Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: EgvW8w4/LEO1YMy2quUpzKq3rWANljjE3MWAqmpEIrc=
Subject key identifier: 16:EF:B6:19:7D:CA:11:41:46:B2:14:FF:22:A1:A2:5C:50:9A:80:EA
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 01A1C366DBA19AB29692705A0C29BB5A7B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 1AE7
Signing time: Tue 10 Nov 2026 03:01:00 +0000
Manifest this update: Tue 10 Nov 2026 03:01:00 +0000
Manifest next update: Wed 11 Nov 2026 03:01:00 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: zjlwbR89WA8KR3TeoGLTyXSUBn+6B+nw0e++jtSHtbw=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:66:db:a1:9a:b2:96:92:70:5a:0c:29:bb:5a:7b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Nov 10 03:01:00 2026 GMT
Not After : Nov 11 03:01:00 2026 GMT
Subject: CN=16efb6197dca114146b214ff22a1a25c509a80ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:d6:f8:aa:8d:bb:f2:45:e0:fe:e5:27:3e:
7a:ac:a2:a9:99:4c:37:48:1c:f7:ed:13:c6:20:2b:
50:13:a7:a7:e9:d7:ad:b7:b1:65:05:0f:32:07:df:
84:d4:c6:5a:c1:af:fe:03:19:1b:fe:72:57:00:33:
7a:24:b9:92:b0:8d:6c:d5:b0:d0:be:f9:d3:a6:c2:
10:41:60:b7:e8:6b:cd:bb:35:8b:c9:96:34:71:c0:
75:bd:6d:b1:89:41:fa:1c:bc:68:7d:8c:15:cf:a3:
96:79:d3:b1:53:74:ef:80:be:a6:4b:e3:87:17:28:
d8:df:0d:44:35:bf:7f:c6:b1:87:f0:b6:17:d2:cb:
c5:8f:35:f5:44:bb:5e:e0:10:6b:87:5c:8f:11:2c:
d2:b2:0f:01:9f:85:ec:dd:66:fc:66:b5:ef:09:62:
cd:c8:d1:40:ab:16:cf:d7:c0:88:ff:1c:af:d2:d1:
93:98:7f:35:3c:20:d6:6b:48:2c:13:4a:35:a2:9a:
1d:22:c9:17:b8:35:6c:9f:c1:0a:f2:ae:f9:fc:8d:
fe:19:30:a0:09:5a:ca:69:4e:68:46:46:63:53:fa:
83:8d:f3:0a:03:26:1a:af:b2:6e:d1:a6:2f:e4:3b:
4c:54:db:f5:cc:3d:61:c1:84:b2:c8:ab:d8:da:59:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:B6:19:7D:CA:11:41:46:B2:14:FF:22:A1:A2:5C:50:9A:80:EA
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e8:a8:2a:ba:18:b1:a9:ad:2d:26:24:61:b3:3c:b7:5c:01:
e3:68:34:59:01:42:08:fa:c1:b1:60:bc:b1:4f:58:21:78:90:
ec:f4:7b:12:63:24:0d:c2:22:dc:07:99:0e:2e:89:f2:0a:97:
18:c2:90:e4:dc:99:98:95:1a:6c:c7:73:cd:dd:18:c7:53:94:
31:13:11:3b:a0:06:07:dd:5f:1b:fd:f9:b6:37:7b:d3:6b:45:
32:ce:62:b7:ef:76:76:07:4e:f7:3b:a7:76:bd:87:8d:d3:35:
64:d9:21:1b:6b:59:97:b5:c7:47:65:ca:09:e3:cc:d3:90:97:
5b:88:64:35:e8:59:3d:a4:68:a3:34:ff:b4:32:c7:35:4f:09:
3b:55:27:de:be:19:c7:b0:55:c9:be:d8:7a:72:20:27:50:0e:
55:52:c4:25:32:10:10:7d:28:6b:c1:08:6d:8e:7d:98:09:f8:
93:33:66:58:2b:fa:a5:49:88:1f:0e:2d:30:17:e5:ec:89:90:
6e:cd:1a:70:78:d7:14:5b:bb:64:aa:17:2f:9c:c6:59:ae:0c:
e9:01:71:14:df:d9:33:b4:dc:6a:47:71:40:69:93:f2:9e:c2:
d9:26:ee:df:29:cb:07:91:d2:70:d0:64:06:69:35:bb:78:9b:
6c:78:1a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:47:54 2026 by rpki-client