Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: WV/5Laq+0qdV6lXlbpYuW0+IfcehWoD4J0OzSrSavn4=
Subject key identifier: 4B:DA:93:A9:5C:D7:5B:3E:22:4E:78:53:79:7A:15:C3:8A:96:4C:D8
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 01A1DCEFED5FADA2F37AF5061C91187FD0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 1B16
Signing time: Sun 15 Nov 2026 02:01:13 +0000
Manifest this update: Sun 15 Nov 2026 02:01:13 +0000
Manifest next update: Mon 16 Nov 2026 02:01:13 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: 5K5vJWb8wSyVwaRGSzH7ceQZA9PLEx830PBONn0PA8w=)
2: Sq9wGfvIXX44Fkr3lUW2I0R4bBk.roa (hash: IuqSt8hYCmt5WFSywk25kD+Qpj3FWEZCmOzvf0HCdPw=)
3: a7oEZXRPMRrFRbmlSe_UadUlmsM.roa (hash: HaaNwz+goojKrZUIe2KTvp7CtBcwMtupi4I3fyS+Xww=)
4: jFj46lu_4u0ubIJMiYtU4-hn078.roa (hash: G0bQ//8p+NwdW+KNpaWOQBklpF5Yu3De2ZhKpunhcY8=)
5: onuyGuJos8Q8ND84yh1u-8KZ0LI.roa (hash: IwftUiRifWGm4SmqfCzNFHRxNAZyFmT+9xw7JojcqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:ed:5f:ad:a2:f3:7a:f5:06:1c:91:18:7f:d0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Nov 15 02:01:13 2026 GMT
Not After : Nov 16 02:01:13 2026 GMT
Subject: CN=4bda93a95cd75b3e224e7853797a15c38a964cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:85:6f:d1:db:8b:03:ef:d3:dd:2a:01:6e:
b0:e5:bb:7c:9a:4b:92:1b:34:a1:73:35:1e:30:66:
be:99:c0:9c:fb:b5:70:71:7e:a0:60:55:66:7d:e9:
9b:fa:41:04:8d:bc:f9:62:24:89:fa:23:f4:b4:74:
12:e6:d6:07:9f:53:eb:03:26:da:f9:fd:42:4f:17:
56:5e:5e:27:26:c2:e3:ee:08:8e:8c:9b:e1:c4:f7:
31:cd:f3:c0:f8:7f:47:34:7c:aa:68:2c:b6:d1:0e:
0a:d3:96:7d:04:3b:37:22:17:75:3a:60:38:cf:72:
38:59:2b:ee:4e:b3:74:9c:80:88:26:b0:0f:c6:e8:
8a:ba:91:66:fe:42:01:a9:64:b3:fb:76:50:49:11:
46:d3:97:30:7d:f9:c6:72:9d:1f:7a:16:5f:ef:58:
0b:c3:df:c3:fd:0d:8b:95:0b:09:53:14:fc:f6:09:
3a:8d:2b:24:20:80:b2:bf:1e:89:25:99:93:22:6c:
bb:8c:65:c1:17:4d:51:c5:89:75:1a:ce:81:8f:58:
bc:ea:19:8b:21:c7:79:c2:e7:67:ee:47:83:55:bb:
eb:fe:52:50:53:e6:21:17:1a:43:20:c5:8f:fd:dd:
16:71:f7:b1:ba:3d:f2:9e:4f:5f:a3:44:81:24:d8:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DA:93:A9:5C:D7:5B:3E:22:4E:78:53:79:7A:15:C3:8A:96:4C:D8
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:42:6b:bc:0f:c1:8e:ac:ba:2d:d1:f4:92:0d:b5:3d:74:d0:
71:ad:68:0b:ab:18:3b:61:b4:32:81:2b:7e:c8:f2:ff:4e:ca:
88:05:6e:70:e9:b8:1d:2d:4b:d3:e7:10:39:62:0c:3e:d8:34:
7d:63:4f:60:84:fb:81:67:e8:7b:53:d6:84:61:3a:c5:de:60:
b9:29:b8:d9:bb:7f:bb:c7:eb:a8:f4:27:e1:8e:7b:68:b2:29:
7a:c6:b6:c9:00:d5:ec:2d:91:fe:a4:d0:fc:5f:b0:f3:67:72:
16:44:7f:69:29:bd:0d:7a:2b:9d:83:d3:60:b6:59:35:d2:6e:
84:25:4f:7f:7c:d2:5c:06:cd:14:87:63:2a:b6:af:9f:74:7b:
f1:b0:a7:ee:eb:ed:99:dc:96:4d:1c:67:18:b6:e1:05:c4:33:
a3:69:ef:9d:e5:f4:20:a1:af:96:1c:b7:67:05:99:74:2f:e4:
8c:63:1c:d7:c3:40:e3:62:ee:b6:6e:94:47:a6:96:6d:37:2b:
d5:b9:49:ab:1f:c5:75:c5:49:79:60:9f:a7:31:76:f4:ea:9d:
fb:38:85:08:43:66:63:ca:53:67:0e:aa:b9:f1:18:87:5c:87:
c3:63:4c:72:60:8a:18:db:82:c4:ba:62:73:a9:39:2d:8d:89:
b5:b1:e7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:23:04 2026 by rpki-client