Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: wMMWG5o0ZH+Q7AHBjUcsw6qhiKaOzd3+YfExbvJxKm0=
Subject key identifier: 09:51:60:1E:43:54:05:5C:5B:73:F8:A8:32:0F:37:F0:A3:55:90:5C
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 01A1C366FC428D4AA81928C2EAE24B949FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1AEC
Signing time: Tue 10 Nov 2026 03:01:08 +0000
Manifest this update: Tue 10 Nov 2026 03:01:08 +0000
Manifest next update: Wed 11 Nov 2026 03:01:08 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: KUHFIpFa0KNmirQ7HWyaJ5fDyoLNwW/1xgnKg0/+NLk=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:66:fc:42:8d:4a:a8:19:28:c2:ea:e2:4b:94:9f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Nov 10 03:01:08 2026 GMT
Not After : Nov 11 03:01:08 2026 GMT
Subject: CN=0951601e4354055c5b73f8a8320f37f0a355905c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:0d:59:a4:23:e1:59:1e:bd:50:34:04:9e:
df:a7:21:81:90:32:40:d7:d6:0c:74:7e:e0:08:84:
c7:4e:03:41:48:a4:f7:d9:3e:c7:9b:e4:1d:15:3e:
f3:54:8e:ce:b7:be:e0:39:36:d9:d3:22:bf:ab:11:
7b:c1:b8:05:90:90:77:44:66:f9:ef:ef:e5:be:0a:
44:19:5c:e3:0f:d8:f5:e1:ef:dd:2f:bd:bd:3a:a8:
de:4a:c9:ab:bc:7c:4e:bb:af:1c:13:35:8d:4e:0d:
09:4c:8c:f8:d6:db:93:b6:f2:59:6c:a9:8a:74:4f:
6c:57:6d:0b:31:94:ec:1a:e4:09:1f:a9:ec:da:7f:
45:47:c2:09:39:f8:60:d9:8e:7b:28:7a:bc:fa:b4:
cf:7c:0f:05:dd:79:83:82:b2:7a:39:fe:a6:18:93:
45:18:96:56:f8:38:52:13:e2:2a:dd:30:d0:25:23:
d2:78:42:68:c7:75:1d:84:de:48:d5:46:42:23:5b:
db:65:2f:43:3e:1e:d8:9b:ed:af:7d:48:fd:9d:a1:
0b:35:e4:32:5e:1a:e8:3c:d6:93:4d:fd:7d:e9:5c:
98:c0:2d:06:c2:56:80:12:17:59:f9:4d:de:e6:4b:
6e:ee:5b:6d:d7:c4:c1:aa:c5:81:89:65:b0:3a:b7:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:51:60:1E:43:54:05:5C:5B:73:F8:A8:32:0F:37:F0:A3:55:90:5C
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:8b:bc:4a:2f:5c:ce:a8:49:0c:99:8e:e8:b2:bc:9b:96:
87:97:b2:7b:a3:2b:29:cc:57:d9:8d:ed:68:b7:bf:81:6a:83:
5c:9c:79:6f:57:8c:9c:b4:a8:22:61:84:0e:92:e2:b2:54:b9:
65:3b:9b:03:ed:da:5c:58:9c:0c:2a:c7:7b:2b:76:d4:1a:45:
c2:30:3f:54:83:40:59:4e:ba:71:59:b6:50:8a:79:71:a8:dd:
f2:86:8e:24:a4:43:67:52:90:14:a9:80:0c:2d:0d:95:97:dd:
81:d2:89:16:72:01:f9:11:ef:e9:48:d6:9d:d6:a3:29:7c:80:
6e:41:d6:6e:d6:a3:5e:84:a8:47:1b:89:fc:71:7b:5c:a2:bc:
97:6f:f7:1f:c2:ba:1e:1a:2f:eb:ea:aa:0b:50:f5:d6:7d:10:
3e:95:82:88:95:f4:96:cc:60:12:67:79:af:b3:e8:29:1f:ca:
cc:20:d3:18:88:32:1b:86:b8:ff:ec:e4:69:cc:e5:92:87:33:
94:16:f1:1e:45:56:78:79:6e:35:68:e0:e7:a1:29:a2:d0:b7:
60:64:d1:e2:b7:da:a4:98:83:e2:be:5c:73:17:58:d6:0d:55:
ab:40:aa:80:78:86:e5:19:f5:6a:d4:1f:59:d2:86:d4:1d:05:
29:27:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:39:21 2026 by rpki-client