Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: LDNZV/V4+os5YegOB9wWuq0SPOFAs2jErOA2sJ03Xc0=
Subject key identifier: 75:2D:ED:E2:B6:10:33:91:4D:5D:D5:34:4F:69:66:F0:75:35:19:3C
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 01A1DE03372382CC2AFC3EB2C06BC1165900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 1638
Signing time: Sun 15 Nov 2026 07:01:54 +0000
Manifest this update: Sun 15 Nov 2026 07:01:54 +0000
Manifest next update: Mon 16 Nov 2026 07:01:54 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: Xb3UEEryQuG32K9yEsMai6bVkXw3FHsIH2i0YYbz3/g=)
2: EMaV_sDtEC3ONnRr_ZacRZkjYek.roa (hash: uEhrTJgtxikjiJZwpMeYSv1aaXx9clVq4b4CFPBvQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:37:23:82:cc:2a:fc:3e:b2:c0:6b:c1:16:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Nov 15 07:01:54 2026 GMT
Not After : Nov 16 07:01:54 2026 GMT
Subject: CN=752dede2b61033914d5dd5344f6966f07535193c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:ad:a2:f2:f0:39:3b:da:16:ff:eb:d9:ee:
20:f8:aa:01:c2:76:6c:ae:d4:fe:95:d2:c9:58:4e:
4c:b5:7f:33:04:e4:b7:84:93:6c:7a:19:b3:ac:92:
85:89:da:f8:51:d2:60:0f:42:7c:f9:1f:ae:ac:1d:
ec:43:ea:89:fb:8c:fe:0e:ba:11:1b:d1:a0:72:90:
fa:72:d9:b7:ed:45:b2:9c:4d:0d:57:55:b9:cf:04:
a3:34:8f:b4:87:82:a5:dd:0c:50:ac:59:db:d9:f9:
b0:dc:5e:22:83:ee:24:28:73:12:33:86:c9:27:6e:
ba:3f:26:3b:82:18:44:07:e9:7f:7b:7d:43:af:d6:
9d:07:d6:35:7b:91:4d:35:02:39:83:cd:ff:92:d3:
cc:80:42:3e:75:18:06:78:7b:24:39:8e:a4:18:86:
2e:ea:1d:7c:83:70:8c:ed:fb:98:d3:58:1c:42:20:
0d:60:33:37:82:ae:ae:7c:f7:15:bc:67:68:cb:02:
1d:b4:29:a1:8c:0f:f8:a5:ac:c3:48:e9:f4:71:07:
70:e8:d2:28:30:f2:91:3d:2f:c9:72:e7:89:5f:3a:
26:d7:38:62:ac:19:76:bc:ab:5c:e9:8e:32:64:c2:
97:20:8b:af:d2:ac:fe:a1:ef:ee:b3:f5:32:26:05:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:ED:E2:B6:10:33:91:4D:5D:D5:34:4F:69:66:F0:75:35:19:3C
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:91:14:f7:a3:25:6f:8d:f7:b5:0c:f8:60:12:6f:74:74:
2e:81:1e:bf:d8:55:33:ba:02:e6:7b:72:35:19:75:5f:12:b8:
e0:8d:70:28:4c:ef:26:ca:25:57:f4:13:2a:32:49:25:20:64:
6a:d3:5b:c6:dd:94:c6:3c:ea:5e:11:9b:37:3e:33:c2:2b:a1:
a3:14:d2:00:e1:ee:3b:13:c5:26:ac:a7:4c:6d:23:8e:3f:af:
c2:39:10:da:f2:82:99:9d:0b:e7:d0:5e:2b:e8:e9:71:e5:45:
0b:e4:d3:82:34:84:9c:86:a0:d5:68:77:ca:65:2b:21:77:25:
b0:35:e8:b8:12:86:db:7a:de:38:81:9a:bf:6f:67:d5:b8:93:
4f:24:99:6e:9e:ac:7e:38:0c:bc:bd:28:f7:04:07:6d:e5:f5:
ed:c6:6a:18:bb:4c:48:0f:43:6e:9e:2c:b1:5c:d4:14:06:1e:
6e:d8:76:e3:22:eb:91:a8:02:77:6c:d1:36:74:d5:cf:29:05:
41:c7:cd:8b:58:8f:bc:0a:e4:22:e0:36:a7:d2:d4:43:da:cc:
68:a6:e3:e9:4c:d1:77:64:42:96:ae:d8:17:6e:b6:b5:33:48:
e6:6e:82:0a:38:17:fc:d3:db:0b:81:ef:bc:55:3c:8c:33:21:
80:b6:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:44:31 2026 by rpki-client