Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
File: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft (raw, json)
Hash identifier: dSMa6AseNnp8L8Hn25ITxMwPZ85jrByTu2yMksQAlnI=
Subject key identifier: 5B:D0:3C:9E:7F:22:65:EE:DF:CF:F8:DF:5B:50:C5:FF:5C:5B:5E:40
Authority key identifier: F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
Certificate issuer: /CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Certificate serial: 01A0E362F6DBF8E1FA64F54216692971D37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:01:48 +0000
Manifest this update: Sun 27 Sep 2026 15:01:48 +0000
Manifest next update: Mon 28 Sep 2026 15:01:48 +0000
Files and hashes: 1: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl (hash: EwQvDha2F3Y5/IojLPJ6wWTAGkYS53Hpv2VXt1WL6X4=)
2: f85ANWeKKEbi4pK19Z060OvY_XI.roa (hash: qV+HKaGs2anI4Q/Iy3DcGeZYfOs1cg3GI50On0iw4rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:f6:db:f8:e1:fa:64:f5:42:16:69:29:71:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Validity
Not Before: Sep 27 15:01:48 2026 GMT
Not After : Sep 28 15:01:48 2026 GMT
Subject: CN=5bd03c9e7f2265eedfcff8df5b50c5ff5c5b5e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:d9:ad:de:26:21:5d:46:bc:f1:e9:d3:75:
6b:d1:80:00:47:53:61:60:2b:e1:04:95:23:e6:29:
9b:e1:29:7d:eb:fb:fe:d8:89:14:f1:f9:e5:7a:b6:
30:1d:7d:69:a0:fc:4d:75:25:95:be:66:c3:86:14:
d4:14:84:13:49:53:f7:c2:03:5d:3a:4a:00:6e:0a:
09:fc:3d:86:67:db:f5:0a:b5:a6:16:e8:ef:4c:0e:
ec:02:a6:4c:ee:f5:4d:7f:08:1a:dd:69:73:40:45:
3a:d1:27:35:00:8f:d0:55:a4:8a:32:40:ec:31:bc:
e1:b0:33:52:3e:93:9e:28:03:74:7e:a7:b6:43:b9:
c8:bd:bf:f0:92:b1:63:0c:da:9c:63:57:e1:4e:42:
01:c8:81:f9:f4:9a:3a:40:bb:7e:6d:9b:b2:fe:51:
6d:1d:39:52:43:9b:a9:b2:3a:5c:df:07:5a:20:84:
72:0c:a7:c3:3c:e0:24:d8:20:82:67:83:8b:10:fa:
a8:29:82:cf:9b:7a:ef:09:7f:e8:f4:d1:96:83:e3:
42:22:04:b1:d6:74:93:85:38:97:35:dd:49:72:c9:
f8:d9:7e:8b:5e:12:b9:79:5e:67:e0:f8:59:78:26:
f5:26:f0:79:86:95:cb:6d:3f:4c:bf:83:7e:a0:8b:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:3C:9E:7F:22:65:EE:DF:CF:F8:DF:5B:50:C5:FF:5C:5B:5E:40
X509v3 Authority Key Identifier:
keyid:F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:d3:fe:7b:29:d9:65:b5:9a:77:a0:80:c2:05:8d:64:38:
6c:f0:b8:2a:77:d4:2f:ce:0c:44:3f:95:66:78:e0:99:29:bf:
ce:95:de:e8:03:fd:46:e4:fc:a3:d1:ca:58:d6:52:fb:80:11:
63:44:3d:9c:bc:0d:ae:01:da:d1:9a:aa:34:20:56:54:18:78:
dd:6c:2d:16:eb:26:18:8e:2a:c2:a1:56:a1:9d:8c:49:f1:69:
64:a7:57:b9:44:4b:61:81:52:d5:06:74:0b:c5:37:c3:cf:37:
05:be:a7:ca:6d:b9:db:a0:9e:38:ab:1a:35:6c:f3:9a:82:4d:
c1:8c:e9:ff:d1:2f:a0:f0:47:e7:de:ba:67:18:2e:f4:65:b2:
31:6d:75:07:e3:0e:27:8a:5a:98:93:b3:9a:ff:a8:17:24:95:
14:5b:a8:8d:2f:29:c9:d3:14:32:88:e2:41:07:29:5d:10:24:
e3:b4:ec:ba:cb:46:e8:ee:cf:cd:4a:1e:79:dd:e8:19:19:9a:
0c:65:18:f1:64:85:2b:bb:9b:3e:69:4f:e1:f7:6b:91:0a:17:
da:cb:c1:69:e7:d6:31:10:33:a9:f5:a5:20:88:fd:3c:2a:46:
a8:76:0d:d0:be:7f:83:b6:ec:54:77:60:21:80:2c:69:d3:23:
ce:c7:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:24:35 2026 by rpki-client