Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier: nK+5VNcjzZ7HumRO1PAad/B1h7FmZGKL05Cn3wshQFI=
Subject key identifier: 98:88:C9:4A:46:E3:80:7A:50:51:ED:D7:6A:96:86:6E:BD:0B:39:8E
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial: 01A1DFF1142E2935323E15EF56D727080DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 16:01:20 +0000
Manifest this update: Sun 15 Nov 2026 16:01:20 +0000
Manifest next update: Mon 16 Nov 2026 16:01:20 +0000
Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: DuqvgOgEoebIGsFLi+M6y8HcN9eMNdF3zKlgFI7oyUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:14:2e:29:35:32:3e:15:ef:56:d7:27:08:0d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Validity
Not Before: Nov 15 16:01:20 2026 GMT
Not After : Nov 16 16:01:20 2026 GMT
Subject: CN=9888c94a46e3807a5051edd76a96866ebd0b398e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:d9:52:df:ba:63:a4:69:db:89:7f:03:37:
95:ce:bb:43:f9:6d:6a:2e:c5:c4:0f:82:ba:14:d2:
68:47:fe:1c:8f:99:d5:0a:8c:c9:95:a8:bd:d0:df:
70:d3:a3:1c:2e:d6:c3:23:0f:33:7a:df:30:1a:dc:
ce:08:e4:35:0d:1f:43:4e:6e:a0:43:b3:3b:11:17:
43:23:7c:c9:5f:12:66:8b:5d:79:df:ad:85:f4:6c:
36:8a:72:c5:32:db:60:5a:3b:99:04:b2:3c:bb:b6:
23:a7:42:42:ed:ab:37:8f:71:0f:29:1d:37:2c:03:
19:0e:4a:d5:2b:32:61:4d:15:0c:fb:25:cd:ca:d3:
28:0f:e6:c7:b7:ae:04:f6:7d:3a:3a:c3:f8:da:59:
8f:4c:29:13:9e:6f:56:95:da:04:54:32:33:9f:a0:
82:62:34:66:ea:b4:a8:b5:db:dc:31:6c:a6:f1:c1:
f5:c1:d8:97:4f:ba:84:7a:6f:0f:c0:68:09:71:62:
8d:4e:61:05:34:3b:69:19:24:b2:49:d5:06:a9:02:
24:97:ce:84:7e:3f:40:b2:7f:19:3c:80:d5:6d:bd:
26:5c:19:60:37:b7:a0:d7:47:33:01:7f:1a:d3:ce:
0c:d7:29:19:54:db:44:b4:4a:8f:b2:bb:17:c0:da:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:88:C9:4A:46:E3:80:7A:50:51:ED:D7:6A:96:86:6E:BD:0B:39:8E
X509v3 Authority Key Identifier:
keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:39:13:5d:eb:b8:57:f7:f3:33:d0:0f:fc:d5:6d:f8:71:
57:ea:af:ff:8f:6f:ae:bc:0f:a7:b2:e5:09:70:99:11:2b:40:
9c:e8:a6:15:13:23:eb:f1:b3:34:20:97:5e:bc:dd:54:16:6b:
6c:ad:92:fe:41:fa:a0:3e:da:cd:6f:1a:20:f5:df:05:03:64:
16:6a:7a:f4:1f:a7:91:ff:86:60:f9:3a:3f:77:f6:c0:37:d5:
eb:58:d9:fa:1a:89:04:74:77:ef:6b:a6:26:cf:0f:37:21:e4:
c4:5f:38:f7:9d:b5:5e:48:05:cc:c7:1e:36:28:79:49:97:fd:
16:f5:b7:5d:12:92:51:21:00:8d:bb:ca:0b:e7:0d:36:c2:27:
50:38:e2:1e:64:57:70:ac:57:4a:e1:4d:a5:b4:5a:06:52:bb:
5f:a0:23:75:16:3c:99:55:08:ea:0f:76:bf:cb:c5:cb:02:2a:
15:79:ab:b0:58:c9:40:94:f3:85:85:aa:7d:25:b9:69:34:e4:
37:3b:8e:9f:5d:49:41:a1:73:57:89:e7:6f:54:6d:d5:93:27:
8a:44:95:bf:d4:7b:08:72:2d:65:cc:e9:fc:d7:ff:5f:7b:50:
3a:3a:9b:3b:37:0f:cb:71:50:09:0e:1d:ee:73:a2:56:02:6b:
3e:51:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:24:26 2026 by rpki-client