Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: 5ptvnK9wo1gDYFeBWjZKUXSJVZooBilNGcD2EpG8G14=
Subject key identifier: 94:2B:EB:D2:23:49:B1:87:04:2A:AA:79:76:38:9A:F7:13:AD:BF:92
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 01A12F20CEC6BCC347CB76D4DB850F37B41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 089E
Signing time: Mon 12 Oct 2026 08:00:41 +0000
Manifest this update: Mon 12 Oct 2026 08:00:41 +0000
Manifest next update: Tue 13 Oct 2026 08:00:41 +0000
Files and hashes: 1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: TRkswXiMo48fdqNMem6eP55+L7NNy8huDwSoJRC7Ons=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:20:ce:c6:bc:c3:47:cb:76:d4:db:85:0f:37:b4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Oct 12 08:00:41 2026 GMT
Not After : Oct 13 08:00:41 2026 GMT
Subject: CN=942bebd22349b187042aaa7976389af713adbf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:1f:45:37:7d:06:5e:77:86:7a:62:a6:c9:
2a:9a:0f:58:38:13:e3:fd:6d:85:df:41:4f:bf:92:
39:30:a2:8b:82:2d:02:9d:e6:77:87:17:63:3c:56:
63:60:d5:24:0c:dc:43:2c:0e:b4:95:69:01:31:d6:
0d:d7:c6:65:3b:2d:bb:7b:a3:ca:fc:c8:86:38:e7:
ca:25:af:8a:85:7d:f6:d3:75:40:93:ad:15:ff:af:
97:0a:bf:a9:c0:23:98:d5:8a:c1:e3:29:1f:9e:69:
c3:ee:db:c0:86:4d:9e:8e:ec:6b:41:82:8c:ae:de:
40:3a:68:4c:e3:73:71:ed:91:c9:c7:3d:0b:00:96:
94:09:9c:01:16:6b:24:6c:01:80:cd:d5:61:fc:78:
19:43:44:52:05:bc:f2:ee:5a:97:83:ff:e2:e1:5f:
7f:47:67:38:11:d7:d1:d9:73:37:85:be:5a:ec:46:
c3:f6:33:20:c6:0f:b9:ca:e9:3d:47:40:c2:04:f3:
db:7d:f2:bc:8a:89:ab:64:b4:e6:a0:25:dc:13:aa:
79:8d:24:5f:87:ce:7a:1c:2e:ec:39:e8:bb:33:0f:
df:ab:0d:b9:89:64:97:73:10:26:57:60:43:a6:5e:
9e:a1:e4:8c:39:25:37:90:00:82:5e:08:70:c7:29:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2B:EB:D2:23:49:B1:87:04:2A:AA:79:76:38:9A:F7:13:AD:BF:92
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:8f:a4:9e:97:c3:d7:5d:c4:f8:85:0a:12:99:b0:83:a7:
f3:61:56:c5:3e:7a:85:9b:49:ba:ad:c4:ca:9e:0e:c7:10:53:
e0:e0:dc:6e:e5:ed:50:eb:fd:58:c1:bd:a2:c5:78:cb:ea:6a:
6d:35:f1:97:02:36:d7:57:8d:c0:5b:92:b7:b7:cf:2b:53:31:
7f:65:2e:36:0b:63:d5:ec:3a:e5:27:60:39:34:86:22:60:e3:
3f:8c:4b:9e:3d:35:c8:a7:25:c3:2f:d3:ff:f8:08:49:76:aa:
99:33:4d:de:f8:9f:5f:91:34:7f:34:85:dc:62:c0:2d:e8:aa:
5f:fc:93:55:cf:33:e9:9d:90:ec:56:0c:1f:30:dd:ce:19:76:
bf:1f:04:ee:17:a8:f7:b2:c8:4b:30:c3:80:62:93:dc:1e:13:
48:93:4b:5e:3d:df:0d:c5:05:19:75:fe:1d:c0:2d:36:df:ea:
f0:a2:c3:8a:b6:7e:56:5a:e0:97:c3:e8:dd:61:a6:34:f2:51:
ff:8c:20:b8:c5:8c:ad:26:f2:42:5f:7c:6f:22:3b:1a:4b:a9:
e0:bc:53:e2:e1:e9:29:5a:c1:d8:6b:72:00:58:3a:c9:37:7b:
27:ae:28:09:a6:89:88:a2:87:d8:3f:81:e0:fc:e8:d3:d2:9d:
63:ed:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:24:27 2026 by rpki-client