6D9C7C4233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 1AF2
Signing time: Thu 12 Nov 2026 11:01:36 +0000
Manifest this update: Thu 12 Nov 2026 11:01:36 +0000
Manifest next update: Fri 13 Nov 2026 11:01:36 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: ogw7WQuiPSYM6KsXbwTt+otVwT1CNEG0Eh7QK8pGgkM=)
2: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (hash: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:6b:96:dc:93:f6:08:01:d6:5a:1d:6d:9c:7c:42:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Nov 12 11:01:36 2026 GMT
Not After : Nov 13 11:01:36 2026 GMT
Subject: CN=f1a3848bc680fdb4907072042a3dd3942ef06c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:44:bc:e9:2d:28:68:15:db:dc:78:3e:fc:
fe:2c:57:45:ba:a4:c7:83:88:c9:61:fc:99:ba:2c:
39:b2:3c:a3:86:99:7a:b1:6e:72:84:9c:ac:e3:4b:
cf:33:6a:e6:cd:c0:c6:de:91:a4:4a:c0:e5:6e:ab:
a3:b0:44:b9:a1:56:5d:03:88:c5:0c:35:ca:9b:1f:
30:b7:6f:c3:ba:1a:5c:84:48:11:ca:17:68:2f:8a:
ca:6c:66:3b:74:9c:29:af:1a:15:f0:d0:53:19:5f:
3d:65:ad:39:04:fe:a7:97:cc:6e:91:fc:d6:39:93:
b5:1e:5f:81:f8:75:66:65:8b:bd:9c:25:2e:2b:7e:
01:94:cf:c9:4e:6a:1e:89:d6:65:6a:8b:7e:4f:5f:
2b:cc:80:1f:47:c4:5d:fd:7c:dc:b9:a8:6f:f7:0c:
ae:c7:76:78:a7:47:ca:37:dd:fd:da:56:72:97:65:
b2:1d:21:ef:c5:10:90:9d:85:32:4f:37:27:7d:38:
18:1c:d5:8b:20:3c:97:ab:9e:72:d9:db:dd:d9:0b:
71:b0:9a:aa:5c:45:6f:74:f0:94:1f:ce:62:3a:73:
e6:54:4b:f8:bd:42:9a:32:ed:67:19:13:2b:14:d4:
02:70:e8:69:bc:d3:44:23:37:34:fa:ea:0e:02:37:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:84:8B:C6:80:FD:B4:90:70:72:04:2A:3D:D3:94:2E:F0:6C:4A
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:db:17:5c:47:b3:03:15:7e:dd:a2:d3:61:15:32:29:bc:f5:
d2:33:be:ca:03:c9:3a:cb:2e:a1:c2:f3:42:bb:68:0e:84:0e:
7f:9c:fd:47:c8:0d:8a:a9:a2:63:e1:37:64:3c:0e:f8:31:17:
fb:48:b4:36:f2:1e:df:b2:45:94:82:9b:2f:49:e6:f0:cc:4e:
ec:1e:d2:19:d7:3d:a7:2d:7d:85:6c:37:f3:35:bc:c8:20:cd:
05:5d:98:c8:f6:cf:85:92:89:c1:6a:88:88:81:c6:43:11:23:
a0:a3:83:7e:8e:3f:56:99:60:80:0c:65:b7:ec:89:8d:ba:93:
bc:88:35:fc:41:00:ba:df:e6:46:16:b0:5d:0b:53:d2:57:45:
38:74:f1:67:6f:76:fd:b7:10:08:d3:c5:81:c5:25:2b:82:bb:
76:0b:15:ea:84:37:7a:37:4e:26:b6:30:51:5f:06:9e:95:18:
c3:75:13:1a:ef:ab:4f:02:ef:f3:2c:2f:62:45:d0:d8:8f:e8:
89:fb:7d:e3:e3:af:70:ca:b0:0d:eb:05:bc:90:8c:ef:6e:d4:
93:d0:8e:6c:d3:cc:bf:17:87:b7:05:43:bf:86:f5:62:04:bd:
35:84:43:2e:b0:e6:6f:61:5e:5a:91:40:75:2a:93:cf:5d:57:
98:00:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 21:58:22 2026 by rpki-client