Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: Gel1BCJyFq/vlICHiNf7iuse5LvB0l+mYqLYUUActJA=
Subject key identifier: A3:DF:87:DD:D3:CF:80:46:78:CD:22:65:C6:81:F6:BE:DD:A3:1B:A9
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 01A1DFF16EFC06E7521CA1D0C0BD29885FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0E8C
Signing time: Sun 15 Nov 2026 16:01:43 +0000
Manifest this update: Sun 15 Nov 2026 16:01:43 +0000
Manifest next update: Mon 16 Nov 2026 16:01:43 +0000
Files and hashes: 1: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: hf/9ZPNK5Ge4+wBJx2+TEZ5Em6r3jakBD5uS6go/MrE=)
2: VjXNqFR-k-RE3bGhNFiBb6fGRIo.roa (hash: 3g7GHBy2J5M65ZKj6UpQWjQ6sqNGGq3QnOtwBXdJZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:6e:fc:06:e7:52:1c:a1:d0:c0:bd:29:88:5f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Nov 15 16:01:43 2026 GMT
Not After : Nov 16 16:01:43 2026 GMT
Subject: CN=a3df87ddd3cf804678cd2265c681f6bedda31ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:12:c2:1f:5e:16:3b:dd:97:53:7f:e1:f9:
d3:58:0d:a5:19:b3:87:2d:33:61:9b:98:b5:20:a2:
a6:7f:3c:d8:18:e8:62:48:e4:0b:21:f3:df:a4:28:
29:ce:e5:00:86:05:e1:22:99:fa:b0:2a:5b:4d:a6:
6d:84:2a:01:0c:d1:94:ed:f3:34:ea:e3:5d:16:af:
ed:16:0d:4d:28:26:74:ef:c5:a1:a5:ec:41:eb:c1:
6a:68:b3:ad:1e:2b:5f:bd:93:d7:39:06:e3:a6:b6:
75:31:38:66:fe:53:51:9b:10:37:3d:ad:a5:71:d4:
03:5e:33:f3:5e:69:26:b3:a8:2e:2a:ac:d8:30:88:
42:ce:74:8a:5e:0e:59:62:71:e9:c3:17:ee:33:2d:
de:11:64:2a:c1:3e:5f:a4:94:06:aa:e2:17:be:8b:
b2:aa:9f:0c:f0:0b:66:18:0e:c2:d3:7b:b2:10:dd:
1d:30:dc:cd:a3:e3:11:ad:1e:28:13:48:1a:1d:e5:
db:d5:d2:54:a7:6d:37:21:b9:b1:98:df:96:0e:6f:
20:bb:72:1f:2c:8a:c5:40:73:d2:b2:7d:3a:e0:34:
94:8e:99:6b:51:fe:0c:01:35:54:46:08:28:12:22:
ae:4f:ec:f5:00:a1:58:e9:30:fd:eb:13:ed:25:46:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:87:DD:D3:CF:80:46:78:CD:22:65:C6:81:F6:BE:DD:A3:1B:A9
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fe:c7:c1:af:ab:d7:1f:88:94:94:c3:e2:10:4c:5a:1e:99:
1e:ca:91:8c:2d:eb:ef:51:45:bd:cc:57:b4:c0:db:f3:8a:63:
c4:f1:59:06:43:fa:f2:ef:f9:cd:29:7d:c8:73:d1:76:73:58:
8c:a8:74:cb:53:85:40:58:f8:6b:b7:01:5e:3b:24:c6:8e:a3:
ed:00:e8:d8:d2:1e:9a:be:49:b2:82:ce:36:53:19:3b:cf:7e:
91:bf:c7:25:af:2a:43:d9:79:6b:fe:97:d2:80:3a:24:88:c9:
f0:33:71:de:6d:c9:e0:1e:f0:4b:b0:6d:33:d4:fd:44:f5:40:
77:6e:5d:c1:c4:7a:5d:ee:41:19:4b:a6:7e:90:a2:f5:c0:96:
5f:5d:3a:95:e7:1a:43:b1:81:75:61:ab:47:fb:c2:90:c1:92:
00:06:89:d5:0b:87:ce:54:e1:5b:26:94:19:cb:f7:d2:70:5b:
93:72:fd:03:c5:de:5f:65:aa:55:f8:44:5e:19:fc:4c:73:f1:
3e:5b:cb:17:f0:d0:90:f5:59:d6:be:20:f8:fa:fa:11:16:c2:
c7:cc:08:0f:ef:92:7c:90:51:b0:31:11:08:24:3d:cc:12:be:
54:f6:3e:fe:c2:d9:13:6d:00:9f:24:56:0c:f8:2e:5a:9d:4a:
2c:55:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:59 2026 by rpki-client