
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File: 8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier: zhO5n3jk4RtiKs+RGzhRGugUliLzmZaDGHjoR+Cow3k=
Subject key identifier: CB:18:3F:52:22:D5:30:77:9B:62:33:AE:60:44:5E:3E:BB:97:F3:C9
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer: /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial: 01A1DEDE0422931E20BE4FA0955D7647C8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 11:00:54 +0000
Manifest this update: Sun 15 Nov 2026 11:00:54 +0000
Manifest next update: Mon 16 Nov 2026 11:00:54 +0000
Files and hashes: 1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: q8NeEcd74HWT2zUzwC+vR+AS8kBNmlUmQC22xCtf2Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:04:22:93:1e:20:be:4f:a0:95:5d:76:47:c8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
Validity
Not Before: Nov 15 11:00:54 2026 GMT
Not After : Nov 16 11:00:54 2026 GMT
Subject: CN=cb183f5222d530779b6233ae60445e3ebb97f3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:ce:a7:11:f0:3f:db:03:fc:9a:80:36:73:
d4:7f:aa:ae:8e:47:1a:f5:1d:89:e4:4a:a0:d6:79:
fa:99:db:98:11:dc:5c:df:04:bc:8d:97:db:fa:6f:
fd:7b:2a:2d:29:b9:4e:98:1a:6b:57:83:a9:41:e5:
03:12:c0:82:c3:2e:d7:af:04:a9:6a:a3:c2:33:82:
b5:24:84:39:1c:9c:c2:a6:95:e5:50:fb:88:b4:d4:
63:16:11:f2:c1:4f:78:4a:a4:ec:47:2d:92:2d:38:
5b:1d:95:22:d1:86:56:e4:d7:70:e3:40:07:6e:93:
b9:ab:51:b1:cc:84:10:b6:a0:47:c9:82:49:89:6f:
71:9b:5d:2f:de:dc:f8:79:05:b0:b7:dd:83:0d:f0:
d0:29:9f:ec:84:0d:6f:c5:70:6d:4a:70:35:67:22:
69:8c:4a:be:74:c9:b7:35:a9:60:6a:32:35:1b:b3:
6a:cb:9b:39:08:90:b7:ea:80:4c:77:2e:88:34:a4:
59:b5:db:cb:e1:f1:e4:58:fc:96:01:8b:f3:11:ed:
cb:65:99:47:e1:b0:2c:70:89:3a:ac:39:28:6a:a8:
09:3a:58:5a:b4:fd:ed:6b:22:d7:cb:3a:35:d8:3b:
43:9e:7f:9a:13:00:a2:3e:6c:b6:91:28:ae:a5:bf:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:18:3F:52:22:D5:30:77:9B:62:33:AE:60:44:5E:3E:BB:97:F3:C9
X509v3 Authority Key Identifier:
keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:00:33:4a:18:fc:14:87:8f:5a:f3:9e:6f:5d:12:4c:1f:76:
84:fc:6c:a8:aa:3a:c2:f9:5f:1d:1c:e0:29:45:63:7f:bf:c4:
ca:6f:a3:86:55:57:69:bf:4d:e6:b5:24:23:60:ca:32:70:15:
99:db:e1:9e:b9:38:12:7f:0d:f9:59:fd:25:89:4b:d0:1e:6f:
fe:c7:c4:e8:99:5e:2d:a7:57:56:17:93:6c:3a:af:d2:2a:f9:
09:ec:ba:7c:4f:3c:dc:6c:e6:cb:0c:60:88:33:48:25:4c:37:
8a:29:4d:b6:7c:0d:1d:65:33:ee:a7:ea:31:45:8a:f0:58:c9:
9a:5c:c0:0c:41:ed:b9:31:3c:38:fa:87:00:32:76:b1:95:f9:
61:e4:2f:e5:bd:8e:49:f5:af:8c:9c:af:1d:38:71:d7:54:9b:
b1:26:2b:25:bb:03:98:7c:15:ae:a5:9e:28:1e:2e:e6:70:23:
fd:70:8e:9c:c9:f0:b0:89:21:7e:13:fd:80:04:db:31:4b:db:
cf:07:54:0f:2a:43:9e:df:42:ca:1d:73:5f:f0:4e:9e:41:8a:
09:0b:62:ad:ab:dc:26:53:00:90:9d:03:22:a8:cd:f0:92:08:
83:0c:2c:0e:7a:59:5d:a3:87:98:9c:e6:73:91:6d:d5:1e:4b:
22:71:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:46:09 2026 by rpki-client