
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: 6DqKfk1TyP1Lp8bVVoRGq51yyI54ZpsFs51kjpzQgec=
Subject key identifier: 47:36:4F:30:F9:6B:71:9E:39:FD:F6:37:F2:18:2E:A2:74:AC:09:81
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 01A1C2F8C9E9240B04779B5D5266FB44C47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 1823
Signing time: Tue 10 Nov 2026 01:00:46 +0000
Manifest this update: Tue 10 Nov 2026 01:00:46 +0000
Manifest next update: Wed 11 Nov 2026 01:00:46 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: NIrtogiadwwlOPkoW42c3d0AfqK1pIYl8EpzQsQr1dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:f8:c9:e9:24:0b:04:77:9b:5d:52:66:fb:44:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Nov 10 01:00:46 2026 GMT
Not After : Nov 11 01:00:46 2026 GMT
Subject: CN=47364f30f96b719e39fdf637f2182ea274ac0981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:2c:82:34:f7:f1:4c:b3:b1:b3:1a:57:c1:
25:53:f5:89:b0:13:a5:97:70:d3:e1:f7:9c:69:37:
d4:3b:13:18:e4:c3:a8:15:81:35:96:96:37:96:eb:
1f:23:33:86:91:5a:d5:78:1f:fd:bd:28:18:4d:ae:
4a:12:83:a5:4a:f0:8e:f1:16:c3:b3:d7:83:e0:55:
25:45:79:15:4b:fe:ce:75:ca:46:f4:11:34:5b:4c:
a6:ab:8d:d9:85:9a:5d:4a:50:f8:c4:07:6f:44:03:
05:7b:df:bf:9c:9b:11:da:b7:51:ae:d1:a0:c3:a4:
d5:42:6b:09:f9:87:3e:d9:9b:d0:1d:d1:a6:8a:2a:
96:f6:42:b4:39:56:dc:65:7f:65:a8:53:b5:9e:0d:
08:ca:65:2a:a9:a8:fb:6f:fc:7f:6a:f8:34:61:fa:
ab:6e:4c:82:f1:f3:3b:66:6a:9e:3f:04:97:36:60:
8a:af:cf:ff:55:a4:25:78:b7:c3:5b:51:28:47:6f:
b0:94:07:46:cd:68:8e:18:24:95:80:6e:9d:c4:5c:
95:71:02:c3:73:6a:94:aa:0a:f3:8b:ba:6c:40:4b:
86:92:4b:0e:6d:65:33:1d:10:0d:e5:f9:a8:2f:24:
2a:19:d4:e9:be:d7:e1:54:46:80:53:c8:82:1d:79:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:36:4F:30:F9:6B:71:9E:39:FD:F6:37:F2:18:2E:A2:74:AC:09:81
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0b:a6:40:e8:6c:ec:98:58:7b:16:cc:db:e2:63:00:16:ed:
ea:37:93:33:d5:d2:9f:0a:16:21:b1:61:4d:c8:19:2b:a5:11:
e4:21:13:9f:ae:80:be:c3:57:83:c2:df:3f:e1:1b:dd:9c:aa:
18:64:ee:b3:e2:32:d1:10:68:70:8c:36:6b:3d:82:3e:64:a8:
de:b6:7c:7b:50:0e:42:7f:76:a1:d7:a7:b3:ac:3e:22:92:27:
34:32:44:a3:2f:3f:76:1f:4a:34:fd:47:a4:6d:4f:67:66:66:
c8:38:65:0a:28:b0:ce:f2:00:92:c9:77:4a:73:41:3f:1b:29:
5d:52:c5:d4:af:a6:cf:b2:48:b8:fa:f9:e5:e7:90:91:c9:35:
2e:6f:41:7a:dc:a8:ad:c8:de:bd:d1:d7:a1:95:71:b9:8f:36:
c7:34:b3:bd:49:6e:93:01:9d:87:a7:ce:a6:ad:13:93:69:3e:
16:e1:6a:94:43:15:4f:09:09:dd:1e:2e:14:5c:61:e8:c8:23:
cd:29:b8:4f:83:f1:d6:0e:ac:bb:3f:d9:fe:87:19:64:24:83:
aa:00:e3:9c:38:77:4a:a0:a7:e3:b8:c9:88:49:b2:8a:64:fd:
6a:d9:24:4b:7c:7e:77:fb:6a:6e:86:f8:58:ae:5a:37:69:8b:
41:98:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:02:43 2026 by rpki-client