Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: KV4MDbeJpGa7TVthH8WqR0sn6G9wpuAPsEn3Bls3GM4=
Subject key identifier: 4E:BF:4C:63:93:AB:DC:D9:0F:4D:55:03:00:0F:40:15:16:AA:78:AF
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 01A0D9BAC24FCF4C2E17359EE5072EB5026E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 0D29
Signing time: Fri 25 Sep 2026 18:01:30 +0000
Manifest this update: Fri 25 Sep 2026 18:01:30 +0000
Manifest next update: Sat 26 Sep 2026 18:01:30 +0000
Files and hashes: 1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: Zy4VfVGgeRBZYFakzw2BD9/zvyOSwZxeCf/KE6n0KHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:c2:4f:cf:4c:2e:17:35:9e:e5:07:2e:b5:02:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Sep 25 18:01:30 2026 GMT
Not After : Sep 26 18:01:30 2026 GMT
Subject: CN=4ebf4c6393abdcd90f4d5503000f401516aa78af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:96:40:db:de:21:75:2b:47:1d:93:18:9b:
43:8f:5b:57:2e:77:46:87:9f:7c:f4:91:36:9e:54:
76:ac:51:06:cf:76:ed:c5:65:22:44:a9:ea:bc:b0:
e6:5f:59:3f:a7:8a:69:69:85:41:59:cf:6a:ff:6d:
7d:0e:12:f5:7f:73:c6:f4:49:dd:92:77:03:4a:2f:
13:36:cc:d1:4b:0f:9c:38:0c:6b:fd:85:ce:4c:96:
99:37:46:a3:db:39:6c:aa:d6:03:da:20:16:13:c1:
38:c3:4a:ec:69:e8:80:d9:e2:ff:e6:36:e2:a8:3a:
b7:5a:6a:ec:bd:77:66:db:3c:22:49:44:65:8c:66:
b1:2c:48:84:13:e1:e9:4c:22:1a:18:e3:6d:17:4d:
fe:53:0d:8d:77:9c:1d:4b:0a:86:df:39:37:d6:d7:
31:aa:b4:2b:99:81:3b:7c:db:8b:b3:8b:5e:6f:cd:
e9:5a:e1:1a:4d:4d:f7:45:f5:c8:03:88:39:db:f7:
d1:58:c3:cf:61:d5:fc:22:08:b5:85:4c:97:f6:8f:
59:f1:71:43:9c:f8:f9:d9:51:00:27:9d:3c:a4:9c:
e4:d3:21:b3:e2:6e:fe:1c:d6:95:af:56:63:17:ad:
e2:63:7f:db:fa:1f:a6:dc:2b:4a:b5:be:cf:ca:eb:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:4C:63:93:AB:DC:D9:0F:4D:55:03:00:0F:40:15:16:AA:78:AF
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:dd:df:2b:4e:19:2e:68:48:6f:52:c6:e3:a1:f3:5f:3f:d4:
e2:d8:d7:c9:27:2c:3c:d0:35:77:da:ec:82:4f:f8:bf:0e:85:
0f:c3:ac:ef:20:0d:f0:e2:86:e9:50:c6:0d:2e:16:d6:95:7d:
73:d7:74:2e:50:5e:79:c0:d8:31:a3:30:fb:0f:c5:47:fe:64:
82:9b:5e:3e:e8:26:f5:4c:e9:34:e3:27:12:4c:23:4c:8d:7a:
25:7d:b6:94:01:81:a7:25:de:d8:54:97:b7:26:89:bb:ee:e0:
fb:6e:f2:39:25:e5:7d:e5:b9:17:db:22:38:59:75:3a:bc:10:
18:08:b7:00:9f:40:03:8b:4f:7f:9e:2b:1a:45:d2:85:a9:df:
48:27:85:d7:ff:63:df:4d:5d:92:ca:b8:1c:84:a9:5e:cc:c7:
f9:2e:aa:87:09:b8:97:7f:5a:c7:bb:b7:ae:c8:08:85:74:64:
3d:b4:fc:eb:92:dd:8b:4b:a3:df:65:18:ea:6f:16:70:13:b4:
52:37:88:61:ee:21:37:9d:75:8c:73:20:bc:d2:44:9e:47:97:
9a:e2:6b:38:e7:89:7d:77:6c:de:bb:87:b0:93:16:6a:da:2d:
14:3d:26:66:6c:05:f1:16:4d:4d:f0:af:67:6c:11:98:5b:e8:
07:fc:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:34:25 2026 by rpki-client