Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: 8T8oJC4cuIVm2Qxoy/aVtTy0Lr2OUkNO5Px7ZG0ZzYA=
Subject key identifier: 36:2C:11:4C:E5:FD:F4:96:15:6C:A7:94:D2:A3:28:F7:EE:F3:B3:80
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 01A12D33238903DD82D41A0ECC3DC7049226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 1A2C
Signing time: Sun 11 Oct 2026 23:01:28 +0000
Manifest this update: Sun 11 Oct 2026 23:01:28 +0000
Manifest next update: Mon 12 Oct 2026 23:01:28 +0000
Files and hashes: 1: J2vsYiO_j7zPiKzW4JGDK-XoS3M.roa (hash: CDGBFZZXjqUOo82TFc4xaYNNSk3nq1xi7rB9+MvdQeA=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: qPjIKx5/RD/OwudsuoR8CeUXKFtjiSnyhx4NhTH/2gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:33:23:89:03:dd:82:d4:1a:0e:cc:3d:c7:04:92:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Oct 11 23:01:28 2026 GMT
Not After : Oct 12 23:01:28 2026 GMT
Subject: CN=362c114ce5fdf496156ca794d2a328f7eef3b380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:01:1e:36:7a:29:3a:5b:e3:f0:1d:f8:cc:
ba:4e:a3:1a:1f:3f:b6:3c:26:6c:1d:de:9d:0a:ec:
4f:42:09:8e:8e:fb:60:23:2a:51:1f:7d:e9:86:d1:
46:1f:26:65:59:10:a2:8c:5f:ca:04:36:85:5d:8f:
cc:8c:e2:16:52:10:d1:c6:6d:70:88:44:7f:16:d9:
21:e1:b0:55:71:ef:33:3a:4b:b5:43:eb:b8:82:3e:
35:7f:28:47:64:01:6b:f2:83:19:45:b6:13:90:b5:
a0:d8:47:ed:a1:ab:04:53:d8:a8:3a:af:b0:47:72:
67:84:55:7d:89:c5:c4:d9:1c:ae:27:ad:eb:3a:24:
d9:1c:5b:48:e1:48:57:dc:ef:7e:c6:37:26:dd:a6:
9d:61:67:ed:db:1c:79:4d:90:61:08:96:e3:b9:83:
26:85:12:6f:f3:6d:cc:3b:d2:6d:17:38:a5:06:30:
94:24:bc:26:75:14:fe:a1:e3:fd:32:40:b1:74:cb:
19:3c:4d:63:53:54:58:4a:71:40:4f:e5:49:58:32:
90:13:ba:95:18:a2:bb:40:96:44:8f:5c:f6:fe:57:
ad:9d:d7:9c:d1:bb:2f:d3:5f:3a:07:ca:d7:73:18:
7c:f1:20:a0:b1:77:1d:50:4c:8f:aa:b7:c7:48:25:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2C:11:4C:E5:FD:F4:96:15:6C:A7:94:D2:A3:28:F7:EE:F3:B3:80
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d0:d4:d2:18:6a:0e:33:9a:70:7b:c9:8d:e1:96:6c:03:f7:
2d:00:c8:3f:b9:3d:f3:40:91:e2:8e:a3:33:b0:6b:61:8f:24:
ae:a7:5f:dc:36:46:bf:ef:26:84:ea:d2:cc:04:8b:2d:59:50:
9f:07:53:41:8b:12:e2:f5:2e:64:25:be:a8:fc:28:42:e1:69:
11:97:98:1d:b4:0b:8d:4d:dc:04:2f:a1:00:42:93:c1:85:38:
a9:03:d5:8a:5f:db:cd:08:0f:fa:39:6f:d3:3b:e4:69:30:47:
c4:07:14:1a:84:18:65:6c:2f:e2:e3:0e:58:af:60:50:d5:2b:
fd:52:c7:e2:6d:85:3a:fe:96:cc:7f:eb:4b:de:56:c9:b4:f6:
0f:fe:38:7a:3a:e7:03:83:5a:40:29:8e:48:8b:1b:31:2b:5a:
10:9b:c1:01:d3:37:7e:66:c5:04:25:56:3c:67:d3:db:d3:93:
8e:25:31:30:23:53:70:9e:ff:10:a4:d4:d4:1d:dc:26:c0:ee:
bc:71:ab:71:40:63:bc:a2:67:0e:b8:c0:b5:f0:d2:76:30:6a:
8a:ab:4e:dd:ea:7a:e4:7d:3a:74:71:33:3a:10:04:03:f7:5d:
53:fe:f1:a2:2a:6e:fa:ee:8c:64:61:0d:6c:98:f1:c0:ef:79:
8f:33:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:32:59 2026 by rpki-client