Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier: lL2qXfHguPO6p5yrguoij0yXlf1K9d/4IeLKDkOhynQ=
Subject key identifier: 5C:52:F5:53:9A:E5:B1:50:80:CB:E5:90:E9:35:A2:D8:0B:EC:83:9A
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 01A1DEA732FDC9A9B3DFA7231D35868FE4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number: 10C4
Signing time: Sun 15 Nov 2026 10:01:01 +0000
Manifest this update: Sun 15 Nov 2026 10:01:01 +0000
Manifest next update: Mon 16 Nov 2026 10:01:01 +0000
Files and hashes: 1: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: rH9+bDsZg+NlRx1fbR0dDQd2lEqujRr2j4gfhNxRr9A=)
2: V520rJqjBQNaG4fyPK4nwNHO6No.roa (hash: BQhLgWTrqlA5BOZHn9fbUTXWBsPmEQUK0Ry+/ekhmxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:32:fd:c9:a9:b3:df:a7:23:1d:35:86:8f:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Nov 15 10:01:01 2026 GMT
Not After : Nov 16 10:01:01 2026 GMT
Subject: CN=5c52f5539ae5b15080cbe590e935a2d80bec839a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:7c:18:3f:2d:09:55:e8:15:40:41:23:0d:
4a:52:e0:17:11:ee:bf:59:be:f1:8a:50:ff:60:a7:
68:de:d0:1b:6f:95:5f:ee:90:11:c2:61:e6:ff:08:
6b:97:49:1f:a9:6b:01:cd:05:83:a1:f5:e0:6d:5a:
36:7c:b6:bb:17:a7:36:81:60:dd:5a:74:b7:3d:00:
15:c1:0b:6f:34:75:2d:ce:f2:ee:03:77:93:b8:a0:
24:1c:b5:0f:7a:b3:9f:7a:5f:9c:c4:df:08:b7:35:
9b:b3:c9:a5:d4:a1:74:0d:6e:a5:01:bc:5e:e0:d6:
78:74:12:e3:6d:d2:fc:4a:e7:1a:b2:4b:6b:67:5d:
f1:f4:2f:dd:a7:8c:fc:fe:4a:08:68:be:6c:c6:42:
53:a9:93:f9:53:37:de:5a:d8:7a:e6:29:2f:94:61:
13:b1:c0:1f:5e:cc:54:46:fb:6b:99:5f:27:bd:4d:
5a:ec:84:55:80:b8:32:5a:dc:c4:66:17:34:58:54:
31:34:ba:6d:b1:7e:c0:69:9f:aa:06:78:1d:40:de:
39:3d:b7:f2:ec:bd:d9:fa:9b:9a:d3:7a:e3:76:ce:
ac:96:1d:67:58:b1:c8:74:fe:a1:3c:67:29:77:dd:
b2:ce:df:fd:20:a1:3e:11:2c:73:02:4b:4b:57:94:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:F5:53:9A:E5:B1:50:80:CB:E5:90:E9:35:A2:D8:0B:EC:83:9A
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e9:9b:5b:8d:6c:5a:c5:e3:5a:88:98:53:51:79:7d:e4:ca:
30:f2:06:b4:fb:32:1a:cd:4d:07:51:54:84:b3:43:12:72:51:
7a:e1:12:a2:c1:6d:dd:e5:e3:08:d0:fc:94:03:61:e7:54:ab:
fa:04:99:ae:cd:51:03:2e:52:e9:52:d2:a2:b7:10:2f:13:7b:
93:8f:8c:4c:f3:96:86:73:bf:9c:33:ec:79:6f:d6:f3:46:51:
18:11:aa:08:0f:77:fa:fe:cb:79:07:ad:44:20:81:95:91:1a:
ea:8d:0a:74:bb:33:37:32:e7:3e:32:3b:8f:15:2d:36:88:17:
47:d2:68:6a:b9:32:50:b5:51:a9:f2:fd:12:94:4f:c8:70:7a:
93:5e:51:76:c5:5f:c0:48:da:d5:84:f5:c9:b6:53:ca:c7:a4:
27:67:0f:eb:8e:94:29:f8:95:88:5e:6b:d5:69:1b:ac:2d:95:
67:f0:52:b7:27:7a:29:7a:bf:0e:07:2d:c1:d9:a0:ca:e7:bb:
6f:aa:1f:33:bb:41:11:5f:ca:47:5e:49:d9:c5:68:94:5d:cb:
b6:95:e7:92:bd:2d:58:55:c6:50:86:e6:69:35:4b:0c:44:1a:
05:57:97:02:58:86:1a:0f:ae:fd:16:33:c2:2f:ea:5a:26:1c:
f0:85:ac:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:22:17 2026 by rpki-client