Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: +ziDr9mcA7hY/pWrw1gyP/AvhFA4d2xlVT3bdpdhetc=
Subject key identifier: DD:99:11:F2:43:15:C8:05:DF:7A:DB:56:B7:EB:F7:13:DD:95:88:6B
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 01A132592F26030EA0707AF80F19AED822EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1AA0
Signing time: Mon 12 Oct 2026 23:01:07 +0000
Manifest this update: Mon 12 Oct 2026 23:01:07 +0000
Manifest next update: Tue 13 Oct 2026 23:01:07 +0000
Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: /leCThuaI7VV2HkqRQ9b5bqiJF7MgNCSFYV2GzwRAKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:2f:26:03:0e:a0:70:7a:f8:0f:19:ae:d8:22:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Oct 12 23:01:07 2026 GMT
Not After : Oct 13 23:01:07 2026 GMT
Subject: CN=dd9911f24315c805df7adb56b7ebf713dd95886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:46:55:50:83:d0:e7:de:02:d2:6b:63:d6:
34:d2:e2:fa:23:23:56:dc:41:9e:a0:14:20:d3:8a:
81:03:23:7a:f0:57:55:65:58:68:50:d9:6f:3f:b7:
fc:e3:37:89:e9:0d:b1:30:0d:7b:fc:a1:57:09:d1:
f6:61:9f:dc:37:f0:dc:49:c0:ac:1c:8a:80:ab:31:
04:00:54:e8:d8:2b:46:92:da:ac:dc:fc:0d:4f:33:
1a:87:d7:cc:75:d2:fc:03:4f:31:46:32:44:5f:cf:
61:00:08:d7:2f:7c:0d:dc:fd:9d:35:0a:85:e2:7d:
23:2c:fe:bd:54:d1:78:6e:1c:b5:8a:e8:18:14:18:
3f:31:96:f4:1b:87:48:40:78:40:39:93:93:62:11:
f9:4b:43:34:ee:50:50:d9:d8:e6:1d:18:28:a5:24:
16:06:e6:8a:94:9d:02:07:a4:c9:93:ca:e9:a6:42:
4f:2e:9c:ec:60:4e:61:91:45:db:46:52:29:01:95:
6d:4f:4e:ea:c7:d3:93:f0:2b:37:d0:f8:ea:55:4f:
93:b3:cd:89:65:49:9e:ba:5c:6a:f5:30:38:ab:79:
2f:62:60:58:3b:cc:22:3d:d4:3f:a5:f1:c2:22:80:
15:17:d6:d7:5c:d5:58:41:d0:c7:ab:39:f2:5b:9e:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:11:F2:43:15:C8:05:DF:7A:DB:56:B7:EB:F7:13:DD:95:88:6B
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d6:0e:f9:0e:d5:87:10:d1:23:5e:a0:d1:3b:a6:83:e1:7f:
64:e5:e4:20:5d:4c:11:07:8f:0d:db:3d:e5:c9:b4:30:9b:63:
2e:02:5e:4f:bb:81:f2:ea:01:24:6d:5b:2e:a6:c5:5e:2b:d9:
13:22:c0:70:59:3b:86:88:76:8d:4d:ca:26:78:7c:55:10:dd:
d6:7a:4b:22:0b:15:c3:84:4e:96:b3:c6:1a:b7:05:2a:78:46:
2d:b7:d6:bf:f0:93:0c:73:6c:19:c4:6c:a4:be:03:ec:db:06:
77:b1:58:e2:65:dd:95:2f:b8:27:e6:2a:74:3d:7c:8a:84:29:
63:b5:e2:83:90:fe:1b:64:b7:9b:6e:09:bc:cf:39:44:9e:c1:
35:23:d3:cc:c8:4c:a4:af:d0:71:7f:b0:ac:52:f7:38:2c:bd:
50:f6:e6:43:45:33:be:cb:4d:63:fc:04:5d:f0:56:0a:32:2a:
2a:b5:98:5e:37:33:f7:d8:7f:17:49:29:16:e2:9f:4e:a2:aa:
ba:60:7c:e2:0c:b7:3b:60:82:aa:72:17:68:53:25:78:4f:41:
6a:7f:67:19:da:93:28:74:17:82:17:3a:23:d4:d3:7b:dd:81:
14:30:1f:ae:cd:21:e5:b9:1b:a7:09:04:c0:cd:53:d9:eb:2e:
cd:3b:bd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:26:55 2026 by rpki-client