Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: 3PaCXGNuDLsBT71JlkSBkdbyr7pceDFHMDGxv8xRppE=
Subject key identifier: 73:4A:9A:53:68:94:A8:B0:21:9C:68:F9:CC:D6:BC:FE:7E:54:99:E8
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 01A1DCEFFA8B49D797D2BFC63B3FBA326727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 11F0
Signing time: Sun 15 Nov 2026 02:01:17 +0000
Manifest this update: Sun 15 Nov 2026 02:01:17 +0000
Manifest next update: Mon 16 Nov 2026 02:01:17 +0000
Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: iPUvb5A1Irqoz/XbbCVWMLWKBFMaE+BeTDExtYwxHUI=)
2: foPJ5M9ZOVkGAWVnVqDC4Cs4-NU.roa (hash: 1DlyQW+RNTimUxXGNa+g3AQuv/uMpZoTB33IBxZu3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:fa:8b:49:d7:97:d2:bf:c6:3b:3f:ba:32:67:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Nov 15 02:01:17 2026 GMT
Not After : Nov 16 02:01:17 2026 GMT
Subject: CN=734a9a536894a8b0219c68f9ccd6bcfe7e5499e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:e3:39:bf:7b:e3:92:df:6f:c6:e8:51:67:
76:af:6e:cb:73:a4:8a:0f:ba:fa:ec:ed:d9:90:0b:
b0:d7:f8:4c:f3:50:78:f9:e8:55:79:11:a9:ec:77:
58:68:ae:c4:5e:3a:9c:3e:86:d9:c8:75:f7:e0:7b:
41:52:ff:dd:c6:0a:96:3a:62:41:e9:7b:3e:f3:b5:
bd:3c:f1:6c:61:25:67:24:15:b9:25:de:ba:9f:0e:
c2:3e:37:54:df:a0:fb:b1:b9:b5:05:a8:d9:a0:44:
e6:5b:89:91:0f:3e:e2:82:c3:eb:fb:91:3b:39:63:
34:21:2d:8e:28:63:ba:29:9c:77:ad:c1:8f:a9:1a:
d3:cc:6b:36:14:bd:fe:81:b5:62:23:ad:a0:2d:6a:
9d:db:51:5e:f9:1d:22:f4:24:cf:be:ae:4c:34:f8:
f0:d0:7c:5b:0e:06:89:f7:51:cb:7f:77:38:0c:c9:
02:3a:4c:7b:6f:c5:be:32:9c:77:02:f9:9d:b9:76:
45:2d:17:ea:4e:27:36:c7:1b:68:9e:72:d2:a3:ea:
20:28:e0:e6:3c:2b:69:1d:6c:c1:2c:c6:d0:22:d7:
8a:1d:e0:55:86:21:25:68:05:46:9e:6a:67:e2:06:
73:1c:f7:a5:d7:f5:5d:a8:64:93:40:a9:b8:5c:a1:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4A:9A:53:68:94:A8:B0:21:9C:68:F9:CC:D6:BC:FE:7E:54:99:E8
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d0:08:ad:f5:79:10:f6:c6:fb:bb:de:a7:70:3b:27:4d:fb:
bd:6e:00:d9:c6:76:6d:e1:7e:51:3e:31:2f:44:48:30:93:28:
73:2b:9d:78:a5:b0:cf:38:45:90:02:ce:cd:a0:fe:c5:2b:3e:
8f:c4:db:45:d1:33:73:88:60:1a:6f:ee:3a:2b:52:e8:36:35:
3b:76:5b:26:19:7d:b0:dc:72:3a:97:db:4f:53:bf:2b:7b:f4:
ef:ee:55:2b:39:7e:22:9b:12:fd:19:81:ed:84:fa:13:ea:82:
2f:f0:d8:06:ae:12:a4:f1:ff:54:b8:f3:59:4f:7e:ae:89:12:
17:b6:d7:d2:54:c0:fa:59:33:1d:72:b7:f3:23:7b:2f:d4:7b:
79:95:7d:02:a4:23:cf:ec:3f:b4:ee:c4:3b:9d:c8:59:91:cd:
a8:ae:6a:15:76:fc:8d:a1:f3:06:1d:55:d3:ff:18:ef:32:da:
34:d3:6a:55:39:65:20:18:91:83:71:ef:5f:05:19:40:d5:12:
21:eb:c0:f6:f6:a4:8f:93:21:e3:e1:12:10:a6:9c:3a:80:b1:
ef:18:ee:d3:37:c6:dc:cc:20:15:04:87:97:ab:dd:d3:42:c3:
c3:95:7e:e4:ea:20:37:2c:42:6a:9c:c1:0a:07:15:fa:1a:0b:
9a:38:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:56:21 2026 by rpki-client