Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: ZyF75bDHDe1kgrt/YpfEm9JfHyUBQBay0YTOzH+1BKI=
Subject key identifier: A8:10:FB:0D:34:9C:94:05:01:7B:5E:C4:1E:4B:77:46:09:6E:2F:AF
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 01A1DCB8CAA65D6A50E138E63E37BE8E4940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 01:01:00 +0000
Manifest this update: Sun 15 Nov 2026 01:01:00 +0000
Manifest next update: Mon 16 Nov 2026 01:01:00 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: eyTXeh1/1t7ponE6u0RS3qMOHX9QP+PFv8nNqx87Ua0=)
2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:ca:a6:5d:6a:50:e1:38:e6:3e:37:be:8e:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Nov 15 01:01:00 2026 GMT
Not After : Nov 16 01:01:00 2026 GMT
Subject: CN=a810fb0d349c9405017b5ec41e4b7746096e2faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:47:39:4e:f0:a0:f8:b1:4a:75:81:bf:af:
4b:cb:59:ac:c6:b8:bb:75:e2:71:1f:30:3f:75:de:
43:9b:6b:d9:2a:6d:4f:cc:8d:c7:24:73:eb:c3:1b:
dd:f2:5f:2e:53:24:d1:8c:e4:8e:98:dc:ff:ed:85:
94:c9:45:5a:85:ac:ec:aa:98:35:b1:4e:6c:a6:4d:
0d:aa:ef:2d:12:4b:ea:ff:0f:1d:9d:a9:fe:8f:18:
70:2b:9b:fd:ca:df:08:8c:8b:33:ea:8f:6d:79:fa:
47:f2:d6:77:e8:a1:7f:5a:15:f7:96:d9:d5:6a:cf:
bb:84:ad:e0:2f:8e:0d:b1:97:b0:44:5f:40:dc:44:
09:2e:f8:84:38:87:27:f1:f7:a6:86:d0:7c:d1:2c:
fd:fd:b9:05:86:fb:1e:7a:5c:ad:42:20:84:48:e7:
23:12:2c:72:c0:c2:fb:c8:bc:d1:a0:52:76:68:6d:
c4:e1:73:31:0f:81:98:9c:cd:28:96:f9:7b:d3:8b:
9c:55:36:16:f8:6c:4d:a7:70:11:a7:d2:f3:47:e1:
be:b3:d9:08:17:45:76:d7:bf:9e:a1:38:0b:95:94:
6e:1c:08:e7:8c:0b:7b:1a:b8:aa:d3:74:ba:ad:cb:
20:c2:ba:e4:9a:53:ea:e6:a5:84:ad:5f:82:d7:7a:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:10:FB:0D:34:9C:94:05:01:7B:5E:C4:1E:4B:77:46:09:6E:2F:AF
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:18:ee:8d:19:08:8b:d5:d3:00:4b:ca:e5:0a:3c:4f:f9:7d:
94:38:83:49:c3:9e:dc:d8:3d:39:b6:50:79:d0:b9:b9:3c:da:
13:77:9f:07:ee:4d:91:7d:d9:6c:06:92:1d:0e:7c:07:7a:11:
94:d3:6c:8d:48:06:1c:4d:34:33:b0:18:2e:e0:3b:5d:4f:f9:
96:4d:10:b1:1e:82:72:3c:56:41:04:d9:48:aa:b4:60:4e:4d:
d7:35:77:6e:ae:fb:72:36:05:44:b0:8c:6a:0e:d5:d8:0c:15:
25:18:1b:2e:d3:f2:ae:50:9b:70:5f:32:ee:bd:c2:e2:f8:fe:
b4:47:10:ca:e0:68:5a:53:f7:4e:ce:ae:c6:2a:f4:ed:ad:6f:
24:31:c6:47:b3:d2:c5:c9:01:03:89:d5:b7:10:77:03:2c:f9:
82:b1:c2:cd:48:d3:65:1c:aa:f9:10:48:7f:cd:6e:0f:28:87:
f2:d0:b1:57:65:07:77:f2:a4:e3:b3:ff:d8:ba:66:4a:87:b7:
fd:9a:16:e1:7e:8b:90:ed:2c:b8:d0:87:3b:20:d1:de:49:88:
25:f6:df:61:38:35:f6:54:af:35:0b:c6:0d:86:c6:6f:ef:cf:
61:46:75:63:31:c5:43:39:c8:40:86:49:eb:c9:80:95:ab:0c:
f5:7c:a8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:37:13 2026 by rpki-client