Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: 6+J9jAuzx8f/wadHDbkKsuAYsOnqP8KKU4xW1DxH0m0=
Subject key identifier: 32:BA:04:A1:E7:98:63:D3:E4:BF:0E:D3:8B:9B:7D:C1:38:3A:A0:85
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 01A10814231190F3AFC472E5148A0C35D053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 1A8C
Signing time: Sun 04 Oct 2026 18:01:39 +0000
Manifest this update: Sun 04 Oct 2026 18:01:39 +0000
Manifest next update: Mon 05 Oct 2026 18:01:39 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: PGEgLYlu4H+aWfOWI5YF81KgOB8gDYAvSGYmLd2Tf1c=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:23:11:90:f3:af:c4:72:e5:14:8a:0c:35:d0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Oct 4 18:01:39 2026 GMT
Not After : Oct 5 18:01:39 2026 GMT
Subject: CN=32ba04a1e79863d3e4bf0ed38b9b7dc1383aa085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:d1:bd:39:9e:21:44:a5:14:94:aa:63:3e:
03:d7:e2:bb:b8:93:97:4e:50:74:4f:1e:0c:d2:ea:
78:aa:ab:24:e4:95:80:c8:cc:8f:41:f8:e6:9e:f5:
0c:d6:7e:7b:ac:b5:85:c9:c5:be:45:13:3e:d7:04:
82:5f:a1:ae:b9:1a:72:d9:82:f5:4a:71:c8:eb:7d:
d0:92:ed:a2:c1:73:f8:2e:d4:82:87:a8:fd:a8:cb:
5b:13:08:1f:3e:f9:92:d5:1e:0e:77:50:d9:2e:d8:
c5:ac:3f:a1:75:2b:eb:b2:d9:48:dd:b6:6d:98:a7:
5a:9b:4f:65:5d:3b:2a:fa:a8:07:17:d2:73:59:70:
3f:5f:c6:3c:c9:33:49:cc:2c:b0:9b:f3:3d:42:d7:
64:52:51:a3:22:87:e4:6c:ba:ed:0b:4b:d5:3d:1a:
b1:29:36:3f:b7:9d:9e:d4:fc:e2:c2:61:d8:74:27:
f0:fa:8d:0a:17:8d:06:07:f1:31:57:8c:90:fe:ad:
ac:70:b5:15:68:17:92:c2:8e:fb:de:72:e8:d3:d8:
e8:22:cd:e5:a2:57:83:b0:0b:2f:5b:06:88:e6:89:
40:f0:9f:6e:1e:61:af:8a:37:91:1c:5c:ca:ca:0b:
ac:2a:35:c6:f7:c9:d3:3e:9e:e1:cd:7a:d6:11:94:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BA:04:A1:E7:98:63:D3:E4:BF:0E:D3:8B:9B:7D:C1:38:3A:A0:85
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:36:c5:00:67:5a:e0:6d:0f:34:6c:a5:e7:ee:11:47:00:75:
05:e3:f4:46:e8:32:d6:c1:6c:40:4f:e3:12:95:c2:c8:ba:b4:
96:f6:6f:cf:00:fa:44:93:b6:23:07:a5:41:21:80:7a:52:70:
ad:e0:c5:95:94:a8:c7:f6:6b:42:3b:ce:57:a6:76:83:33:a0:
de:d0:66:7f:a6:6b:9c:fe:9f:62:95:9d:08:50:84:6c:0f:0d:
d4:7d:ad:aa:c6:15:e4:6c:a7:1d:95:cf:ec:76:c7:16:e9:30:
c4:99:9d:b7:93:00:70:d1:93:ba:7f:b7:77:21:8b:11:ed:55:
de:81:ff:8f:67:45:28:3f:61:a8:f9:06:58:c3:41:ce:b0:e6:
f3:fc:4d:f1:69:07:85:9b:5b:b2:7f:ab:77:5f:e1:14:74:fa:
d3:e6:02:f6:b1:fa:be:20:9b:1a:6a:28:0d:78:d9:b4:e5:6b:
43:d5:07:2d:cb:5a:81:11:ae:37:03:81:76:75:34:3b:da:75:
b3:bd:8d:be:e0:b0:81:80:d3:db:31:2f:cf:12:1c:31:a4:ff:
7d:b2:dd:29:d5:bd:1f:29:83:80:4e:6c:d3:bb:7b:97:00:fb:
30:6e:ab:c3:2c:b3:ed:86:99:8a:e7:9f:a9:50:52:46:0e:33:
1a:72:4d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:23:05 2026 by rpki-client