Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier: kU+xmaVxfbW0tvrWA4QYDA5SvUw0S0LUapPiLxz2hnY=
Subject key identifier: AE:B5:5D:FD:21:7A:28:42:E0:56:AA:3F:8D:59:78:F0:F7:58:BB:33
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial: 01A1C4B0C014C85E55D68053240A7C0381E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number: 1AF2
Signing time: Tue 10 Nov 2026 09:01:20 +0000
Manifest this update: Tue 10 Nov 2026 09:01:20 +0000
Manifest next update: Wed 11 Nov 2026 09:01:20 +0000
Files and hashes: 1: 8z842irPUI8EAcdgem6-OTXhKlE.roa (hash: HK9+peK6bA6qvniuZHkI3MKhAoqJRMXPjQN3NjLDd4Q=)
2: C-eRdGJheWWO-BQH20gVo6-55lU.roa (hash: AbD58rM5EB/Q++PaApU6j4w5JzUDMVH5itkiJf48ScE=)
3: h_dGaZkpgJ73O29r1EDyAEN8xR8.asa (hash: Hu5pzvPt2D+Ppd393Bg90m+MGP3xk9fAeGx+umxpkLs=)
4: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: sLCeCi4zSdu/r2vlXcCC/L+XduO3wVvbMdPGnQPpInk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:b0:c0:14:c8:5e:55:d6:80:53:24:0a:7c:03:81:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Validity
Not Before: Nov 10 09:01:20 2026 GMT
Not After : Nov 11 09:01:20 2026 GMT
Subject: CN=aeb55dfd217a2842e056aa3f8d5978f0f758bb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:8f:15:17:76:b1:44:ac:a6:8b:57:3b:0f:
3c:18:75:d7:27:1d:90:32:2c:c2:87:ef:4c:fd:0d:
fe:4d:92:ae:58:df:5a:37:ee:37:ac:4b:0e:38:29:
49:a0:09:9e:ae:ae:fa:e6:0c:c1:63:4b:37:54:e9:
d2:b9:34:97:0c:29:27:50:3c:7f:83:14:11:fc:47:
76:29:58:b4:db:9d:0e:4e:29:32:d1:60:ca:48:d4:
c1:b7:61:f5:10:52:d3:da:37:92:4e:6d:ac:c6:aa:
32:77:8f:a0:25:7f:ca:67:83:da:6f:57:32:80:71:
f1:f4:f0:31:77:cf:85:d7:9e:cc:4b:25:15:c7:e8:
a8:cb:9c:92:4c:85:1e:06:05:d6:a1:92:37:cb:0d:
9d:1f:be:b1:6f:7b:f6:4e:95:5f:59:b6:b3:f8:e0:
0b:f4:79:64:bf:34:7d:0b:c7:27:b6:2e:49:4b:a8:
27:10:ca:15:3c:b3:19:29:37:37:cf:42:1c:dc:e1:
81:eb:b0:d6:ed:56:61:95:42:95:b8:17:77:52:67:
12:e8:ab:92:dd:12:18:49:cb:73:cb:e1:73:c7:3f:
a0:72:1f:03:70:e4:32:38:b8:39:30:39:7d:67:da:
6a:77:2c:d5:8c:67:cc:6c:6b:66:bd:5c:81:7d:68:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:5D:FD:21:7A:28:42:E0:56:AA:3F:8D:59:78:F0:F7:58:BB:33
X509v3 Authority Key Identifier:
keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b9:8a:38:20:02:2e:b2:7a:11:2a:aa:21:fa:68:60:63:e1:
3d:5d:a9:15:dd:25:e5:b5:a8:5b:46:9b:53:8f:b4:a1:21:d4:
c7:6a:cf:38:22:e5:74:18:60:ed:d0:68:93:81:3a:af:bd:db:
31:9d:b2:10:89:d4:31:01:52:82:5a:1c:86:ee:67:6d:d7:e2:
26:78:c2:b6:cf:ad:7a:cf:0b:36:26:ac:6e:91:97:1a:f8:27:
41:79:29:f4:50:b1:8c:97:11:de:fe:da:9f:33:e2:d9:d7:9f:
05:15:f4:91:f4:fb:97:cc:9b:8e:ea:4c:0d:ee:18:d1:1e:2d:
a1:47:c0:39:06:53:5d:2b:3d:a1:7c:ba:7f:4b:82:30:10:52:
bd:6d:a2:65:f4:5b:35:47:00:18:eb:c4:6b:da:d5:75:14:3a:
c4:ad:4e:7e:f7:c9:b5:d7:21:64:38:bc:6b:fc:14:db:c3:d9:
60:e3:bc:fe:35:2f:04:90:65:cb:e9:38:b1:16:14:12:e7:e9:
1b:5a:35:1d:79:b1:dc:6b:e0:e9:0e:2b:7c:e0:1d:f2:40:ef:
aa:10:4d:62:87:12:3f:b2:09:f1:e1:87:7a:0b:63:5d:a0:da:
e3:dd:55:bb:5c:3c:7f:3b:21:d9:85:74:81:3a:a3:d4:7d:ca:
c9:a9:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:42:38 2026 by rpki-client