Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: adyWtkHrg0mO4J+isOVWoZGHGMqURnt6Q3nXTEs751s=
Subject key identifier: A5:2A:75:9A:22:69:BC:C1:9F:A2:A1:C3:5F:A3:DE:21:A0:9C:FF:BA
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 01A1DCF0811D383ADEE7C85D70CD3ECFCDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 16A1
Signing time: Sun 15 Nov 2026 02:01:51 +0000
Manifest this update: Sun 15 Nov 2026 02:01:51 +0000
Manifest next update: Mon 16 Nov 2026 02:01:51 +0000
Files and hashes: 1: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: uqQPUfvavH+a3dPqhLAIWmF5QHDiU3Y1WKXF/tLUK3c=)
2: OYgre_-TZIfJxOW5CqDrgpwgkMo.roa (hash: OBphoVWe1wpCXSnuX5Vie+bHC5Q80K+aLt8j/e5pkXQ=)
3: PQaM9i-ZFvgM-odibb8AZoCwaLw.roa (hash: 6qm8ZSVZvMA/kQTFFqEROzq6H8nPq+g1vFjlYN9Vl3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:81:1d:38:3a:de:e7:c8:5d:70:cd:3e:cf:cd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Nov 15 02:01:51 2026 GMT
Not After : Nov 16 02:01:51 2026 GMT
Subject: CN=a52a759a2269bcc19fa2a1c35fa3de21a09cffba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:a3:26:77:e2:76:f0:0b:38:fb:c2:b3:77:
a9:fa:72:8e:cf:0f:1a:70:a3:90:5e:80:0e:80:49:
10:e5:7f:c0:c7:3c:b5:18:b8:1c:1d:05:11:91:d5:
be:85:d0:1f:da:56:77:93:d3:02:86:c0:97:5c:a0:
81:14:10:60:0e:f0:8a:be:51:01:d2:2f:92:3d:f7:
ae:c0:e1:44:d4:7d:74:99:af:9e:5d:1e:42:c1:c0:
59:70:0f:67:11:c8:01:8d:8a:ee:da:05:09:f3:a8:
31:51:04:11:d9:ac:a7:f9:69:a6:52:91:fb:82:84:
a6:e3:dd:d5:95:1f:7d:cd:0c:a6:97:4c:8a:b9:26:
bf:64:d3:6c:0e:6f:de:cc:11:ae:2b:1e:30:63:35:
ef:07:4a:c8:76:80:3c:9c:73:23:cd:2b:8a:e8:ac:
e5:79:07:e6:c7:b8:70:50:9d:66:7a:b5:4e:c2:42:
3e:a7:f8:72:83:7f:a4:31:e4:58:fd:1c:33:40:07:
d5:b8:1e:df:66:26:ff:75:b9:7e:97:98:82:d3:bd:
40:48:89:be:6a:4a:7a:3c:91:ae:24:42:6f:20:91:
45:b3:1c:0b:e3:3d:82:4c:80:32:30:86:df:32:81:
0b:b8:db:84:b6:b3:0b:0d:1b:dd:39:1d:0d:02:c3:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2A:75:9A:22:69:BC:C1:9F:A2:A1:C3:5F:A3:DE:21:A0:9C:FF:BA
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:20:e5:f1:01:f0:bc:27:7f:13:00:25:90:d7:78:f5:85:bd:
59:c4:33:c1:4a:b3:21:b4:4f:c2:ba:a6:17:f4:31:b8:b5:bd:
20:9a:03:f0:64:ad:02:3f:48:7e:4b:82:2e:8e:23:26:b4:f4:
7d:3f:92:39:90:8f:69:4e:22:38:d6:de:78:a4:f4:a2:3b:06:
1c:0f:a4:58:90:63:08:0d:8d:ca:69:38:1b:85:b0:6f:af:9f:
db:fd:e3:ca:eb:6e:68:2e:89:40:7c:7c:61:52:b5:da:a5:88:
99:a6:cb:45:93:b1:6d:f2:11:03:2e:af:8d:93:1f:fb:ae:cb:
55:3a:49:d8:64:62:2e:7d:34:d1:16:35:f2:3d:38:c9:51:11:
f4:4d:9d:51:5a:5c:5c:15:0f:5d:55:b6:de:18:71:22:01:20:
3e:c8:ce:dc:04:ed:52:e6:fd:48:46:41:98:d7:b9:25:9b:c3:
6b:5e:72:c8:1a:55:16:a9:03:d6:d5:0d:f6:1e:2f:72:8a:79:
57:66:49:5e:e9:01:98:09:e5:05:95:6e:e9:31:f7:a9:72:7e:
94:59:6a:5f:81:40:ae:a2:74:a0:1f:a4:97:60:7c:5a:be:ea:
66:e9:7a:04:0a:90:1f:62:e7:21:28:90:44:fb:10:c2:22:03:
62:3c:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:28:14 2026 by rpki-client