Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier: 1/qgrLsfxz0ocYDzuJo6pQdxwKjKV+DW3x+s45W3/Zo=
Subject key identifier: 49:83:C3:D9:3F:66:38:E4:6A:80:B1:B1:BD:D7:D3:7C:E5:B6:1D:8F
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial: 01A12B44BA050D38D9A8A0D11C2C597F04F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 14:01:26 +0000
Manifest this update: Sun 11 Oct 2026 14:01:26 +0000
Manifest next update: Mon 12 Oct 2026 14:01:26 +0000
Files and hashes: 1: 8A44F-HK4brDvcdx38UFaUUZrxg.roa (hash: J1l91xAYUMrUVrPKe9o7rX2U+//nR5fojqbrmgbxxMA=)
2: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: e9/M8urDvjjCas1DSKiqOgm42OYMqFlRP1SrVNiRcv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:ba:05:0d:38:d9:a8:a0:d1:1c:2c:59:7f:04:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Validity
Not Before: Oct 11 14:01:26 2026 GMT
Not After : Oct 12 14:01:26 2026 GMT
Subject: CN=4983c3d93f6638e46a80b1b1bdd7d37ce5b61d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:92:05:0b:95:83:74:d8:11:00:96:e5:72:
ab:95:af:9f:20:fe:4f:6c:a8:a3:cd:45:88:c0:e9:
30:da:d4:20:b3:b5:e1:df:50:19:3b:b4:6a:57:4d:
7c:8d:ad:a9:29:50:59:7a:8a:c3:d1:6e:b7:75:11:
25:f5:cd:6e:e7:67:f7:89:8e:17:64:4a:29:f3:78:
d7:30:a8:c5:b6:10:23:f1:ca:b0:38:67:7a:5a:4d:
41:1b:42:30:6a:98:e8:a5:17:84:ac:81:2b:ff:e1:
69:85:ff:d1:34:6e:e6:75:5f:19:85:71:10:cb:1c:
82:67:95:38:a6:ca:38:a4:00:87:8d:40:5e:de:6d:
37:9f:fe:35:b1:99:7d:64:ff:a9:66:7c:c6:69:99:
e4:29:69:a8:52:f7:0e:eb:ce:8c:f8:39:40:31:ef:
79:20:a9:40:c0:0d:75:fd:f8:40:7b:90:5e:6c:40:
bd:52:4c:fd:62:a0:f9:93:e2:a8:ad:5f:dd:e8:53:
41:18:ed:21:58:ba:41:c1:13:d4:be:57:4f:26:bb:
41:4b:24:b6:d8:4c:60:d9:f9:c0:f8:32:b2:fe:bb:
d4:45:6b:d3:ab:38:9c:f3:f5:18:c4:c6:69:4e:02:
3a:d2:98:f9:2b:c7:e9:88:3e:a5:e2:73:53:bd:4d:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:83:C3:D9:3F:66:38:E4:6A:80:B1:B1:BD:D7:D3:7C:E5:B6:1D:8F
X509v3 Authority Key Identifier:
keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e4:c3:26:9b:bb:79:f1:6f:dd:55:7f:e9:dc:96:66:de:36:
6e:6e:1a:21:4a:1e:25:37:11:9e:c8:9f:e2:0d:08:ea:c1:2f:
64:7d:5e:61:46:84:2c:d0:5c:78:bb:9f:03:3c:a6:f9:4e:a1:
a1:10:54:84:c7:4f:e0:11:91:e2:af:24:8a:e2:59:5e:c1:ae:
9d:fb:f2:14:3c:4e:a8:b2:5f:3c:d7:04:88:12:aa:5a:ec:d6:
51:c9:5d:06:f2:5c:3a:12:a3:b7:4f:44:a9:ff:90:da:66:a2:
7c:c3:f1:70:0f:01:4d:06:66:5a:ba:52:4f:a6:0d:25:72:cc:
6f:3f:36:ac:98:83:c8:ed:40:4e:21:77:23:cf:81:cc:44:99:
91:d6:fd:95:ce:62:d1:64:c2:f8:83:59:20:0d:60:ea:12:f7:
f1:a8:83:81:26:6f:95:e9:51:43:fa:a3:0c:2d:04:9f:59:4d:
11:af:09:3a:24:8d:96:ae:d5:19:c6:07:5e:e9:72:89:63:e9:
ab:c4:5c:f6:a6:2c:da:28:37:23:57:2b:5e:4f:ff:bc:e5:af:
70:01:61:5d:5a:b6:ea:03:eb:ff:8a:17:5c:3e:e8:42:e4:45:
ff:a9:d7:5a:81:32:a1:7c:90:50:ba:18:3d:67:e6:0a:e8:db:
2b:01:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:44:55 2026 by rpki-client