Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier: F/uhPn8nyE6tmGAyvc42mDliEjLcqdPpDM/ITQYZrjo=
Subject key identifier: 6F:B3:D3:20:B2:EA:AE:CC:F2:50:35:E7:6A:A3:0F:0F:9E:E1:A9:E1
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial: 01A1D9B84AF3CF4543C1A607F8F8DB03B2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number: 1AF4
Signing time: Sat 14 Nov 2026 11:01:35 +0000
Manifest this update: Sat 14 Nov 2026 11:01:35 +0000
Manifest next update: Sun 15 Nov 2026 11:01:35 +0000
Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: y53sEbMz+lVjCAqKw5icD4ahim62CBPNQaNz+ySj9e8=)
2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:b8:4a:f3:cf:45:43:c1:a6:07:f8:f8:db:03:b2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Validity
Not Before: Nov 14 11:01:35 2026 GMT
Not After : Nov 15 11:01:35 2026 GMT
Subject: CN=6fb3d320b2eaaeccf25035e76aa30f0f9ee1a9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:d1:59:ec:64:f3:29:af:86:bb:6c:6c:c6:
fe:59:0d:1f:ad:0f:e0:00:37:03:3b:42:15:6b:d7:
28:00:c4:fe:fd:34:1c:b1:af:b5:0e:46:25:5e:b2:
46:38:85:36:db:5c:80:92:5a:ce:7e:98:70:04:5f:
57:3c:c9:85:f3:68:5d:af:19:3b:a2:67:1d:39:47:
ab:fe:86:6a:2f:73:3b:47:c2:c4:79:f0:ce:32:5b:
91:e5:ba:cd:a0:08:95:80:30:cd:23:10:0f:fc:3a:
73:9c:d6:50:e1:a7:7b:51:2c:78:4d:bf:43:d7:9f:
03:ee:4d:a9:ca:dc:de:75:22:1b:08:ab:bb:99:4f:
9a:d5:08:df:af:fe:20:d5:1b:98:3e:e8:1f:ed:4e:
14:ba:00:dc:b9:85:8d:c2:a2:15:32:f5:96:d4:58:
0e:21:3d:16:e1:49:8e:d3:92:7a:88:a2:71:e0:5d:
1e:a1:3c:38:b1:6c:62:58:cf:c2:7f:6f:c9:49:df:
48:7b:5b:6b:ae:35:ff:f2:3f:ca:1a:00:5d:9f:dc:
7f:6f:8c:bf:d4:92:39:51:3d:1f:db:7f:62:47:2b:
7f:a5:8d:d0:e9:be:ed:44:ee:05:85:d6:8c:1c:85:
e8:d8:98:a0:88:04:67:10:f9:dd:7e:a6:a4:a1:82:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B3:D3:20:B2:EA:AE:CC:F2:50:35:E7:6A:A3:0F:0F:9E:E1:A9:E1
X509v3 Authority Key Identifier:
keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:31:55:8a:23:61:78:5d:99:98:ee:32:0f:0b:d2:de:f7:db:
66:48:16:ab:2c:97:b4:87:e3:fa:37:aa:a2:f7:f3:99:76:15:
81:04:42:9c:72:b4:31:f5:71:22:95:5f:1d:9e:f8:a4:f2:78:
cc:e7:47:84:6e:d3:20:47:91:d6:c9:e3:fd:ce:fa:4c:56:ab:
f4:c7:35:79:0f:cb:23:48:fb:80:ed:c1:4f:54:b3:db:89:73:
62:9d:c4:cc:c3:f2:72:6e:61:ad:96:e2:50:44:69:f5:ad:94:
66:15:b7:3b:bc:81:71:70:e3:c1:b4:30:63:1d:11:10:96:de:
7f:37:8f:50:ce:ae:79:48:d0:66:c4:0d:87:c2:1d:2c:45:6f:
a7:2b:c6:cc:37:ae:ec:a8:c6:72:3d:90:b7:55:f7:59:8a:ef:
40:2c:78:7b:8b:92:8c:0d:b4:b7:2a:7f:22:8a:e7:34:c4:52:
c0:3f:21:a3:06:a4:18:e9:ba:9f:b6:ac:7b:d0:f3:e2:61:7d:
6b:3f:04:c8:ad:63:35:d4:de:8f:1b:9b:3b:d1:dc:91:a4:53:
c0:ed:b0:ea:09:3f:33:83:a1:6d:d0:0e:26:0f:7a:2c:d1:e6:
b2:e6:ea:77:53:f8:a7:59:9f:7f:06:1a:42:16:ec:dc:54:f1:
fc:b7:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:47:36 2026 by rpki-client