Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.mft
File: r8l037JMymsg8zUCe681KCOmrYk.mft (raw, json)
Hash identifier: t4s7stkPeXXRJiGO/GCp5UYBV59lQ6vkjV6CetAJ5Xk=
Subject key identifier: 84:A9:D3:6C:DB:F8:C4:DF:70:22:28:DB:4B:29:AB:C1:7A:28:EA:F0
Authority key identifier: AF:C9:74:DF:B2:4C:CA:6B:20:F3:35:02:7B:AF:35:28:23:A6:AD:89
Certificate issuer: /CN=afc974dfb24cca6b20f335027baf352823a6ad89
Certificate serial: 01A1DFF19763C3CA88F671BF5A1753DBDDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8l037JMymsg8zUCe681KCOmrYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.mft
Manifest number: 0173
Signing time: Sun 15 Nov 2026 16:01:54 +0000
Manifest this update: Sun 15 Nov 2026 16:01:54 +0000
Manifest next update: Mon 16 Nov 2026 16:01:54 +0000
Files and hashes: 1: avrucIi0djcCrIy6x1fFo0v4f2c.roa (hash: WOnk2uQgrei5vK2bgB2aJn6KU5gSaufmTMk+qAqXzrA=)
2: r8l037JMymsg8zUCe681KCOmrYk.crl (hash: /0vYviBlH4rHLDHMnF3kJ8GCqVN+E52Y1S4XwYf6xaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8l037JMymsg8zUCe681KCOmrYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:97:63:c3:ca:88:f6:71:bf:5a:17:53:db:dd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc974dfb24cca6b20f335027baf352823a6ad89
Validity
Not Before: Nov 15 16:01:54 2026 GMT
Not After : Nov 16 16:01:54 2026 GMT
Subject: CN=84a9d36cdbf8c4df702228db4b29abc17a28eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:c5:74:0c:70:a4:9e:16:5c:59:47:ac:38:
1e:7c:f8:75:d2:7a:60:87:ac:45:64:a1:ec:4e:e6:
f1:28:1a:68:4a:e7:aa:63:42:9c:97:21:3d:9c:0a:
66:73:08:31:0d:fb:bc:57:dc:32:a2:e1:50:2f:9a:
59:77:1e:0d:1c:0f:bd:7c:b3:6a:6d:2d:86:fb:84:
e5:6a:0e:e2:ab:06:fb:95:e8:be:77:f2:9a:c5:4c:
fe:2e:da:75:17:93:03:59:a6:e3:c7:2a:76:ba:1f:
b2:8e:38:bc:c0:08:98:87:1a:93:4d:62:fa:6f:7f:
11:5c:34:9c:e2:23:d3:67:3f:84:99:06:c8:49:30:
1b:49:55:71:ca:da:b7:ba:ce:7f:54:96:86:05:a8:
43:39:eb:11:6f:81:39:66:d5:02:45:ff:73:03:2e:
de:a0:ba:14:7b:98:71:e0:17:2b:78:d4:ff:04:0f:
87:29:08:2e:3e:40:25:2c:35:8b:47:4d:74:a2:f6:
c4:92:81:3d:a6:a8:5c:2a:77:18:d7:73:e1:fb:32:
6d:09:73:95:4e:4a:d9:52:9c:b6:f2:b4:69:dd:e0:
cd:77:25:61:6a:38:b7:f6:a8:39:54:95:b4:51:12:
39:ce:e6:6f:2a:93:53:1c:a2:b6:6c:c8:b7:4f:5c:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:D3:6C:DB:F8:C4:DF:70:22:28:DB:4B:29:AB:C1:7A:28:EA:F0
X509v3 Authority Key Identifier:
keyid:AF:C9:74:DF:B2:4C:CA:6B:20:F3:35:02:7B:AF:35:28:23:A6:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8l037JMymsg8zUCe681KCOmrYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/0512cd-23d1-4ec8-bc2a-c5b4d5789501/1/r8l037JMymsg8zUCe681KCOmrYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f5:93:b9:5a:0d:7c:e8:86:8e:4f:cb:98:70:7e:96:cb:3b:
a0:5e:83:38:ce:a5:9a:fd:1b:ad:f1:58:65:70:fc:36:44:94:
98:9b:20:60:9f:cb:b0:9a:5f:93:7a:65:69:27:7d:cb:99:dc:
9e:0f:af:2e:19:58:d0:a1:f0:0b:54:17:db:40:8e:77:1e:1b:
d8:e0:9a:79:c8:d9:c9:70:41:4a:af:0a:ed:b2:d8:96:10:b7:
20:ef:7f:e8:6c:7c:d4:73:20:5a:64:8b:d0:91:91:33:35:ec:
5e:b4:ac:5b:4a:e2:e7:c1:ca:8a:9d:83:03:b7:86:8d:c2:29:
c0:5f:70:be:e4:e5:23:a7:6c:ce:fd:df:97:52:99:65:73:9b:
bd:75:5a:8c:c1:e9:a2:8a:ca:de:0a:6f:03:4f:32:ae:77:63:
b0:f0:3d:d7:e7:cc:61:6b:f0:26:e2:7e:3b:a5:5f:5d:fa:6f:
28:85:7d:4f:ab:4c:1a:f3:60:84:7a:fa:1b:45:75:ee:ea:a7:
da:32:4e:ab:b0:94:8d:87:b1:5a:6a:4b:74:19:fd:a9:7b:7e:
f3:03:7c:78:19:35:55:1d:a0:ba:ac:39:f2:e9:15:e2:91:62:
77:5e:28:49:36:02:d7:8d:cf:66:bf:1d:9d:ee:6e:33:fa:6b:
38:3f:3a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:16:24 2026 by rpki-client