Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: pjuwYErnBR3d4jPPdBSSU4XY/uAhDqdYhDA91V37guo=
Subject key identifier: 8E:1B:95:FB:E6:AC:46:AF:09:1F:0A:11:C1:10:B1:DC:0B:BB:BA:40
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 01A1C066363546A1388D922EE88A8A7E316B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 0951
Signing time: Mon 09 Nov 2026 13:01:26 +0000
Manifest this update: Mon 09 Nov 2026 13:01:26 +0000
Manifest next update: Tue 10 Nov 2026 13:01:26 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: YgO3l6rXPFJMdu6UnMRDfZogr8fOf9VJaiGqdUzSev8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:66:36:35:46:a1:38:8d:92:2e:e8:8a:8a:7e:31:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Nov 9 13:01:26 2026 GMT
Not After : Nov 10 13:01:26 2026 GMT
Subject: CN=8e1b95fbe6ac46af091f0a11c110b1dc0bbbba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:af:dc:2d:88:59:25:81:10:f6:b1:ab:09:
fd:5f:92:1e:52:2f:af:6a:6e:0c:e6:60:6f:55:0e:
d7:0d:eb:2c:92:78:e3:87:8f:a1:1a:c6:c1:1f:18:
8e:86:9a:73:0d:f9:38:a2:ba:a0:2c:5e:40:2d:24:
fb:ac:b2:85:40:46:00:34:85:b9:5f:bc:b0:69:ba:
f5:44:7c:18:b3:0f:e1:53:39:c2:c3:6e:45:30:53:
27:5e:0a:46:e5:56:14:4f:ea:87:07:f7:a7:45:7f:
d5:2a:15:43:a4:56:3f:c8:eb:28:7e:cf:36:02:a9:
9d:90:05:23:fc:4e:7a:2e:88:ec:ee:ed:97:58:e3:
db:df:38:76:00:8f:5a:15:eb:54:01:c4:bf:2f:9e:
a1:af:b1:57:33:f7:8c:21:a1:0b:04:1a:14:69:22:
c5:df:0b:d3:e4:21:6f:b2:49:d7:68:5d:aa:fd:f8:
f3:4a:04:66:f3:9e:16:42:26:36:ee:e8:c5:66:d9:
ca:4b:37:aa:1f:fe:54:38:c7:ea:16:d9:53:cc:2e:
b8:04:a4:1d:bf:85:ce:97:05:b4:a0:6d:e3:e5:1c:
e8:71:65:6e:4f:9b:07:b6:fd:2f:a6:8e:2d:2a:3f:
53:56:b6:19:64:4a:6d:64:72:2d:ef:85:4a:ec:c5:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:95:FB:E6:AC:46:AF:09:1F:0A:11:C1:10:B1:DC:0B:BB:BA:40
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e6:a9:54:13:ab:e3:10:84:6e:dc:16:b3:18:da:48:af:b5:
d1:d9:ed:a9:d0:ff:c6:38:36:8d:64:f7:7f:8b:ec:6a:18:2c:
1f:bb:ca:34:f3:55:3f:24:d6:35:15:f0:8c:98:9d:b9:2a:12:
eb:5b:5c:b7:a5:70:0c:68:f0:1e:b4:1e:02:2c:fd:28:e1:6e:
f5:a7:f0:89:8e:93:8b:ef:0b:2a:4b:0f:0e:07:85:a0:f5:41:
03:20:24:d4:b2:1c:12:9c:05:f9:5e:75:1c:19:b0:2b:48:38:
c7:34:cd:32:b7:70:63:d7:72:7f:f7:44:a2:56:43:9c:ea:a1:
a2:21:36:cd:12:6a:83:49:85:9d:bd:c9:38:65:e4:fc:1a:16:
e1:89:de:2c:89:fc:4c:ad:65:a9:3b:f1:ef:c5:33:69:05:aa:
52:78:03:1e:2e:58:40:fd:8f:52:10:ba:f0:4a:39:00:fd:75:
47:51:8c:5d:0c:fe:d8:af:0c:a8:ec:a6:0b:0a:58:f3:9b:57:
74:da:b3:a0:ef:a1:39:ff:b8:71:1a:0e:06:56:29:f5:29:44:
eb:2d:df:2c:91:c3:4c:4b:51:76:36:06:fc:f2:98:3a:46:1d:
f7:89:34:2d:dc:56:d9:e3:8a:bb:c0:64:a0:7b:64:83:be:66:
0a:e5:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 23:53:48 2026 by rpki-client