Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: BBkxMM/FgfLasVKRc3+FyUEtykbK44kRnlBzshXSDBA=
Subject key identifier: B3:0B:41:83:7D:71:B4:D0:39:18:94:E4:76:F4:26:4D:37:AB:D1:3C
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 01A1DE027BBE29BEF15B2AFE62CE77B4C28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1AF4
Signing time: Sun 15 Nov 2026 07:01:07 +0000
Manifest this update: Sun 15 Nov 2026 07:01:07 +0000
Manifest next update: Mon 16 Nov 2026 07:01:07 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: a5b5vIrnR4R/taBjFU/QlzyBq7rD5A5BNlW6PKAVKSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:7b:be:29:be:f1:5b:2a:fe:62:ce:77:b4:c2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Nov 15 07:01:07 2026 GMT
Not After : Nov 16 07:01:07 2026 GMT
Subject: CN=b30b41837d71b4d0391894e476f4264d37abd13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:98:5a:d7:95:56:45:fb:51:44:ef:83:31:
69:11:1e:9e:c0:4f:24:54:a5:ec:8b:02:75:58:f3:
ad:97:18:ee:8e:b0:1d:6a:8d:e2:b8:c5:59:7f:3d:
95:28:90:76:24:90:7a:ff:bd:24:f5:2b:6a:58:6c:
cf:54:8a:63:e6:39:d7:c3:cd:80:ea:b8:e1:0c:7c:
16:6f:a0:7d:55:18:9b:4f:ea:11:7c:3c:df:3e:b8:
aa:ed:bf:9c:e5:b9:36:3d:ba:26:7d:b8:15:06:9f:
b6:0d:49:d3:4d:f6:ad:1b:7b:32:32:a8:90:c7:12:
36:e3:34:48:e3:b6:c9:f6:bb:82:f0:83:59:12:dc:
fa:3b:f0:59:90:c0:7f:7e:33:99:5e:0a:e8:21:ee:
10:3e:2b:f5:14:b4:7f:4c:03:c0:02:cd:6d:74:6e:
7f:3b:e0:5c:a4:cc:a4:33:27:62:84:e1:c6:c4:10:
ab:9e:24:cf:47:72:84:39:7c:39:2c:a6:12:18:44:
e2:e8:98:97:49:d9:50:bf:9a:48:1e:18:43:2c:49:
74:24:f2:f7:6c:14:12:27:98:43:5e:8d:7d:5b:9e:
74:35:ef:52:42:1b:93:58:e2:ee:e0:b1:2f:60:2e:
7e:6b:4a:07:9e:55:da:24:fa:c7:41:66:66:76:66:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:41:83:7D:71:B4:D0:39:18:94:E4:76:F4:26:4D:37:AB:D1:3C
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:28:8a:ae:81:8b:6d:47:2f:d3:a0:df:e4:86:04:e3:56:7a:
83:15:41:8d:d5:6e:66:fa:7d:4a:a2:5c:c9:49:46:db:d5:14:
69:6d:2a:8a:85:1a:b0:08:23:0e:7c:a0:79:ac:c5:a7:de:43:
a5:a0:ec:1f:85:3f:3c:88:06:31:5d:34:93:a6:a3:d4:3b:cf:
d7:5b:d2:da:54:c3:20:ef:9b:f8:91:00:f1:56:1c:57:d0:9c:
39:60:f4:bf:87:73:4b:68:80:5a:5c:fb:9d:26:bd:f3:7c:ba:
4b:29:0a:1a:e2:87:0a:76:f6:21:f8:ae:7a:f5:b1:34:a6:63:
13:6f:bf:da:79:1e:8c:d8:0b:bc:f0:b1:54:2e:da:cc:c3:26:
67:21:9f:42:21:bc:e3:25:5a:89:bc:f1:e4:13:c8:ea:44:b7:
c9:f3:7a:2f:cc:9e:62:eb:16:33:4d:00:c2:be:ec:26:89:a4:
68:69:00:81:dd:7d:8e:1e:3c:ad:f6:c7:d8:32:24:6a:09:32:
6c:d0:23:68:97:9c:b9:48:c7:b8:19:67:4a:ce:25:a5:8c:66:
76:1f:ba:af:5f:38:5a:18:57:9f:70:c9:7c:6e:14:d9:b8:81:
01:01:ae:c6:a1:62:df:b4:41:f2:bd:40:7c:ff:d9:7e:4c:1b:
eb:03:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:33 2026 by rpki-client