Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: dmpcW0P1MfQcxOrlaPjNrxYwp2ofRUg8o2mLe13Lp9k=
Subject key identifier: FB:50:1E:D9:94:1A:7D:87:9F:CF:71:61:46:A4:1E:A0:01:90:67:BF
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 01A1D9EF6EDBCE5A42C5D60CB276C26A5ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 1263
Signing time: Sat 14 Nov 2026 12:01:49 +0000
Manifest this update: Sat 14 Nov 2026 12:01:49 +0000
Manifest next update: Sun 15 Nov 2026 12:01:49 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: 4oCm5ND1Wiq/hw2+nB0aH5M3FkeqM8Zqbc5WMgh7iL8=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ef:6e:db:ce:5a:42:c5:d6:0c:b2:76:c2:6a:5a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Nov 14 12:01:49 2026 GMT
Not After : Nov 15 12:01:49 2026 GMT
Subject: CN=fb501ed9941a7d879fcf716146a41ea0019067bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:93:0f:0a:99:32:03:a0:ed:40:90:41:a3:
f5:cb:22:b5:05:24:09:dd:ca:db:21:96:6c:1f:ab:
94:68:40:04:5c:38:ad:21:db:31:38:35:f9:58:c3:
e2:85:26:a3:84:25:5f:1f:04:36:5a:25:ce:35:8f:
cf:ba:3a:a3:24:04:ae:81:72:f5:6e:e2:f9:36:d1:
24:68:53:e2:5f:46:6f:86:74:8f:9e:1a:54:07:77:
44:00:6f:bf:0c:b4:42:ef:17:c1:17:f0:74:cf:7f:
78:22:90:b5:7e:f4:af:7b:aa:f9:6f:2e:1a:57:00:
b4:a6:ae:25:86:7f:cf:86:d1:d1:a4:4b:14:0f:9c:
90:78:d6:ee:26:87:c5:ba:4e:66:62:c8:65:7f:06:
c5:ea:35:07:6d:de:b0:2a:08:cc:78:30:57:3e:1e:
0c:ad:e9:ec:52:45:bb:38:bc:7b:52:0b:d7:a4:c1:
54:03:e7:8f:3e:4c:33:eb:ba:12:75:6b:34:9d:79:
68:8f:a6:84:3a:ec:55:2b:5a:c6:cb:85:ea:81:ec:
1b:8b:70:ea:69:b8:25:07:e1:c9:09:d6:df:f6:69:
00:ce:8a:0b:80:e6:0c:5c:fb:03:e4:e0:9c:38:48:
4a:97:07:cf:82:93:91:c7:90:cf:57:54:c8:fe:8c:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:1E:D9:94:1A:7D:87:9F:CF:71:61:46:A4:1E:A0:01:90:67:BF
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1a:aa:4f:81:f1:fc:43:e4:04:43:57:87:52:39:4d:b1:5a:
fa:7a:9a:dd:f4:b2:1e:1e:ae:06:0c:25:08:2e:da:29:36:a3:
83:1a:ca:5d:0f:5a:a7:b7:49:61:b2:9f:ce:27:a5:d2:61:e8:
bc:62:9b:c3:55:c1:ae:85:ef:d0:fc:2e:18:4e:fb:2c:a4:3e:
eb:d9:61:ee:f3:5b:61:fd:20:13:58:09:34:7b:ed:47:9f:0f:
0c:53:fb:59:e0:27:ac:6f:09:d4:6f:86:1b:b4:8f:01:91:e8:
3e:fb:34:8b:97:d5:74:92:bb:79:4a:95:77:64:02:05:18:5f:
a9:1c:e8:15:5c:4c:52:ca:9d:61:56:5b:0f:05:34:a2:cc:fd:
92:cb:65:b6:ed:a8:87:4e:14:75:67:3d:4a:87:8c:a5:8f:1e:
ab:83:b1:3e:43:fc:20:80:6f:ff:df:ec:93:00:49:4d:3b:19:
1d:a8:90:a8:e6:83:0f:1a:34:40:31:d1:5f:9a:0e:09:8b:a1:
d9:52:7f:de:2a:aa:38:05:92:85:5e:82:fd:5c:a1:5f:f7:71:
64:5f:de:93:cb:b5:bf:b0:d2:23:04:91:80:bc:9a:89:cc:bd:
f2:c6:e8:87:ed:85:ce:9b:76:d3:d1:c1:6d:8e:91:11:6b:b1:
46:23:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:21 2026 by rpki-client