Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
File: 8okKqmI_iRMlIMqknt14C4WW2qA.mft (raw, json)
Hash identifier: OMm2BbC89NxfFuphiO3jf5ncTBUWxNQcBAIFx4KIrWQ=
Subject key identifier: 92:5B:E2:CF:E4:2A:71:DB:05:64:B1:09:45:B8:D9:B5:13:93:E3:62
Authority key identifier: F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
Certificate issuer: /CN=f2890aaa623f89132520caa49edd780b8596daa0
Certificate serial: 01A1DE7065AA13C73724558474953CCBED4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
Manifest number: 92
Signing time: Sun 15 Nov 2026 09:01:10 +0000
Manifest this update: Sun 15 Nov 2026 09:01:10 +0000
Manifest next update: Mon 16 Nov 2026 09:01:10 +0000
Files and hashes: 1: 8okKqmI_iRMlIMqknt14C4WW2qA.crl (hash: mq51M70Y+wxMYMrNbUVMX8GtpZDuk88rR1fxz69bpTA=)
2: xF1DzDjk2x1kIAUmYjScihsLh94.roa (hash: c33mejelY728d79n3OH435ljL0H9k5ztSPf/lo5be4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:65:aa:13:c7:37:24:55:84:74:95:3c:cb:ed:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2890aaa623f89132520caa49edd780b8596daa0
Validity
Not Before: Nov 15 09:01:10 2026 GMT
Not After : Nov 16 09:01:10 2026 GMT
Subject: CN=925be2cfe42a71db0564b10945b8d9b51393e362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:f3:a3:45:06:94:4c:97:0f:35:f4:78:ac:
32:af:63:9e:99:b1:de:cc:f1:05:67:3f:df:72:8b:
4e:0e:d7:d2:b7:2f:61:87:70:c2:3e:cd:75:c5:92:
af:e7:a8:29:54:69:d9:35:94:81:ec:b9:eb:3c:68:
55:cd:c2:94:e8:14:1e:48:1c:f7:dc:fb:79:54:30:
84:16:8f:10:5b:1d:6a:69:6b:28:0c:d4:fd:80:c6:
2f:23:f9:60:9e:ed:44:51:17:e8:17:1d:39:7c:bd:
d7:d7:19:ab:3f:e0:a4:75:55:30:29:b1:9c:db:5f:
b6:d8:ec:93:c4:a4:42:dc:c5:d3:93:1f:46:31:38:
92:b8:f4:7d:7b:60:1c:63:5d:99:f1:7d:a8:ea:e8:
dc:f5:d6:9c:ba:e8:1d:0c:dc:9d:76:14:2b:0f:6f:
b9:f1:88:9d:53:de:fa:06:db:b3:75:18:be:6d:08:
65:1e:e7:96:b7:b4:8e:4d:66:46:67:62:2f:b4:04:
36:b3:e8:c7:89:29:66:07:b6:64:67:dc:67:f9:e8:
b8:19:39:44:fe:7e:c0:34:9e:36:bd:8a:7f:72:39:
d6:fc:b5:88:fe:e5:47:73:f5:7c:14:ad:ab:51:9f:
ac:66:47:17:ce:04:df:60:a8:06:8c:e6:15:ad:1b:
93:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5B:E2:CF:E4:2A:71:DB:05:64:B1:09:45:B8:D9:B5:13:93:E3:62
X509v3 Authority Key Identifier:
keyid:F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e3:81:5c:1b:84:31:6a:26:09:ab:f8:48:78:86:d7:89:65:
8f:ab:6d:9b:48:b0:72:b7:4c:bb:20:c3:54:54:f6:4b:50:a1:
3c:d9:44:eb:b5:cb:5c:e7:87:83:60:e0:7a:cb:1a:56:5d:8b:
f2:3f:14:c6:9a:fc:c0:40:54:51:06:80:73:16:58:0b:3e:32:
4b:49:77:0e:35:bc:db:00:14:1d:f7:b1:de:70:18:59:05:44:
ea:ca:1a:46:83:45:d4:6c:46:7a:55:58:71:03:e1:90:7e:64:
f2:10:7c:2c:2b:5e:4a:f9:49:5e:26:da:82:d4:2a:0d:b6:dd:
23:ac:e7:0d:0b:92:2e:e1:6a:43:5c:0f:15:5a:b3:31:9c:5f:
6c:c5:fb:11:7c:c2:59:40:9f:c1:f1:02:1d:8c:73:7f:55:7f:
10:42:9a:47:70:c2:c2:38:c9:c5:b0:cd:e4:54:54:fe:96:a0:
ed:06:d1:90:ab:2d:27:77:a1:36:b2:78:67:6e:ae:f8:da:51:
5e:f3:f3:d9:2c:29:09:6a:31:a1:3d:f8:96:c2:73:18:5e:17:
54:1b:b2:8a:e4:ee:a7:00:a4:0a:d2:30:01:0b:47:ef:bf:4d:
f8:16:48:a4:94:25:b9:89:cf:f3:9c:40:65:91:7b:1a:6a:4f:
a6:04:d1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecGWqE8c3JFWEdJU8y+1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODkwYWFhNjIzZjg5MTMyNTIwY2FhNDllZGQ3ODBiODU5
NmRhYTAwHhcNMjYxMTE1MDkwMTEwWhcNMjYxMTE2MDkwMTEwWjAzMTEwLwYDVQQD
Eyg5MjViZTJjZmU0MmE3MWRiMDU2NGIxMDk0NWI4ZDliNTEzOTNlMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLbzo0UGlEyXDzX0eKwyr2OembHe
zPEFZz/fcotODtfSty9hh3DCPs11xZKv56gpVGnZNZSB7LnrPGhVzcKU6BQeSBz3
3Pt5VDCEFo8QWx1qaWsoDNT9gMYvI/lgnu1EURfoFx05fL3X1xmrP+CkdVUwKbGc
21+22OyTxKRC3MXTkx9GMTiSuPR9e2AcY12Z8X2o6ujc9dacuugdDNyddhQrD2+5
8YidU976BtuzdRi+bQhlHueWt7SOTWZGZ2IvtAQ2s+jHiSlmB7ZkZ9xn+ei4GTlE
/n7ANJ42vYp/cjnW/LWI/uVHc/V8FK2rUZ+sZkcXzgTfYKgGjOYVrRuTXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJb4s/kKnHbBWSxCUW42bUTk+NiMB8GA1UdIwQY
MBaAFPKJCqpiP4kTJSDKpJ7deAuFltqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9rS3FtSV9pUk1sSU1xa250MTRDNFdXMnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mN2EzYzYtMmQ0Yi00ZjAwLWE5OTQt
YTc5MTcxN2RlNGFhLzEvOG9rS3FtSV9pUk1sSU1xa250MTRDNFdXMnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mN2EzYzYtMmQ0Yi00ZjAwLWE5OTQtYTc5MTcxN2RlNGFh
LzEvOG9rS3FtSV9pUk1sSU1xa250MTRDNFdXMnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOOBXBuE
MWomCav4SHiG14llj6ttm0iwcrdMuyDDVFT2S1ChPNlE67XLXOeHg2DgessaVl2L
8j8Uxpr8wEBUUQaAcxZYCz4yS0l3DjW82wAUHfex3nAYWQVE6soaRoNF1GxGelVY
cQPhkH5k8hB8LCteSvlJXibagtQqDbbdI6znDQuSLuFqQ1wPFVqzMZxfbMX7EXzC
WUCfwfECHYxzf1V/EEKaR3DCwjjJxbDN5FRU/pag7QbRkKstJ3ehNrJ4Z26u+NpR
XvPz2SwpCWoxoT34lsJzGF4XVBuyiuTupwCkCtIwAQtH779N+BZIpJQluYnP85xA
ZZF7GmpPpgTR5g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:40:08 2026 by rpki-client