Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: 1ywnatGd0E5RcTtGqFPyjXvINTT7jNXQ2prbKgUhDuQ=
Subject key identifier: C8:8D:4B:BE:C0:19:FC:FC:F5:66:7A:58:D3:26:75:9F:77:AF:3D:E0
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 01A1DE39927AAACE4C03A02EC6B46204D22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 19F2
Signing time: Sun 15 Nov 2026 08:01:17 +0000
Manifest this update: Sun 15 Nov 2026 08:01:17 +0000
Manifest next update: Mon 16 Nov 2026 08:01:17 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: yTi4urNrnT/cPBe+NPBJdmgd5XOznvOAwXpKthc+OVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:92:7a:aa:ce:4c:03:a0:2e:c6:b4:62:04:d2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Nov 15 08:01:17 2026 GMT
Not After : Nov 16 08:01:17 2026 GMT
Subject: CN=c88d4bbec019fcfcf5667a58d326759f77af3de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:fd:c4:4e:e3:fd:e9:48:3e:be:ee:80:67:
dd:52:fe:31:c4:1a:d9:19:69:be:25:83:54:2c:f8:
bc:68:a1:ee:8c:5f:a5:fa:bf:21:fe:c4:a9:80:60:
99:7a:4b:20:0a:5d:7c:7c:ef:0d:c5:b7:82:b5:3a:
55:e5:0a:85:07:33:82:cb:0f:17:83:6b:74:f6:6c:
68:9b:ec:77:a1:a3:9d:e4:8c:6c:7c:3b:3c:51:f6:
47:c2:58:22:49:06:20:e5:44:8b:22:7e:d5:c3:85:
a7:33:86:54:81:6e:7e:67:85:6b:22:b2:0c:37:3e:
a8:69:b6:54:71:28:64:64:31:13:53:b4:eb:79:e3:
d0:61:95:d3:62:cc:60:2b:12:f2:a4:d5:f2:e9:1e:
42:9c:9f:e4:2e:66:ed:52:50:2e:7b:7c:af:7c:de:
66:f3:0a:45:37:62:9d:b7:2e:bf:08:26:de:12:39:
4d:4e:e5:e1:1d:18:f1:a9:80:b5:b4:97:74:d6:4b:
bd:e6:1e:9f:a1:80:7b:e6:7c:62:8d:35:28:a3:01:
01:da:84:e3:59:88:e1:d2:a1:d6:d3:47:86:a8:69:
8f:4f:85:14:47:54:e6:32:64:04:2c:a5:64:6d:3d:
7e:06:cb:bf:b3:76:ea:d4:8e:82:54:21:7e:2c:f4:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8D:4B:BE:C0:19:FC:FC:F5:66:7A:58:D3:26:75:9F:77:AF:3D:E0
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ee:7e:1b:d9:17:d9:11:ca:63:24:ad:ba:0d:92:c0:28:6e:
4e:f4:92:9c:06:59:59:53:55:97:29:87:cb:e6:8c:1c:11:e6:
65:bb:3d:8f:c8:28:54:c7:99:1d:82:d5:94:a5:59:bb:d6:15:
cc:76:1c:40:4c:4d:3c:9a:e4:7a:19:43:e8:41:03:7d:1b:f5:
7f:3b:8e:f8:21:f2:a4:3d:df:2c:f7:e6:96:6c:12:46:20:17:
14:06:72:b3:10:3a:68:ae:4b:d3:73:a6:1e:de:79:ed:8d:35:
5c:f9:f4:34:ed:a2:c6:c5:f2:8d:a6:7c:ae:31:ae:10:0d:1c:
f9:5f:e0:67:33:90:e4:d6:f2:94:ce:ff:b9:36:07:df:f9:24:
c7:28:34:d0:02:00:d9:24:8b:8c:b6:b0:7d:00:99:5f:37:cb:
4a:c5:e8:6a:a2:13:87:7a:57:98:ed:bc:55:ce:cf:42:14:ad:
7f:0b:6a:13:fd:50:bd:83:b1:06:ac:61:1f:53:a3:44:e5:c8:
16:43:7d:20:02:98:40:f6:fc:83:ee:ca:03:7a:ef:d9:59:c8:
bb:a4:86:fe:22:2d:6a:c9:dd:04:e1:0f:01:94:31:54:5a:e8:
a5:c1:f2:d5:8c:94:a3:01:0a:f5:db:15:ca:11:c9:cc:9f:7b:
15:7e:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:33:12 2026 by rpki-client