Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: k+vWtjFWyiONVceGkCN0dnVQIdQzKarJRaio4UNPE4A=
Subject key identifier: 48:C4:E9:4D:9B:A3:EE:4F:AA:FB:4A:11:B0:54:5D:C0:9B:1E:90:78
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 01A0D9F140FC7E55FC9E2AD6BFB99DABD077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 1A1A
Signing time: Fri 25 Sep 2026 19:01:01 +0000
Manifest this update: Fri 25 Sep 2026 19:01:01 +0000
Manifest next update: Sat 26 Sep 2026 19:01:01 +0000
Files and hashes: 1: 6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa (hash: 7Tyj4JshIbYP3V9AawiQ2X+dktavULDW7Khh9vcmSus=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: 0NFWgWVfAbMIxpNIRJa7XcQvqEpZoXYwO9PhxRahJ/4=)
3: zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa (hash: GqW80/tMAbtkCDtDVmCwRVj7WYcfpvr4HUTuVqPBK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:40:fc:7e:55:fc:9e:2a:d6:bf:b9:9d:ab:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Sep 25 19:01:01 2026 GMT
Not After : Sep 26 19:01:01 2026 GMT
Subject: CN=48c4e94d9ba3ee4faafb4a11b0545dc09b1e9078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:b7:ef:24:aa:23:72:e8:e8:08:df:71:a1:
e7:56:63:d1:2c:07:4c:dc:04:6b:a8:d1:63:e2:e6:
8b:66:62:aa:fa:91:a5:50:4f:d6:85:55:b8:de:ab:
85:9a:e3:19:a0:62:25:9f:da:1d:e6:7d:5c:e1:dd:
23:94:6d:59:29:48:ae:94:63:27:58:4e:75:f5:47:
d0:b3:ef:0f:22:c9:c7:d4:35:6e:f8:89:53:69:26:
a6:92:6e:4f:bf:79:50:40:81:91:02:e9:38:c2:58:
92:6c:0c:ca:b6:a7:82:e9:df:52:4a:0b:e1:0e:2f:
de:e9:0e:bf:78:a0:ff:65:33:ce:50:97:d8:d7:34:
b8:2c:0a:2d:84:16:42:e4:27:26:71:a3:3c:dd:b8:
cf:83:cd:0f:7d:10:7a:93:c0:3e:25:44:fe:94:2a:
dd:8f:71:8f:df:75:8f:e7:dd:f0:30:5c:f4:1a:fc:
ed:80:45:80:04:61:04:5b:ae:6c:dc:3f:9c:9c:61:
06:cb:a6:91:b2:7d:70:77:b6:99:ec:1c:4d:a1:00:
ba:b9:ab:20:ec:09:a0:f8:78:22:f6:fb:57:ea:39:
6b:ef:ca:f0:16:7c:03:65:ec:c9:d0:dc:73:cd:b6:
ee:23:bb:ee:7d:40:94:d6:32:3f:20:b4:2b:1f:b9:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:E9:4D:9B:A3:EE:4F:AA:FB:4A:11:B0:54:5D:C0:9B:1E:90:78
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f8:29:3f:8e:0b:96:40:1a:46:b4:72:c5:bb:b9:63:90:2c:
07:a1:11:68:a0:4d:2a:4f:70:96:66:8e:d7:f4:dd:9d:c7:09:
b7:e2:c9:72:8f:68:32:e8:10:33:a5:67:f0:79:ca:a3:4b:26:
ed:be:f3:81:30:d3:47:d5:a4:2e:6c:7b:d2:9a:3f:87:cb:95:
4c:9e:f0:3c:fa:24:b6:43:ed:5b:48:26:ee:26:4f:02:87:b3:
68:fe:8e:97:76:00:51:41:4b:70:96:69:d9:5b:aa:bb:3b:54:
80:d8:6c:2a:c4:b2:30:ae:c8:08:83:dd:50:3c:d7:13:b5:86:
27:62:b4:20:40:a0:1f:e0:5c:51:e8:24:d3:a5:d3:ac:dc:4e:
71:df:52:b3:a9:2d:d5:e0:0b:20:08:bd:8d:b3:83:ed:19:72:
9a:05:75:59:73:54:a9:2a:88:24:87:15:be:a3:2e:d0:3f:08:
cf:99:91:b9:af:66:63:29:42:bf:5e:d9:69:d0:41:df:78:e6:
e3:67:16:a8:4a:b7:09:57:8a:65:bc:61:3e:98:1c:09:14:35:
af:36:73:13:44:ec:da:65:72:56:62:b4:d5:d8:47:04:6b:91:
8d:df:be:a7:c0:aa:d9:64:a0:82:f1:75:3d:73:21:7c:b2:7a:
82:d0:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:59:06 2026 by rpki-client