Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: 4rA7TRud54PZUeF1q6wBWOdF4eg7RbzLBfsjbL/YwKE=
Subject key identifier: F3:3B:FE:53:1C:11:CE:8A:0B:1D:70:87:BB:BB:0C:DB:69:0B:79:5C
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 01A1DB021D6A8994A8868DD7597DB45EDEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 16A0
Signing time: Sat 14 Nov 2026 17:01:51 +0000
Manifest this update: Sat 14 Nov 2026 17:01:51 +0000
Manifest next update: Sun 15 Nov 2026 17:01:51 +0000
Files and hashes: 1: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: dn7LqPUpmVbzqCoGLgVDe2S+NK0iGRB0CZxtXd2GQuI=)
2: OYgre_-TZIfJxOW5CqDrgpwgkMo.roa (hash: OBphoVWe1wpCXSnuX5Vie+bHC5Q80K+aLt8j/e5pkXQ=)
3: PQaM9i-ZFvgM-odibb8AZoCwaLw.roa (hash: 6qm8ZSVZvMA/kQTFFqEROzq6H8nPq+g1vFjlYN9Vl3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:02:1d:6a:89:94:a8:86:8d:d7:59:7d:b4:5e:de:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Nov 14 17:01:51 2026 GMT
Not After : Nov 15 17:01:51 2026 GMT
Subject: CN=f33bfe531c11ce8a0b1d7087bbbb0cdb690b795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:d4:3b:17:f4:fb:8a:50:b9:31:08:f0:61:
dd:9c:e8:96:82:d3:3d:0f:e7:7b:85:8d:a1:51:bb:
c9:d7:9e:ce:a7:ba:90:61:ca:2f:b5:cb:0e:92:8f:
d5:81:98:8d:fd:3f:2f:f7:d2:3a:62:8e:c3:3d:21:
a2:43:ab:40:7a:0c:50:20:27:ac:0d:59:12:85:22:
2f:f5:59:5c:82:7c:23:2a:e2:6e:89:00:75:70:48:
07:43:88:e2:93:ac:3b:d5:ad:23:c4:24:a3:d7:73:
43:82:ae:47:3d:59:0f:0c:e0:ed:22:f0:fc:cd:11:
f4:8d:b7:ae:4c:15:a0:86:bd:cc:5c:3c:27:fd:e8:
03:51:e8:9b:bc:8e:cf:3a:12:2b:99:20:3f:15:cd:
66:d9:f4:93:af:ca:82:ba:60:e0:c6:59:80:f5:0b:
5b:8c:a9:dd:c5:06:9b:c5:28:3b:f3:44:a2:34:c7:
c7:b9:21:84:ba:98:35:49:c4:f3:67:44:08:96:e9:
b9:b6:8e:3f:a8:21:75:27:75:b4:2b:66:94:12:ce:
53:90:36:51:bb:18:25:4a:a5:94:31:f8:ed:c9:86:
24:76:3c:3d:c2:c4:50:d5:58:c1:21:ce:bd:c0:e3:
dd:ee:22:5a:6d:9b:a1:ad:78:99:25:b4:90:ab:a3:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3B:FE:53:1C:11:CE:8A:0B:1D:70:87:BB:BB:0C:DB:69:0B:79:5C
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:44:1c:b9:3f:5f:89:42:c7:a8:36:7c:2f:c1:b7:98:5b:
e4:e2:71:ef:e6:8f:15:9c:c5:1e:c3:9b:44:71:6e:75:ef:47:
a8:ff:6c:3b:84:e7:15:be:66:7d:07:ab:17:85:48:5c:b9:a3:
93:d5:21:d1:40:7d:36:13:7c:29:21:00:d9:d9:02:e3:d9:38:
d0:85:30:a8:18:cd:25:bd:b9:a1:0f:7c:43:41:f3:ff:34:ee:
09:19:6d:e7:7a:d7:86:fc:ff:73:18:f4:1c:42:79:22:6e:f9:
4c:a1:99:dd:48:d5:b5:f9:a6:7a:90:ea:e9:5c:5d:24:57:30:
32:b7:f7:e1:81:85:e0:33:82:39:ec:68:3f:aa:45:3b:15:01:
b8:e7:30:7c:96:24:c9:ca:78:4b:33:67:20:81:2e:20:03:09:
b7:94:2b:e4:da:e2:10:3c:c3:2d:1b:ca:8c:3e:03:7f:60:72:
71:b7:40:81:94:b0:64:23:40:43:24:f6:da:c0:5d:ea:ed:75:
4b:03:4b:9a:40:77:85:a5:a1:64:5b:d8:45:4f:82:60:fa:4e:
3b:8d:7a:90:93:ab:c6:e3:44:f4:b2:3d:53:22:e6:93:e3:70:
a1:cd:10:97:38:7f:19:4b:6e:58:eb:4b:80:5d:7f:02:d0:3a:
8a:c0:c5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:11 2026 by rpki-client