Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: EgTf0+nnM1SRpoPaJd7kOYuBcF8/GJQJPhV8ecJd0aM=
Subject key identifier: 54:D0:DD:E2:B7:9B:6E:09:F7:33:7A:98:5D:43:43:77:A5:27:2D:2F
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 01A13E26D36D0C806AAA2DE043CF2AA5AE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 06:01:33 +0000
Manifest this update: Thu 15 Oct 2026 06:01:33 +0000
Manifest next update: Fri 16 Oct 2026 06:01:33 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: BH6wbJUFj66Fg4qIxibsu7kIzaSdUwWk4Df1FOSZN3M=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:d3:6d:0c:80:6a:aa:2d:e0:43:cf:2a:a5:ae:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Oct 15 06:01:33 2026 GMT
Not After : Oct 16 06:01:33 2026 GMT
Subject: CN=54d0dde2b79b6e09f7337a985d434377a5272d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:1a:f8:7d:6a:28:90:00:92:ce:94:6f:63:
6f:3d:44:a2:18:80:76:b9:1c:82:9a:1f:a8:e3:0d:
e8:af:3e:fe:a1:6c:82:b4:6d:1a:53:79:25:29:25:
58:c8:07:1e:67:a2:5d:c0:20:32:4d:8c:63:39:29:
a1:97:f5:75:81:06:95:e0:56:7b:91:69:49:79:73:
fd:0b:f5:61:5e:b4:47:25:15:c8:0a:62:af:2b:e3:
90:9b:96:f7:64:0f:c4:4d:9b:37:98:62:43:3a:af:
6d:37:3a:e5:bd:b5:1d:65:07:09:71:11:55:7a:73:
04:91:8e:e0:8d:d4:04:32:02:bc:a4:f5:88:26:16:
f9:13:b5:b7:29:d1:48:3a:5a:68:a6:66:40:ec:32:
f0:bc:d7:03:aa:8c:c9:23:08:9f:89:ed:d6:01:e5:
80:11:16:35:84:9f:2b:5b:33:35:6c:78:3b:aa:64:
6b:3f:48:c4:8c:16:ac:e1:bb:98:f1:59:30:4a:a4:
e7:d4:d3:0e:f8:de:67:28:89:44:e7:4d:ba:2f:38:
22:a0:d6:71:55:3f:47:37:3b:ea:b2:84:64:ef:64:
c7:88:f7:6d:68:be:60:88:7c:71:d4:cc:8c:80:4b:
9a:6b:5c:f0:e4:20:e5:83:6e:92:2e:62:b0:f9:77:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D0:DD:E2:B7:9B:6E:09:F7:33:7A:98:5D:43:43:77:A5:27:2D:2F
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:d4:76:0d:b6:fc:c9:15:14:ba:70:cd:0e:a2:2b:4a:32:
f7:da:ab:1c:23:21:1c:37:88:60:5f:95:f3:78:ba:94:94:75:
5b:be:a9:4f:50:a7:ca:49:60:0c:8b:0e:45:50:68:18:21:14:
e2:b9:a4:18:19:3f:cf:8e:c8:f6:f5:00:05:fb:bc:be:5b:2c:
ec:71:7f:b7:4b:08:62:96:ed:ba:63:42:4a:b2:09:de:3b:4e:
94:53:3e:ed:e7:af:46:7b:97:28:97:c7:79:0f:83:da:2e:ce:
85:6d:d5:8a:e4:24:d9:4e:42:d0:8d:ad:62:44:6d:cc:50:a2:
90:24:3f:ba:5b:5b:c1:62:9f:5e:94:b4:a8:da:39:c2:3d:fa:
95:79:1b:8f:fd:ba:12:54:67:8d:3d:e0:f8:c7:6a:18:a1:75:
38:fd:8d:90:5c:54:18:49:90:84:6c:6a:53:31:50:af:15:f5:
c5:3a:f7:a0:84:ec:a4:9d:d8:1f:cf:5a:13:72:c2:df:08:1e:
a4:9a:af:6f:d9:59:0a:78:52:4b:2a:b7:f3:0c:1f:8f:88:ed:
c1:80:6d:71:84:c6:88:f9:fe:52:22:b1:f7:44:4e:95:4a:d2:
8b:58:b3:19:ca:80:0f:e0:c0:57:6d:bf:a6:33:4b:3c:a3:7f:
2d:31:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:41 2026 by rpki-client