Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: XxXZ8981zCF2udsST0PmdojzSZH23kdXAKDt/I6lXQ4=
Subject key identifier: 85:72:EF:49:F1:06:92:9C:18:39:ED:00:84:50:0F:DD:8C:E3:0C:49
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 01A1DDCBB6A6F98A68D329439145E2B4F517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 1389
Signing time: Sun 15 Nov 2026 06:01:17 +0000
Manifest this update: Sun 15 Nov 2026 06:01:17 +0000
Manifest next update: Mon 16 Nov 2026 06:01:17 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: yQuzGrGY8pDCs/tNfJnIelDnjaugjlcF44kq/fWHn9E=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:b6:a6:f9:8a:68:d3:29:43:91:45:e2:b4:f5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Nov 15 06:01:17 2026 GMT
Not After : Nov 16 06:01:17 2026 GMT
Subject: CN=8572ef49f106929c1839ed0084500fdd8ce30c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:e1:8d:35:de:03:2f:f6:5f:b8:16:0c:eb:
c8:6f:19:4d:16:32:7c:f9:e6:16:6f:b7:fa:f1:cf:
25:aa:6f:57:52:93:18:06:f5:44:9d:5e:68:20:e9:
a7:3a:3d:0d:69:38:bd:b0:7f:ee:b4:42:93:c6:3f:
0b:50:19:56:eb:ca:0d:15:dd:d7:ea:81:7f:22:bd:
05:fc:11:94:81:94:2a:16:16:0a:76:0c:cf:62:bd:
7b:15:5b:63:54:51:ff:ed:30:3b:63:de:a9:ca:f7:
3f:0b:ea:d4:0d:82:bf:04:aa:b4:35:0d:2c:4d:9f:
a3:ba:89:56:05:46:1e:24:0e:db:a5:24:e5:da:15:
47:5e:32:10:2c:45:90:7e:2e:f8:00:c9:e2:3e:bd:
79:31:20:06:a6:e9:dc:e0:c5:9f:09:3e:30:65:b4:
99:01:77:97:bc:a6:ec:9c:84:45:c7:85:e0:65:5c:
91:e6:3d:02:2c:00:d8:26:d8:a4:69:58:85:55:b8:
af:95:1d:9c:f4:79:d2:04:8d:e9:6e:74:23:0d:a4:
e0:84:46:fd:f0:6d:d6:9f:7d:68:01:4a:c2:26:1c:
e1:79:3e:73:cf:09:b4:91:94:64:6d:da:df:1e:d8:
2e:ad:1e:b7:f7:ce:b2:70:00:e0:53:8f:77:fc:13:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:EF:49:F1:06:92:9C:18:39:ED:00:84:50:0F:DD:8C:E3:0C:49
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c3:55:b5:f5:41:aa:be:2b:80:34:7e:e1:ff:73:ba:aa:99:
db:0a:40:18:d2:96:ca:f0:c9:28:11:79:56:d6:5c:98:a0:75:
2e:1e:70:7e:28:7e:ac:b0:ff:bc:bf:68:26:bd:ef:13:ab:d0:
de:96:ff:45:c6:fa:72:c7:04:a3:4d:3f:91:2f:94:ca:fa:c1:
6d:95:50:7b:8d:90:2e:35:55:fd:46:79:ab:d3:4c:b3:93:be:
d6:45:c6:0e:3e:5c:94:c2:02:41:66:48:b0:a2:7d:0c:e3:34:
ff:38:b4:ca:5c:62:b6:92:94:ed:7f:3f:c8:55:40:bc:d4:26:
99:33:8b:a5:e6:a1:cb:38:c3:c6:84:b8:07:3a:85:0e:a1:f2:
89:ba:4c:da:f5:3d:f1:8f:89:cb:9b:7f:46:dc:17:64:8f:c4:
25:89:b2:e5:16:90:83:68:70:80:fd:1d:ac:d9:b2:0e:c4:0a:
63:f1:79:23:f1:d6:c9:72:33:65:40:8a:89:7b:e1:9e:3b:a0:
de:a0:08:bc:91:f9:71:cf:5c:de:be:60:06:d1:f6:8c:b3:da:
25:e8:dd:0e:1f:c6:30:2b:09:17:90:b4:cf:8d:9d:e4:f0:29:
11:3d:b8:f4:e0:28:10:39:1b:43:c3:9d:47:01:35:17:1a:b0:
3c:33:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:16:14 2026 by rpki-client