Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: LZxvXiexIqFbfS5XqT3bwExaGMFpSLpGbDqfiVag1jA=
Subject key identifier: 7E:82:2F:64:E4:4B:34:0A:6F:53:95:E0:9E:9B:28:FF:7F:6D:22:B4
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 01A1C39DF68A234D2F224272A7C1F6C2B573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 1AEB
Signing time: Tue 10 Nov 2026 04:01:11 +0000
Manifest this update: Tue 10 Nov 2026 04:01:11 +0000
Manifest next update: Wed 11 Nov 2026 04:01:11 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: nUwkTmYWJw6mTJi0SzhSrAOyt23MhataiaGR/A3UQj4=)
2: XXKVsIY0HbIJymCv56HgZpurwFA.roa (hash: Sk/E2nAzU4UxwMsd952VhcruaPuVHKtKy3ii+1Myr2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:9d:f6:8a:23:4d:2f:22:42:72:a7:c1:f6:c2:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Nov 10 04:01:11 2026 GMT
Not After : Nov 11 04:01:11 2026 GMT
Subject: CN=7e822f64e44b340a6f5395e09e9b28ff7f6d22b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:52:bb:d2:67:9b:81:64:58:31:20:d6:3f:
3a:c3:0e:b3:54:a0:7b:3c:8f:95:35:4e:a1:06:a0:
9b:2e:64:83:54:d3:4c:7e:0d:cd:4f:a5:a7:09:2f:
a7:65:c2:d3:04:f6:35:ff:c5:33:43:f9:04:5c:21:
53:be:75:ea:42:cc:00:fc:51:cd:7b:32:08:b6:73:
1d:71:93:b1:01:2c:0f:91:3c:85:24:6e:bf:da:8f:
d7:5d:1e:70:ce:58:cc:e6:84:a9:df:d3:70:20:24:
24:b3:19:fa:c6:04:12:aa:26:99:d3:73:10:8c:bf:
78:d4:4b:eb:1b:0d:0e:58:e4:a5:bd:78:67:10:f9:
1a:bf:57:f9:d7:e9:dc:10:b1:52:3a:d8:21:ba:8f:
2c:cb:c7:39:17:8b:fd:68:0a:bb:5f:94:24:db:55:
e6:d6:19:92:38:9b:4c:b7:ee:f6:96:f6:f8:81:47:
9c:0f:24:23:62:b6:69:64:32:2c:f5:d0:a8:8b:d2:
b1:aa:0a:05:e2:e1:44:d9:68:7e:98:a3:56:9c:68:
bf:56:80:41:7d:16:99:b4:79:d0:5c:27:1a:76:e2:
04:f5:ce:ed:73:ef:43:69:24:a8:ed:09:41:fc:2b:
a0:fb:53:66:06:9f:51:29:be:60:ee:90:6b:3f:49:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:82:2F:64:E4:4B:34:0A:6F:53:95:E0:9E:9B:28:FF:7F:6D:22:B4
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e2:34:42:2e:42:c3:74:d2:40:3d:49:b7:20:b2:75:e3:bc:
05:71:78:f0:1a:05:2a:9e:38:e2:b1:57:60:79:4a:aa:62:5c:
3e:4b:c9:e6:ad:a1:3e:fb:5f:e9:eb:0e:c4:9a:21:0b:25:2f:
c3:5c:fd:f0:fc:83:7e:0a:a2:ce:7b:d9:60:50:66:94:01:e9:
07:10:55:33:fa:e0:7c:c0:c5:0e:b1:2b:cc:ff:66:4d:75:4e:
db:6e:99:5d:77:01:98:ea:c3:1f:29:eb:d0:3c:8f:85:49:da:
c5:98:67:d9:20:b4:e2:4d:3a:b9:6c:bd:41:c9:a9:ae:1d:3c:
b1:c6:41:f6:67:36:cd:4d:82:5d:61:e9:19:94:6f:00:58:1e:
83:fd:46:f0:76:e8:4a:77:f6:0f:f5:8e:1d:94:26:60:8b:40:
cd:1e:68:7a:b3:08:f6:fc:93:59:8f:00:22:84:98:51:be:9d:
28:ef:e2:b2:91:6b:a1:7e:9f:2e:f3:5d:36:a9:c3:86:6f:1c:
47:3b:0f:c1:f4:27:5d:4f:a3:d3:28:fa:d2:d5:e2:e3:91:a4:
65:e7:0f:56:0f:b9:76:7f:9b:69:de:75:f6:80:0f:03:69:a0:
ad:1d:af:91:cd:4a:a0:bb:48:2f:88:f3:6e:a6:c2:fa:8b:84:
68:7b:f8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 13:27:47 2026 by rpki-client