
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: rZB+pVyzjxfPVFRTOaKDcBWxRmwM1lAdgvoPuak6vW8=
Subject key identifier: A9:F7:E3:91:49:AC:CC:54:21:3E:65:59:13:A6:F3:BC:1C:06:39:7D
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 01A13E261C3B43151A205DBF047761E0C8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 1AB4
Signing time: Thu 15 Oct 2026 06:00:47 +0000
Manifest this update: Thu 15 Oct 2026 06:00:47 +0000
Manifest next update: Fri 16 Oct 2026 06:00:47 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: dZev32xnvmPd1fyie0+XOyeJBqvE6kaeWipeUG+kiAE=)
2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:1c:3b:43:15:1a:20:5d:bf:04:77:61:e0:c8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Oct 15 06:00:47 2026 GMT
Not After : Oct 16 06:00:47 2026 GMT
Subject: CN=a9f7e39149accc54213e655913a6f3bc1c06397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:5f:fe:35:bf:81:75:45:76:e3:7e:fc:d8:
ca:ee:a1:0c:44:0b:c3:c2:c2:16:a0:af:40:8e:70:
9c:d6:76:68:6a:b9:0a:f5:ec:e6:85:46:ef:21:3e:
fc:e9:67:d7:6f:6a:9d:62:bf:14:4b:93:47:2b:4c:
3a:d8:25:cf:05:55:f7:2b:8d:38:9d:ae:e5:84:fc:
fb:cb:b1:c0:24:43:01:c6:78:77:97:f0:7b:b0:f9:
88:7d:21:06:9b:d7:86:09:bf:cb:c7:fd:77:66:62:
4a:30:f6:83:58:ca:d4:5e:6e:68:b2:de:f9:df:3e:
25:8a:81:55:00:0c:96:46:52:9f:c3:e9:f2:2b:76:
54:f2:7b:5f:10:6e:9b:00:16:6b:be:64:7f:7e:55:
a7:96:cc:b8:e4:86:9c:e1:5e:2c:0b:a6:f5:8e:a8:
c3:98:89:03:cc:21:a5:e3:33:7a:ef:11:8a:48:ad:
45:85:09:48:bc:fa:7a:2f:01:f5:88:19:98:3f:e1:
f1:83:41:32:2c:3c:2f:39:8a:09:53:e7:d9:21:a0:
46:60:36:50:bb:b9:f7:32:c0:e2:bb:3b:06:a1:99:
4a:5b:ae:ad:d6:0f:ee:ed:dd:1b:e7:ab:f8:5c:51:
11:2e:cb:9d:b3:30:a0:0a:8d:d1:be:db:7e:06:63:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F7:E3:91:49:AC:CC:54:21:3E:65:59:13:A6:F3:BC:1C:06:39:7D
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:78:13:52:dc:fa:03:df:86:a8:af:ae:56:c1:b9:36:79:41:
e7:62:a2:a6:de:82:67:6a:af:43:a3:5f:31:9d:fc:61:50:57:
00:81:e1:83:12:45:a8:aa:5a:e4:de:a2:ea:38:d8:a2:27:54:
b7:a7:92:b4:b1:fc:41:88:37:bb:bf:09:76:8a:65:ab:08:10:
38:a3:7f:a7:0e:8c:41:a8:99:31:e5:6f:5b:09:02:dc:00:79:
b2:ca:e7:94:cf:ca:63:26:2c:c6:89:e9:ec:3a:59:e8:f8:01:
52:6b:5a:70:07:0c:f6:30:b5:a5:09:11:da:b6:ad:29:58:e0:
22:03:8c:d8:36:53:a2:b6:3e:dd:a3:5e:7e:54:30:d6:23:45:
88:9b:ad:57:69:e3:81:e7:1f:b7:87:90:2a:91:07:f5:22:d1:
e1:10:50:e7:27:92:8d:86:68:ed:ef:cd:f1:1f:73:81:69:25:
13:49:dd:65:a1:f5:29:86:d8:5b:88:2f:40:32:04:8e:62:c7:
5f:79:34:ed:a8:30:3f:ac:91:c8:e1:ae:d9:22:f9:16:87:59:
e8:64:6b:6a:d0:35:78:eb:99:c0:52:5f:c0:c5:8e:87:4e:22:
7b:3c:41:22:02:d6:28:bd:7d:87:3f:b7:d8:84:eb:51:8a:d7:
b5:78:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:24 2026 by rpki-client