Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: rkK8zz/BMLbAQrSGqcpuT/MkY72/UysYkfPBoC4mLFU=
Subject key identifier: C8:7A:E6:61:DE:6A:0B:AB:4C:B8:6C:AD:91:89:DC:29:12:13:8C:95
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 01A1DEDE010F59CC2A1F0DEB9CBFB4462643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 1AE7
Signing time: Sun 15 Nov 2026 11:00:53 +0000
Manifest this update: Sun 15 Nov 2026 11:00:53 +0000
Manifest next update: Mon 16 Nov 2026 11:00:53 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: ShGQHN8ToUsX3+dBGKAJ7ZFbMoGDJaB9NN0hCAeswBc=)
2: NaRt1HVL2Kx-sncfnj_qlUg6AzA.roa (hash: eMNf8UixOg4CJ2lG1Z2ydmE1AwqLlbPFY92TlJawe5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:01:0f:59:cc:2a:1f:0d:eb:9c:bf:b4:46:26:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Nov 15 11:00:53 2026 GMT
Not After : Nov 16 11:00:53 2026 GMT
Subject: CN=c87ae661de6a0bab4cb86cad9189dc2912138c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:f1:45:aa:40:8c:97:a0:3c:2d:89:bd:5b:
71:9d:70:fb:48:76:b6:17:f4:82:29:91:46:7b:e6:
e8:d7:09:0d:6a:f1:8d:d7:cc:fc:a1:3b:ae:42:b6:
15:10:c3:3f:80:05:d2:77:6c:bc:c3:d8:80:b7:8c:
b5:50:43:f0:1b:97:9c:77:39:de:70:3f:7e:72:e0:
7f:7f:38:14:59:b6:53:84:ad:13:f8:b9:4a:3f:fc:
01:de:10:59:b7:02:1a:06:76:3b:c9:30:84:3e:41:
38:85:01:58:29:a8:63:15:e1:08:03:32:66:d9:86:
17:bb:9b:ed:10:c2:ab:00:02:e3:ac:23:de:a3:55:
27:e4:87:92:85:a3:9e:94:53:cd:3c:0f:aa:e9:fe:
fb:34:b3:80:2f:91:29:34:91:e5:ba:0e:98:08:75:
67:eb:4e:37:f8:0b:22:d4:d4:2c:58:f9:8c:3d:42:
1e:e0:a4:ce:6b:fe:3e:cc:57:e8:82:56:b2:2d:c7:
49:99:b2:d2:9b:7f:da:0a:cd:68:79:4b:f4:13:25:
9d:0b:c1:0d:b8:ed:cd:3c:55:92:65:d7:9d:9c:3d:
57:6d:46:ee:f7:e2:a4:2d:5e:83:9d:03:1e:5a:f7:
df:72:e6:7e:6f:a3:5b:11:af:2e:7a:49:ac:38:bd:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:E6:61:DE:6A:0B:AB:4C:B8:6C:AD:91:89:DC:29:12:13:8C:95
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:87:32:bc:71:f0:1a:24:68:74:d4:99:99:bb:94:45:a1:ff:
84:6b:d8:b6:f7:3a:0f:f3:64:12:09:c4:26:18:cb:6c:7e:47:
a7:ce:25:89:3e:66:4c:46:50:77:42:e2:c7:b5:1f:bb:54:fd:
7b:42:7b:4c:0b:ed:2b:9a:6d:51:b9:50:ce:15:d6:95:47:da:
13:5e:05:f7:0a:35:65:50:a6:b1:89:48:e8:12:82:15:af:f7:
87:40:bd:83:9b:02:e9:6c:1e:80:e7:19:81:59:16:2c:f2:bc:
06:d1:b3:8b:ba:ab:9b:00:17:3f:77:4a:02:3d:bc:d2:68:21:
99:34:b2:e1:be:73:08:38:c6:00:1e:3c:32:9d:c9:81:6c:ae:
79:87:25:74:65:87:9f:16:89:56:ab:3d:c9:44:b1:63:9a:7c:
ce:13:50:4c:fe:59:99:ea:28:68:f2:ae:63:68:9f:01:1f:94:
73:21:c4:3a:d1:38:60:5e:94:49:43:e8:30:10:aa:07:05:6b:
74:34:fa:2b:80:87:a5:2a:31:4f:01:aa:b5:e9:90:aa:29:61:
a9:75:e7:b8:6d:52:b5:9a:c9:f3:3f:e2:3a:ab:05:c9:79:d6:
6a:29:30:4e:0e:99:1d:19:e7:c2:b5:32:81:ce:78:25:75:5a:
58:23:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:31:49 2026 by rpki-client