Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: jg+QO/c7L4P9ruBV+al/NP/LDui17dvnpajtEz0swU0=
Subject key identifier: 7D:24:49:BD:29:53:A2:71:CA:1D:19:A5:E7:1F:06:69:D4:46:E8:44
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 01A1DD26F5C9956DE79E86A2C0465824B7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 13BB
Signing time: Sun 15 Nov 2026 03:01:20 +0000
Manifest this update: Sun 15 Nov 2026 03:01:20 +0000
Manifest next update: Mon 16 Nov 2026 03:01:20 +0000
Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=)
2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: Klu6fp2jalbTZBhtH78yU+FpEl6Ti3u5oyt7cEpIaRM=)
3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:f5:c9:95:6d:e7:9e:86:a2:c0:46:58:24:b7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Nov 15 03:01:20 2026 GMT
Not After : Nov 16 03:01:20 2026 GMT
Subject: CN=7d2449bd2953a271ca1d19a5e71f0669d446e844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:20:a8:df:1d:63:4f:e1:b4:77:b7:df:e3:
21:ab:c7:c3:cc:17:37:87:81:d8:d1:ce:b3:67:b7:
b4:6e:0f:5f:9d:eb:4f:c8:d6:6e:6b:c5:2a:de:93:
b5:dd:28:dd:58:e2:c0:47:20:f1:d6:1b:c4:fc:72:
b6:cc:18:d2:96:b3:2b:e3:51:bc:92:46:e1:65:f0:
e5:c8:44:8b:81:40:df:c5:84:f3:ab:f6:c6:86:19:
ac:18:56:01:db:82:bd:d1:f9:9f:80:ad:61:f0:76:
5e:4d:26:32:cf:aa:e1:ae:c0:01:62:7a:77:5b:df:
5d:66:70:11:a4:9b:8e:49:18:91:a0:59:ec:77:e2:
f2:51:15:7a:e5:07:0c:26:b4:8e:17:65:cc:59:21:
93:68:79:75:21:50:1c:a7:21:2f:3c:fc:65:d5:c4:
e7:4b:37:5f:85:bf:5b:90:e1:b4:0a:49:d7:71:81:
e6:5b:c2:04:f1:9c:71:6b:1c:f9:b8:79:3b:83:2f:
57:7d:9d:42:7e:11:a7:48:ef:a8:48:92:2c:85:dd:
89:a1:25:5a:5b:fc:24:af:95:ae:7c:32:49:a9:ae:
fb:89:d7:b2:8d:e8:db:48:31:d3:53:9f:c7:ce:83:
ef:70:ac:d7:9a:97:fc:0a:62:16:17:d4:eb:77:60:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:24:49:BD:29:53:A2:71:CA:1D:19:A5:E7:1F:06:69:D4:46:E8:44
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7a:2f:a6:53:62:c7:78:7d:14:46:5b:64:91:03:70:1a:89:
ec:00:6c:d0:e5:1b:e5:1c:bf:d1:ab:50:2c:16:f8:44:de:8a:
14:75:4d:6c:09:e0:8a:45:b6:6d:61:57:e3:a9:76:81:42:00:
11:3e:74:f2:8f:89:7c:37:48:15:08:50:45:66:f7:7d:44:f1:
16:69:f0:71:db:c7:8b:e1:4e:6e:46:ef:ac:ce:86:9c:e6:f6:
28:e7:17:48:f0:45:10:97:2d:75:a5:ba:0f:d0:b0:d4:91:61:
e1:88:17:1f:68:83:af:0d:80:3b:0e:d3:70:ce:d7:b2:92:a8:
5d:a3:4d:f8:54:63:be:59:0d:bd:be:d1:29:c4:d2:7f:21:a1:
1d:c2:df:57:9b:b7:f8:9b:38:da:0d:a9:58:81:f0:96:7f:5f:
25:6e:b5:10:df:db:9d:3a:0f:81:cd:d5:0d:59:27:97:a3:23:
eb:9a:37:87:05:ea:d1:6a:60:df:9b:1a:63:0a:da:00:b1:a0:
9a:37:8b:a0:9f:46:b0:3a:14:27:bf:e0:cf:c6:3b:ce:82:5f:
c1:1b:a7:9f:a9:88:25:b5:bf:75:9c:49:62:6b:60:3d:b2:0f:
c7:0d:d5:42:13:69:ed:85:70:c3:ce:8e:41:c0:8b:d7:5d:04:
03:64:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:36:11 2026 by rpki-client