
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: ALzesVbX78Su/eC7lepjTkWAwAewNn5eVVOhlmxqW98=
Subject key identifier: 82:C8:C8:EC:62:B9:64:52:C7:6B:0C:48:A3:00:BD:2D:55:E5:78:8B
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 01A1D9812D0D14532B0443992CDA5A9E7736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 0C9A
Signing time: Sat 14 Nov 2026 10:01:23 +0000
Manifest this update: Sat 14 Nov 2026 10:01:23 +0000
Manifest next update: Sun 15 Nov 2026 10:01:23 +0000
Files and hashes: 1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: TDAAWSXtl5kTh6ucBdHHmom5WaXvdghLC8gWXzTNKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:81:2d:0d:14:53:2b:04:43:99:2c:da:5a:9e:77:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Nov 14 10:01:23 2026 GMT
Not After : Nov 15 10:01:23 2026 GMT
Subject: CN=82c8c8ec62b96452c76b0c48a300bd2d55e5788b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:e3:2e:87:bc:34:1f:36:61:1a:55:b8:59:
55:ba:c9:99:69:ec:f7:e5:57:a8:17:e5:49:02:a7:
84:b6:70:26:33:47:ae:ca:2d:87:f0:f1:48:52:4b:
67:44:b6:8c:04:50:16:5f:19:76:61:6b:51:79:e8:
04:ea:05:46:e4:c3:50:fe:11:b6:33:15:c4:f7:09:
72:2f:c6:41:db:ab:cd:8a:cf:18:ad:05:e9:82:28:
66:52:78:61:9e:82:70:70:6f:f7:ac:c3:6d:88:e2:
a1:fc:b0:c2:de:ee:36:15:bb:23:73:ef:53:80:e1:
24:2a:68:6b:a6:82:5c:38:15:79:ce:bd:d5:6e:fa:
9e:31:6d:f4:e1:ab:dc:1d:6e:53:b4:2b:0a:7e:cb:
a9:da:df:d3:43:e0:28:9d:3a:ca:c6:1b:a1:c6:9f:
45:b7:20:84:61:83:b5:db:4b:93:ff:d6:a9:3e:db:
b2:d0:09:7e:d4:aa:12:dc:59:3f:5b:86:b7:dd:57:
6e:08:fa:74:8a:8b:d5:97:e8:8d:e3:15:0f:33:21:
19:af:89:c6:ed:9c:2b:21:cc:e4:32:ab:c6:4a:c9:
04:02:88:2c:a4:ea:34:f6:25:08:09:cb:8e:65:4f:
83:e5:df:c1:01:c2:5f:8b:74:12:c9:b5:ff:34:aa:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C8:C8:EC:62:B9:64:52:C7:6B:0C:48:A3:00:BD:2D:55:E5:78:8B
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:21:5d:a9:09:34:9e:d4:5d:ab:4c:90:fd:9b:95:2f:eb:4a:
69:07:0c:97:ac:63:4f:60:79:67:f5:b3:03:36:76:66:d9:c4:
06:80:c9:7b:d6:36:3f:9e:f5:22:0e:5a:5d:e7:12:67:9e:53:
f3:22:84:cf:bc:70:4a:a4:34:b2:77:b3:21:c7:8e:ba:b7:7f:
ae:23:7f:2b:af:54:15:9c:f4:f8:e6:af:a7:4c:d6:ea:32:00:
24:e8:ae:26:64:d1:40:2a:62:4b:05:20:ab:53:8c:62:41:e7:
e5:d2:8a:4e:ec:d7:fb:fa:86:cc:8c:04:7b:34:96:21:f8:c1:
4e:46:93:8b:43:bb:89:28:7c:ea:a0:5a:44:85:97:13:8f:61:
ba:97:fc:16:31:39:4b:41:c9:57:dc:85:a4:70:3f:06:cd:ae:
58:37:26:84:e4:55:1a:7c:ae:9d:75:65:44:57:89:b7:9f:ad:
c7:cb:be:83:d7:43:33:a2:2a:a0:bb:90:f1:2f:74:7c:ff:5e:
f4:51:06:8d:d1:9f:ed:1e:d8:0a:9a:88:cc:fb:ab:bc:3d:75:
13:3b:9a:ed:db:d8:6e:5f:64:38:71:af:cb:ed:f8:39:91:37:
28:4f:07:f1:61:07:69:1a:78:d2:e7:c5:12:d5:3f:c5:69:a8:
09:c3:71:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:48 2026 by rpki-client