Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier: 0wiD+1vP8kK9s/M1fb6b6ydiGEFuDhhr+wQx6oC9o0c=
Subject key identifier: 0F:3F:13:E7:57:B8:70:17:D0:87:CD:B2:A6:3E:E5:67:60:90:30:31
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial: 01A1C47956A2DC27179EE9551252F2500C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number: 14AA
Signing time: Tue 10 Nov 2026 08:00:48 +0000
Manifest this update: Tue 10 Nov 2026 08:00:48 +0000
Manifest next update: Wed 11 Nov 2026 08:00:48 +0000
Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: U13JQTe7a+cxSOPYD+9X1jownygTJ3fuzaHeo7nhZ2s=)
2: yXhNyXRSfQjfxmo-xnpGQqFi810.roa (hash: SLF2lVj7vn7i6fplRiTtNXFnugUCA5oqM+ECg7CqrFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:79:56:a2:dc:27:17:9e:e9:55:12:52:f2:50:0c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Validity
Not Before: Nov 10 08:00:48 2026 GMT
Not After : Nov 11 08:00:48 2026 GMT
Subject: CN=0f3f13e757b87017d087cdb2a63ee56760903031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:99:d7:32:76:08:fb:e2:ab:c5:3e:fc:5d:
e7:2a:d4:f8:70:bf:15:4e:5a:fc:e8:3d:4d:86:c7:
2d:08:ce:9b:b3:13:d4:10:46:3a:5d:6c:d6:cf:f5:
0b:93:9b:80:6e:e4:21:c3:db:53:da:36:17:04:cf:
da:6a:a8:db:a9:4d:b8:46:41:c9:c8:15:48:8a:2e:
ab:a2:7a:52:38:ae:c2:2e:d2:3f:da:03:81:18:54:
6c:0c:d6:d3:42:8b:64:73:bb:f3:9a:2d:ac:1b:dd:
b6:b3:a2:ff:70:cc:82:5e:17:02:2a:59:92:6f:92:
bf:7b:d7:e4:1a:88:0f:86:52:4b:3d:ce:2d:92:6d:
c3:49:7d:39:94:7d:6a:22:70:85:f0:eb:60:4e:ab:
29:db:2b:10:8d:3e:34:a6:70:29:61:0f:53:2b:c0:
34:51:38:9c:96:06:14:d4:45:e0:1c:ad:4a:c2:dc:
64:9b:ec:69:cf:a4:fb:15:fe:10:47:c0:b4:c2:fc:
c9:ef:58:7f:a6:bc:77:e1:8d:60:d7:5f:5d:49:12:
83:c7:77:7b:ac:82:07:5b:84:67:8a:ab:14:cb:6d:
5e:3f:fb:5c:62:b4:d2:ac:2f:f5:2d:e5:4b:1c:b3:
4c:46:21:a9:db:15:54:3e:ee:41:b1:99:60:0e:ef:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3F:13:E7:57:B8:70:17:D0:87:CD:B2:A6:3E:E5:67:60:90:30:31
X509v3 Authority Key Identifier:
keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:67:35:23:56:fb:9b:16:43:0d:b6:85:dd:0f:37:6f:87:
6d:f7:36:f5:1e:eb:6a:a6:6d:56:5a:ab:4f:0c:a9:60:8c:fe:
59:85:77:38:5d:c1:f5:6f:90:e3:47:21:3f:81:3f:7f:9a:ef:
3d:a0:a5:e4:42:31:97:3f:5e:69:ec:a3:f6:0a:ff:5e:10:e1:
a5:47:96:51:47:ff:75:47:64:31:f8:af:29:9a:62:7f:ca:3b:
2f:39:b3:ab:27:d2:0d:c8:ad:05:c7:4c:23:11:1d:6b:5f:3f:
bd:1a:b0:79:f0:bb:b7:15:3e:00:63:62:29:16:2a:77:79:65:
cc:be:80:ee:e9:13:17:fa:4b:bd:ba:f5:ca:e2:7b:0e:d5:a5:
a5:47:61:42:5f:61:2e:db:fd:a7:23:d9:7d:a2:81:ff:fd:d8:
94:8c:98:b4:5b:e6:8d:83:74:9b:4b:5b:e7:be:08:be:be:5c:
39:20:4a:2c:c0:67:13:e4:0d:f0:bf:e8:92:45:3a:a5:fd:ff:
c0:d4:13:eb:16:75:cf:2e:d5:4b:36:c6:5d:22:67:6c:7f:2d:
34:05:f4:2d:71:78:8d:91:55:5d:bc:81:29:44:a3:a4:5e:a1:
5d:85:16:d3:4f:d4:c1:d2:74:de:fd:fa:a8:55:e0:7f:c4:61:
5b:05:96:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:38:27 2026 by rpki-client