Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: jHWguERHieeOC5DiozgRG8fpkBtVB8cM4/b1w/5YgPM=
Subject key identifier: 17:1D:05:FD:47:B0:1E:77:FE:FA:0B:3F:BB:3D:56:64:BF:20:DF:B2
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 01A1DEDE5ADE358CB4B820BB5187FE585D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 0BBF
Signing time: Sun 15 Nov 2026 11:01:16 +0000
Manifest this update: Sun 15 Nov 2026 11:01:16 +0000
Manifest next update: Mon 16 Nov 2026 11:01:16 +0000
Files and hashes: 1: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (hash: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ=)
2: ATMfOPn_iklWkDGZaU6nBEYrMIs.roa (hash: MkgqGmH4i1AY83gSH/fJ/hLhxo7uHROhQ+deiJMJQps=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: /i0cSFY0ZUR4B6sbbkOSMSC5DFY4T+kEPEh1rF1thxM=)
4: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (hash: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:5a:de:35:8c:b4:b8:20:bb:51:87:fe:58:5d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Nov 15 11:01:16 2026 GMT
Not After : Nov 16 11:01:16 2026 GMT
Subject: CN=171d05fd47b01e77fefa0b3fbb3d5664bf20dfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:1e:f6:74:ec:a0:17:3e:5d:ae:82:d7:62:
70:64:05:bc:4c:13:96:2b:76:c1:14:9b:07:26:de:
ff:c6:47:86:88:16:39:58:05:b4:b0:07:20:09:e8:
4d:a3:9f:19:73:f5:cf:9c:9d:0f:0d:cd:46:cd:21:
35:98:c8:ab:62:3b:1e:22:13:cd:83:15:1c:60:09:
2f:98:39:cd:6e:c1:bc:c4:3e:f9:08:6c:75:68:ab:
b0:62:9d:6a:4d:08:e4:44:de:26:c1:cf:4e:e8:5e:
18:c7:01:11:98:c6:c4:c8:ea:44:4c:c5:fa:2d:fe:
9d:2d:ba:76:f3:25:51:84:53:b7:d1:f4:b4:94:3f:
a7:43:6a:84:cc:08:c9:b8:ed:50:9a:1c:74:f5:6f:
8c:1e:0d:98:0f:3b:8a:59:50:79:9e:d4:69:a4:0e:
9b:84:e6:68:98:e0:ca:7d:59:b9:a9:b1:52:15:53:
a0:b3:fa:a8:27:79:df:a6:22:24:bf:da:08:cd:83:
61:b1:14:63:82:db:c5:20:8c:50:15:1e:80:7f:97:
3f:a6:9c:67:78:d9:77:2f:1b:28:ff:80:05:aa:66:
81:18:3e:88:1f:47:bb:7d:76:f7:7c:65:1e:d4:df:
42:fb:3b:80:3c:90:2f:fd:56:6d:6e:d0:15:39:ac:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1D:05:FD:47:B0:1E:77:FE:FA:0B:3F:BB:3D:56:64:BF:20:DF:B2
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e9:77:c5:ee:d6:59:0a:fb:12:0c:eb:eb:b0:5f:72:32:55:
2a:c7:80:1e:7f:c5:34:e7:88:6f:4c:86:ec:b8:26:f4:5c:0f:
b2:9c:26:32:9d:6b:66:9c:42:37:81:fa:b2:cf:97:fa:53:b6:
8f:c5:62:ab:f6:37:01:03:89:55:6f:b7:0e:c3:a8:6c:dc:88:
eb:56:7c:70:06:89:2a:bc:fd:a8:70:8a:d2:75:50:ea:ff:bd:
e9:ed:57:e3:28:78:94:d2:d6:f1:ae:e9:b0:cf:23:fa:b1:ed:
f8:6c:00:b8:98:3f:b2:30:df:5a:96:66:58:cb:71:b2:1b:8b:
2f:97:1c:4b:94:df:32:1a:cd:1d:ea:fa:e4:35:e2:d9:ca:01:
46:ef:7c:50:ef:94:df:f8:a7:b3:2d:cd:03:32:91:49:93:12:
2e:31:65:24:ca:5a:d6:52:83:d8:03:3e:a3:3c:34:11:74:1f:
43:a5:ae:f1:ab:ee:5b:93:1a:16:0a:b2:a0:21:27:ca:cc:e1:
f8:bb:10:ed:bf:f2:06:66:9c:68:bc:db:ab:38:16:13:ed:43:
fe:c3:aa:23:1f:d7:55:3e:bc:6d:77:69:89:b4:aa:82:0a:f7:
4d:c2:32:73:77:81:99:b2:7d:ae:41:00:3b:4c:a5:30:9a:62:
49:43:62:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:19 2026 by rpki-client