Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.mft
File: e8sKCiWoz5444MrqwG8cbLbf098.mft (raw, json)
Hash identifier: bJRNSJMzmh+Og9KlNFldmt4XYMA2xCUrvFkZoywmXzI=
Subject key identifier: C9:7F:BA:DA:5B:C6:A0:FA:69:11:50:A1:AE:1A:CA:BB:E4:CD:BC:E0
Authority key identifier: 7B:CB:0A:0A:25:A8:CF:9E:38:E0:CA:EA:C0:6F:1C:6C:B6:DF:D3:DF
Certificate issuer: /CN=7bcb0a0a25a8cf9e38e0caeac06f1c6cb6dfd3df
Certificate serial: 01A1DACAE2D95152D1F1D6D5828860C88618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sKCiWoz5444MrqwG8cbLbf098.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.mft
Manifest number: 3D
Signing time: Sat 14 Nov 2026 16:01:31 +0000
Manifest this update: Sat 14 Nov 2026 16:01:31 +0000
Manifest next update: Sun 15 Nov 2026 16:01:31 +0000
Files and hashes: 1: c1WDXH7cj-6qCsY0Y3p4x0Xys8o.roa (hash: XUgCu0xwPLWlumdjoIU1qSht2Ls2LE57SUofe2H2o3Q=)
2: e8sKCiWoz5444MrqwG8cbLbf098.crl (hash: mg+pAQTtAxPG344JnERjhQJYOfS21CIEV+x0wNnO3SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sKCiWoz5444MrqwG8cbLbf098.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:e2:d9:51:52:d1:f1:d6:d5:82:88:60:c8:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb0a0a25a8cf9e38e0caeac06f1c6cb6dfd3df
Validity
Not Before: Nov 14 16:01:31 2026 GMT
Not After : Nov 15 16:01:31 2026 GMT
Subject: CN=c97fbada5bc6a0fa691150a1ae1acabbe4cdbce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:95:b7:65:fa:da:9b:8c:dd:13:3a:72:71:
b3:da:77:da:9d:ee:d3:e9:37:15:81:64:49:e2:f9:
50:f6:6d:62:f1:4f:1a:95:e8:46:85:49:39:c6:32:
19:23:cd:86:a6:0d:6d:d7:4a:ef:91:85:02:e1:30:
24:33:31:bb:60:09:e7:9b:b9:8d:c2:55:c6:4d:c3:
52:a1:27:f8:d1:39:72:d3:a5:31:76:96:80:70:c4:
34:35:f2:8e:f4:f1:50:25:1b:04:67:13:c3:c4:77:
10:d5:b0:79:9f:29:e0:e0:21:f8:65:ad:12:b1:b3:
ca:c1:34:55:45:85:40:e8:2e:53:2a:d7:d1:1d:c9:
d9:72:77:02:fb:02:99:63:87:b5:63:0b:10:cd:ad:
85:9a:fd:83:92:44:55:81:cb:56:3b:e8:ca:35:df:
ed:fa:6c:e4:c7:50:3e:65:10:22:0c:52:af:59:e7:
f3:b8:03:3e:ec:c2:c6:9f:93:56:b6:34:af:f3:bf:
77:69:75:b3:ef:41:fb:f2:a1:e5:55:6a:2d:09:ff:
a5:03:71:ec:a2:b5:81:3b:59:f8:7a:44:b9:42:d0:
38:5b:65:44:5e:3a:21:3d:58:ea:1a:e8:34:85:9e:
b7:ed:11:6e:70:18:ea:19:07:79:62:b6:03:83:d5:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:BA:DA:5B:C6:A0:FA:69:11:50:A1:AE:1A:CA:BB:E4:CD:BC:E0
X509v3 Authority Key Identifier:
keyid:7B:CB:0A:0A:25:A8:CF:9E:38:E0:CA:EA:C0:6F:1C:6C:B6:DF:D3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sKCiWoz5444MrqwG8cbLbf098.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:25:5c:c7:78:aa:fd:b5:0c:fb:c1:b8:15:aa:27:23:d5:50:
6b:4a:23:80:36:2b:6a:8b:94:92:0d:ea:db:a6:d1:d6:66:61:
fa:a3:ff:ee:44:9b:71:84:d0:d2:27:f3:c7:56:c0:8f:fe:ff:
87:c4:63:e8:46:8b:75:f8:29:c2:9f:c2:e2:63:b7:45:7d:c5:
16:6c:ec:55:c1:92:57:0f:cd:c5:92:d2:c9:a5:69:b1:f0:5b:
93:29:ff:ed:71:f8:7a:27:60:e7:05:e4:a3:d1:f0:e3:0e:50:
62:45:fc:43:c3:ec:13:8b:d5:16:14:47:1e:b2:2c:93:e9:8c:
66:4b:fe:ea:de:0f:0a:03:0b:51:41:0f:6d:98:7d:a9:ef:0b:
3f:51:a8:e6:ba:66:33:30:d8:0d:f3:ac:ae:87:3a:f5:8c:41:
e4:d9:3b:a4:81:36:ba:1a:6d:15:00:eb:4d:9b:12:f1:fe:03:
b5:ca:a8:12:8e:1f:e1:3f:52:40:a8:4e:17:95:25:e5:8d:ef:
38:5e:b8:c8:f6:1b:84:5e:64:db:85:3a:ea:08:34:57:a9:91:
77:8a:99:2c:23:7a:74:e0:2c:40:2a:b5:fa:34:fe:12:ad:09:
e7:dc:f2:fa:37:56:05:ce:4f:6a:02:85:06:25:e5:1f:9c:c8:
4b:14:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:41:18 2026 by rpki-client