Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier: piCKAYToDxv2/KHPRn88pxUHjAmwK9+l2oUvtMXNTHU=
Subject key identifier: 84:B3:5D:38:55:A1:CF:16:39:9A:CC:C4:ED:02:E2:D2:DF:CF:3D:9A
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial: 01A1DEDE81325B1BF20A2281D4B2F32A8E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number: 11D7
Signing time: Sun 15 Nov 2026 11:01:26 +0000
Manifest this update: Sun 15 Nov 2026 11:01:26 +0000
Manifest next update: Mon 16 Nov 2026 11:01:26 +0000
Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: VNuUJ13UktBXUCkhEXtJdD+Y2Kal3u2MonXEqZn8Cvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:81:32:5b:1b:f2:0a:22:81:d4:b2:f3:2a:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Validity
Not Before: Nov 15 11:01:26 2026 GMT
Not After : Nov 16 11:01:26 2026 GMT
Subject: CN=84b35d3855a1cf16399accc4ed02e2d2dfcf3d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:26:61:e0:b2:3b:95:77:b4:3e:17:39:62:
ad:8d:bd:fb:31:39:a8:e7:0a:7e:a1:47:39:1a:82:
f0:10:9a:ec:a3:84:b1:17:14:18:68:23:9a:6f:9d:
27:12:ee:37:69:97:fd:10:9b:b3:e8:60:5c:9a:c6:
29:04:8f:f3:7d:e8:da:59:f7:5a:0f:e1:a4:08:d0:
c8:ef:e3:98:5d:58:0f:5f:d7:1b:9f:d5:bd:1f:77:
9e:86:8a:81:8e:de:6d:ad:71:62:70:82:6d:24:88:
f7:81:c7:9e:0f:ff:7f:64:61:8f:14:36:bb:65:5c:
3b:dc:c4:14:03:e6:2c:4a:63:a5:00:8b:9b:18:18:
8b:82:93:70:15:b3:b5:96:54:18:c5:cd:f5:f8:cc:
b1:1f:b1:e4:5a:f4:47:24:a2:a8:7a:53:da:94:3d:
2a:7e:61:24:93:b3:d5:a3:f3:a0:36:a1:a1:a7:cd:
75:f5:ac:da:1c:42:b9:39:86:58:f2:46:0f:39:1b:
97:8f:19:df:d3:d3:02:de:9a:a3:c8:71:4e:b4:e0:
f1:79:22:ea:0d:a9:db:02:d5:0d:9e:dc:06:ad:ac:
94:2e:dd:65:53:00:ee:ce:c7:8b:17:44:b1:11:4c:
44:aa:23:40:46:71:4a:0a:46:2f:59:33:03:d4:53:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B3:5D:38:55:A1:CF:16:39:9A:CC:C4:ED:02:E2:D2:DF:CF:3D:9A
X509v3 Authority Key Identifier:
keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f4:98:db:60:3c:3c:e8:43:e0:c8:be:c3:a1:15:0c:98:bc:
47:15:02:c9:f3:a7:ef:2e:4e:61:09:46:ab:a1:fc:b5:87:dc:
22:03:26:61:b6:a3:db:13:d7:72:a6:09:24:9c:49:3a:ba:70:
06:03:3a:38:e0:72:29:c2:50:17:20:a8:a7:9c:ed:16:64:0f:
4b:ae:de:c0:1a:d8:77:82:24:47:53:2a:e5:25:86:c8:1e:b7:
87:5d:d4:7e:47:c0:40:b7:6f:f0:e0:3d:27:e6:79:be:56:5a:
a2:b6:dd:bf:fa:18:c7:36:c0:f5:00:7f:0a:7c:b6:37:f9:88:
3a:25:3e:26:b8:ca:22:c5:a0:df:28:15:25:b5:7c:28:dc:92:
33:97:67:bf:96:db:33:6b:97:2c:75:05:55:d4:2a:84:45:69:
18:b8:b5:46:8d:02:d1:93:1d:48:fa:cf:de:f8:23:76:99:34:
14:74:a2:f3:59:34:dc:f9:50:00:71:1a:d0:78:fb:b2:02:67:
25:1e:d5:58:0c:15:25:6a:10:be:77:4a:62:ff:f5:c4:fa:b0:
9c:ec:fa:93:e6:03:bd:a6:83:4c:a1:ed:c7:b2:cf:81:f5:4e:
3d:df:93:b4:65:8f:c1:d4:fd:53:ff:58:ec:77:8f:6c:09:cf:
bf:ba:78:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:56 2026 by rpki-client