Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: ZJXcTemkxnZUUQDdaoagsHTZ4S4Y5iHY1FplaCTuQ78=
Subject key identifier: DF:70:73:C2:05:4B:2D:C8:FA:FF:9A:CF:BB:04:A5:54:72:89:4E:D1
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 01A1DF4C07D8115C3CECC2EBAC01C0122ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 1A8C
Signing time: Sun 15 Nov 2026 13:01:04 +0000
Manifest this update: Sun 15 Nov 2026 13:01:04 +0000
Manifest next update: Mon 16 Nov 2026 13:01:04 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: dL3Unuzn/Qutc6YSoLcVsmVq3gER08YZtRolvSAS9EI=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:07:d8:11:5c:3c:ec:c2:eb:ac:01:c0:12:2a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Nov 15 13:01:04 2026 GMT
Not After : Nov 16 13:01:04 2026 GMT
Subject: CN=df7073c2054b2dc8faff9acfbb04a55472894ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cc:cf:ca:0d:14:0e:21:fa:9a:e4:24:13:d1:
bd:26:ab:c2:ee:03:73:5f:3a:32:a1:c4:d2:c2:99:
28:97:c2:84:d3:b4:89:24:46:13:6e:9a:7c:13:19:
27:2b:22:ae:b6:55:92:d4:4a:5c:18:1a:44:99:5c:
df:93:35:27:cd:77:7b:b9:06:30:83:57:b0:c8:de:
0d:f3:8b:e0:fe:be:54:41:a2:e0:61:1c:3f:af:ca:
d5:12:1b:54:12:30:70:42:9f:ab:e1:74:f3:a9:bc:
f1:47:91:10:aa:7a:46:da:ba:a5:c4:c2:db:b5:57:
61:ce:5f:6d:42:10:c8:21:ab:52:81:71:5e:63:3f:
65:d1:52:f3:1d:45:e4:b5:fa:26:62:58:4b:8e:2a:
12:71:bf:1c:6f:f2:40:ec:6c:8b:99:84:31:ff:6f:
07:dd:b4:cf:fa:4b:ad:01:e1:f0:74:0a:17:0c:14:
04:0c:b7:7e:93:f0:8b:30:4f:05:f0:f8:b9:56:be:
22:f4:c7:40:de:b4:a9:85:86:c1:1e:43:c6:ac:1d:
e9:15:33:7d:c0:b5:24:09:dc:ee:56:52:6c:b3:86:
af:fe:3d:24:7a:66:a6:ee:7d:65:11:6c:a2:20:ac:
45:a0:1c:1b:78:8c:c2:9f:32:87:35:3a:89:83:39:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:70:73:C2:05:4B:2D:C8:FA:FF:9A:CF:BB:04:A5:54:72:89:4E:D1
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e0:ba:31:c1:71:c8:fe:e7:6f:ed:2e:8f:9f:03:84:06:97:
a8:c6:37:ba:74:c1:95:23:c0:e2:53:a9:e9:5a:aa:f9:92:f4:
b2:f5:05:91:78:e1:34:de:bf:6c:a2:34:35:9e:56:6a:b5:8e:
fc:fb:81:39:08:35:c8:66:47:c2:3d:d3:d2:f6:49:c0:f0:2b:
dc:92:4c:64:7b:2e:f3:54:01:fc:2b:1e:3d:24:4d:99:7c:11:
8d:dd:50:90:09:8e:2d:4f:77:30:7e:c1:86:91:bd:91:50:f3:
2b:44:1a:5f:b8:d9:60:c7:81:64:ff:3b:93:d5:bd:5f:27:6a:
9d:01:bd:81:da:54:a9:12:1b:8d:b7:17:f3:ff:f9:ff:d4:d1:
bf:07:a1:06:f0:ab:9f:85:5d:b1:1b:b3:29:4f:77:1c:2b:87:
1c:db:e1:7f:7f:d3:5c:91:0a:0c:36:3c:e8:0d:09:a6:c6:55:
33:78:10:2d:e2:2c:19:09:de:e4:96:c7:e7:51:23:c1:e5:0e:
64:9a:de:76:f1:37:df:de:59:01:46:45:ea:a1:a9:5a:27:4d:
d1:26:48:0a:d2:ab:c6:0c:02:a0:78:30:55:e0:17:92:83:a2:
f6:81:8a:65:ce:7b:c7:d1:28:8d:f4:68:4e:50:1d:0c:7d:6d:
e9:d3:8f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:59 2026 by rpki-client