Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier: CgQluQmbxM5I/HJZroKSFnLdVQT+rNbuPOj0XW1QI4k=
Subject key identifier: 9D:AF:22:C0:F9:D4:83:7C:67:75:BA:B1:61:8B:AF:CF:B8:3D:F3:1D
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 01A11C07C4AEF48A72A900E503CC88997D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number: 0464
Signing time: Thu 08 Oct 2026 15:00:33 +0000
Manifest this update: Thu 08 Oct 2026 15:00:33 +0000
Manifest next update: Fri 09 Oct 2026 15:00:33 +0000
Files and hashes: 1: Zv79TTxsf83wSa-br66v_0Kz3P0.roa (hash: PshdlsPP60SM0Q8DKrvKNK5rgHz5shKnndSXnKZ2nf8=)
2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: hCYpRjgPr7qtx1eMrCtLzcgLpD038YHwIsRY7lsUbD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:07:c4:ae:f4:8a:72:a9:00:e5:03:cc:88:99:7d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Oct 8 15:00:33 2026 GMT
Not After : Oct 9 15:00:33 2026 GMT
Subject: CN=9daf22c0f9d4837c6775bab1618bafcfb83df31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:97:cd:0c:af:b0:79:75:c1:e3:5b:a7:ba:
35:c2:c7:e6:1a:d8:35:6c:a2:97:46:83:3f:34:1a:
e9:ba:4e:fe:f9:5f:55:d1:4b:03:f7:30:2d:fb:66:
ac:e8:69:ea:90:ae:da:14:da:9f:dc:8c:e5:56:2c:
85:e5:5e:b9:e7:22:6d:c7:42:4d:da:b3:d1:0c:55:
7f:00:95:36:a1:50:43:50:d2:a0:55:df:f4:16:39:
8f:ab:09:59:63:fb:3c:19:6a:66:12:77:c3:fb:ba:
ac:81:75:3b:a7:a3:21:59:6a:a0:98:51:fc:15:50:
f7:95:e0:86:24:2b:d8:77:7e:9a:27:7b:2e:14:7e:
33:b5:d2:8b:a6:e1:df:af:e3:1c:59:7b:3a:de:72:
ad:4c:72:98:e2:00:4b:1f:9f:5f:12:c5:e1:4a:99:
ea:a4:5d:11:1d:7e:d5:02:a9:ba:99:85:ea:f2:ad:
52:33:6b:ef:71:21:2c:e6:b7:f3:2b:f6:c3:a1:4e:
01:f1:08:65:2e:94:b8:c1:67:b6:ca:3a:2b:2e:6e:
db:f5:a8:f0:92:d3:74:1d:35:5b:4a:41:66:c4:b2:
49:ba:85:70:53:21:01:41:e5:e4:08:28:3d:14:89:
89:b3:11:cb:cb:b3:e1:50:c8:c4:eb:7c:c1:36:f1:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:22:C0:F9:D4:83:7C:67:75:BA:B1:61:8B:AF:CF:B8:3D:F3:1D
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:44:00:ee:ca:21:5e:34:5f:a7:e8:40:87:9a:37:79:27:e0:
26:76:af:29:be:7c:f3:e6:c2:dd:5b:0d:9d:95:98:e9:cf:30:
22:d5:33:0f:eb:ea:e5:23:12:7e:16:47:b7:42:c3:fe:f7:0a:
7d:96:7d:bd:30:bb:41:27:9c:16:f9:65:85:a7:e6:e3:58:f3:
7f:8b:7b:fa:f7:b0:7e:2a:7b:0b:dc:d4:11:c6:21:c3:37:08:
67:3f:18:7b:02:d3:50:05:0a:79:f1:0e:53:0f:6a:59:e0:62:
80:db:08:42:21:a6:92:b4:af:e5:04:7c:86:b4:27:83:d6:87:
b4:b1:d3:0e:6c:60:72:07:c2:4d:68:27:27:99:20:2f:f8:f9:
b2:94:2f:c2:6b:f8:73:66:bd:04:79:c0:cb:39:d5:67:a6:a9:
12:89:53:df:3f:7a:77:70:b0:e5:4a:cb:b7:0c:be:07:52:09:
f9:63:11:37:ac:dd:87:90:78:34:f0:d9:a4:b4:13:85:f0:a3:
c2:72:f8:f1:70:5f:08:db:d2:e5:34:2d:df:92:b2:5f:f9:96:
dd:c1:17:81:5d:86:58:f8:c9:bc:3f:3e:13:b7:e1:70:b0:2d:
66:d8:0b:f3:cf:d3:df:73:9b:60:bd:07:71:5b:dd:e9:21:f3:
c4:27:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:12:36 2026 by rpki-client