Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: K/9ui4yxuyLQSp2qGtjLyd48z8OqVTZFC0pJ06KVEgc=
Subject key identifier: 92:82:3B:1E:DC:F6:83:44:90:B7:CB:77:15:46:61:52:CF:CA:4E:96
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 01A1BFF7A8E446AECB299977A69B6A90BFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 11:00:41 +0000
Manifest this update: Mon 09 Nov 2026 11:00:41 +0000
Manifest next update: Tue 10 Nov 2026 11:00:41 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: UtXAivNL8IGbnt+LYwm/tlYeEdCr7gyukLHPTWU8r0k=)
2: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (hash: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:f7:a8:e4:46:ae:cb:29:99:77:a6:9b:6a:90:bf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Nov 9 11:00:41 2026 GMT
Not After : Nov 10 11:00:41 2026 GMT
Subject: CN=92823b1edcf6834490b7cb7715466152cfca4e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:d8:59:78:9d:53:e5:04:46:0e:c3:67:7e:
72:5f:ad:c2:ff:14:62:d2:39:b2:cd:3e:c8:af:96:
0f:16:5d:fc:88:20:89:7a:37:12:90:bf:36:cb:32:
66:8c:94:5d:5d:a3:b5:80:16:8f:5a:1a:ae:ee:62:
f4:e1:92:bd:9b:cb:fb:2f:53:ed:25:4b:f4:06:fb:
f1:2e:59:7b:a5:8e:d5:be:b2:0b:61:1d:9b:94:76:
88:29:3b:72:8f:c4:5e:c2:c8:29:b3:a7:61:6a:37:
5e:9e:1a:ac:b2:d4:bf:e0:b3:99:34:54:f3:4a:fb:
6e:94:21:1f:d4:ee:2e:96:29:c4:13:0c:f4:ee:6a:
0b:d1:3a:57:5a:0b:13:53:22:4d:de:02:0a:c9:81:
64:0a:c3:75:af:b9:17:36:45:fe:0f:17:50:df:11:
cd:54:47:24:23:66:29:37:55:f2:a2:a4:e2:9e:6f:
13:f2:09:eb:06:01:c9:4f:27:3a:03:c6:4e:3b:1c:
c2:15:ce:23:0f:82:3c:80:9d:7d:21:c6:91:40:54:
04:9b:d9:37:ca:2b:e0:ee:8b:8f:9a:59:cd:e0:ad:
e5:8f:03:38:19:91:8d:73:83:87:24:93:61:64:c8:
bc:32:e9:74:5d:7e:f6:bd:7d:92:4a:65:ee:f9:7d:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:82:3B:1E:DC:F6:83:44:90:B7:CB:77:15:46:61:52:CF:CA:4E:96
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f1:49:24:c2:ae:92:17:dc:35:7b:75:a5:66:82:95:e1:f0:
30:ef:6b:f2:75:37:67:aa:a1:3f:f6:23:20:89:57:4a:b1:8e:
07:5d:27:33:75:3c:7a:e5:cf:c4:21:7e:d4:6f:b6:3f:f6:83:
12:38:c2:4a:a6:48:28:53:3d:45:18:7a:74:48:7b:b7:9b:42:
e9:40:01:08:c3:22:87:12:87:35:d9:34:32:53:f4:95:30:b4:
ca:0a:3c:58:df:3e:18:fc:9d:e7:88:11:3b:70:e2:38:2b:43:
6b:57:bb:53:1d:9e:48:b8:f5:9a:8f:9f:ee:fc:0d:40:ba:09:
4d:4c:7b:c8:69:06:92:74:0b:8a:2f:62:74:f4:df:d3:c0:92:
60:f0:b9:83:e6:69:76:4a:29:9f:a1:1e:9b:71:c0:b7:33:ad:
86:53:3e:96:4a:51:86:72:3e:f1:b2:1d:36:cb:c5:9d:95:df:
6e:59:7f:de:b4:28:0a:5c:c7:1e:71:86:c6:e0:a7:35:a3:63:
fa:40:dc:53:c5:e5:f8:ad:d6:e0:0a:be:79:db:8a:09:ea:c2:
b1:70:37:56:9d:18:a7:b8:f2:e9:d6:b4:b9:c6:30:60:3e:c3:
39:78:ae:50:56:75:c7:2c:48:a3:14:be:0f:df:b6:94:b1:aa:
66:09:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 20:13:47 2026 by rpki-client