Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: ZwLurzQF6XYuC7VECjXLLXJHnXfjhFXRYgGo2ax291Q=
Subject key identifier: 52:94:72:A7:55:CE:EC:81:15:B2:A1:ED:84:7D:3D:5C:D3:47:F7:2C
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 01A0E1066130D47E633E65CDC9AF54CF2509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 066A
Signing time: Sun 27 Sep 2026 04:01:26 +0000
Manifest this update: Sun 27 Sep 2026 04:01:26 +0000
Manifest next update: Mon 28 Sep 2026 04:01:26 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: s0d/1VStSfN+CvzYe9RBoaWVc4i5pvqAtOhSEHffBUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:61:30:d4:7e:63:3e:65:cd:c9:af:54:cf:25:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Sep 27 04:01:26 2026 GMT
Not After : Sep 28 04:01:26 2026 GMT
Subject: CN=529472a755ceec8115b2a1ed847d3d5cd347f72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:59:36:66:70:68:39:d4:32:34:48:33:65:
51:8a:c6:bb:df:84:87:20:29:84:d9:20:ab:75:74:
28:dd:2a:c8:e4:e0:9d:00:b9:b4:71:93:65:8c:e0:
9a:ae:d1:01:79:32:c4:bd:a7:09:d3:85:5b:b4:c8:
a0:cf:e3:b2:d5:93:e6:15:38:5d:cc:81:fe:6f:27:
68:e0:80:87:2a:e0:46:94:a0:0f:c8:be:8d:8d:40:
bb:65:6b:bc:cf:28:f8:d1:16:be:48:94:93:03:8e:
9f:2d:ba:a6:94:b4:76:5a:47:6f:91:d6:a4:7e:6c:
ae:a9:93:93:a4:fd:a3:3f:9a:50:82:ed:9e:e2:34:
87:44:f6:04:cb:99:46:fd:55:a8:2f:09:0f:3c:2e:
3d:58:b6:78:8b:eb:61:1f:db:dc:12:6f:e0:06:8f:
7a:72:5e:23:7a:e3:66:4c:20:43:49:48:7a:f6:50:
26:be:49:b4:52:2f:0b:f0:ba:5f:94:ad:c2:c5:f7:
64:7f:7c:98:44:4f:e8:44:a7:bb:82:cb:d7:be:72:
13:c4:c5:80:86:2f:5b:89:c6:be:6e:6c:7e:de:4b:
f9:16:00:d7:67:f3:68:0e:15:1c:a5:ba:c0:ff:b5:
36:48:86:bf:6c:32:bd:79:db:32:b1:94:a1:80:b9:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:72:A7:55:CE:EC:81:15:B2:A1:ED:84:7D:3D:5C:D3:47:F7:2C
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:84:ec:82:99:17:49:d6:ea:05:f7:6a:a8:7b:6d:ae:67:6d:
6a:2a:f6:b4:f7:f2:ef:a0:11:f8:f2:c3:e5:fe:d7:db:c0:c8:
98:27:9b:70:88:3b:cc:38:b1:22:8d:ea:f9:ff:34:11:20:99:
64:16:ac:56:bf:7f:92:04:94:33:ea:12:b5:72:63:4a:bb:5e:
8c:05:22:f1:f6:b8:6a:6b:bf:b6:67:4d:2a:66:32:f5:58:0a:
96:04:27:70:c6:d6:c8:c5:80:66:b1:b7:49:87:bc:bd:ad:1d:
2a:30:ad:fc:5e:dc:3e:94:b3:22:86:5a:0e:aa:73:23:a8:8c:
0e:a1:78:b5:6e:f6:62:8b:f1:91:09:80:4a:de:56:0d:f0:04:
51:17:59:1b:67:58:5e:0e:9f:a2:1b:2f:5e:84:ac:b4:b6:45:
4f:b4:f0:af:64:5e:db:44:88:f7:a3:66:cd:b4:12:bd:22:bd:
81:45:a0:31:7b:0a:0c:f1:d7:7b:f6:c4:78:aa:3a:fc:96:cc:
3d:09:c9:b5:b3:8e:f5:f5:2c:50:bc:26:eb:2c:2f:e2:de:c6:
8a:fa:07:aa:71:53:58:89:0a:f3:ba:6c:e0:0a:e8:29:d8:58:
f7:8c:65:b2:d0:95:77:aa:7b:ea:01:74:f5:2a:0c:86:f9:c1:
4f:7e:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:02:05 2026 by rpki-client