Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: hUOzvvKs0s690dy+3gxoJoOswBFCancwyOKWGyDqCWc=
Subject key identifier: AD:B6:50:20:E0:BA:74:BF:FC:37:38:A9:61:1C:22:3A:88:76:6F:3A
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 01A1DE7127F4C7226C36714DF974FCEAA6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1B09
Signing time: Sun 15 Nov 2026 09:02:00 +0000
Manifest this update: Sun 15 Nov 2026 09:02:00 +0000
Manifest next update: Mon 16 Nov 2026 09:02:00 +0000
Files and hashes: 1: 7OjuKNPsPrUyOFyctO4jTsdEhDw.roa (hash: 17wDFdv6rscsc5OgsxeGacU+mxe2SfqkfJ3s+NQPz6Y=)
2: d7D9_8-EV0OF_G7I7MEEDhZW2h0.roa (hash: WWLJrfMuw3/F8MMNeKlDW73dMBhQz1Tzv5In8NicFXo=)
3: gux-IxdkibcThQl39PWiMsakK0g.roa (hash: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E=)
4: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: uy3QJLNsZ8kUmJNYstZgNGTbt76hZgKD9VGScjHSx0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:27:f4:c7:22:6c:36:71:4d:f9:74:fc:ea:a6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Nov 15 09:02:00 2026 GMT
Not After : Nov 16 09:02:00 2026 GMT
Subject: CN=adb65020e0ba74bffc3738a9611c223a88766f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:93:e4:79:83:71:37:55:6f:b7:a7:9c:83:
cb:fd:f6:9f:d3:b2:ef:50:65:93:23:47:b8:e3:25:
5a:f3:a4:a7:bd:29:87:6b:88:69:a8:6e:39:c3:77:
ec:05:17:ae:91:5b:fb:b6:5a:c7:08:d5:5d:e3:5f:
cc:e4:6a:e4:41:95:f7:8b:1c:13:73:b2:ea:06:9a:
67:4c:0d:df:54:56:d9:26:74:64:e9:6e:99:99:71:
93:65:db:0c:36:c8:95:bd:73:6a:da:a1:77:d7:c3:
c5:a8:16:db:9f:34:a7:9e:a1:72:b4:ca:1c:82:84:
4f:cb:49:e0:09:6a:22:3a:7c:e7:b4:a9:ff:fd:f9:
66:93:10:72:6d:f5:09:60:41:2a:14:80:4a:62:bf:
8b:c1:e2:13:a5:49:04:c1:57:70:fd:76:44:89:b9:
52:45:62:3b:31:1a:09:5e:96:c8:99:24:e9:69:7f:
05:29:55:23:21:68:8f:92:f2:0e:45:c3:52:67:92:
73:3c:31:74:ba:37:20:38:d2:bb:76:e0:d1:e8:7c:
d2:3c:00:b5:91:c4:25:69:bc:d7:29:43:1a:b9:e4:
ce:a7:24:8e:8c:4f:6a:fc:40:1b:c4:b4:57:1b:3d:
7d:b4:60:29:89:6f:bf:96:48:bc:46:cb:aa:eb:b0:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B6:50:20:E0:BA:74:BF:FC:37:38:A9:61:1C:22:3A:88:76:6F:3A
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:73:30:5e:3e:9d:fb:c4:53:e1:1c:88:ba:da:37:a9:9a:57:
94:84:77:4a:7c:9a:30:45:16:df:73:94:26:92:e7:6e:41:40:
dd:b6:c5:c2:8d:08:f6:2e:4e:e0:87:55:01:64:1e:9c:ef:e5:
25:1f:15:da:4a:cb:36:26:33:b7:77:96:a1:27:2f:08:81:78:
70:08:24:67:bd:c3:c1:ec:42:8a:2c:5f:e5:7a:01:8f:c4:08:
bf:7d:6c:62:3d:3c:66:43:73:78:70:f1:ef:35:40:ec:3a:3f:
8a:95:3b:47:ff:8f:0d:1f:6a:33:e6:42:f7:0b:84:33:62:a7:
0d:65:8e:11:2d:cb:49:f4:75:d9:7a:62:7f:c7:75:9b:c1:05:
f7:40:9a:bf:f8:50:b3:ca:13:65:8d:9f:2c:4e:09:90:b9:67:
87:6d:52:24:90:94:2d:47:28:b1:48:75:1a:77:8b:a5:6a:02:
c2:56:3b:1a:ba:d1:3e:bb:39:22:46:71:35:98:d8:be:01:5e:
fb:d9:43:8a:9d:82:5c:3d:86:52:18:c1:f7:9b:90:30:5d:eb:
1b:f9:8d:06:fa:59:ec:61:37:d1:be:cd:e3:ee:de:14:c4:ed:
23:10:d8:aa:3e:3e:cc:30:99:26:53:04:de:25:8b:a3:3c:95:
db:90:a6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:26 2026 by rpki-client