Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: PgeVQjGRTgydon958B6Z0j1N5mLT8JaO0Chuk/QpNbw=
Subject key identifier: B3:93:97:03:F3:A7:00:76:0E:16:B1:D0:8B:D6:B9:40:30:EF:C3:9D
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 01A14D2B6949BAA6C3B3B431C3708DCBD8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 0CAC
Signing time: Sun 18 Oct 2026 04:00:52 +0000
Manifest this update: Sun 18 Oct 2026 04:00:52 +0000
Manifest next update: Mon 19 Oct 2026 04:00:52 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: oqJ9qXvGvIPhWZbc1V87t5P+uFeXIiHCUH59ShkIoRU=)
2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:2b:69:49:ba:a6:c3:b3:b4:31:c3:70:8d:cb:d8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Oct 18 04:00:52 2026 GMT
Not After : Oct 19 04:00:52 2026 GMT
Subject: CN=b3939703f3a700760e16b1d08bd6b94030efc39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:94:82:53:db:a3:8d:98:f7:6c:f5:5f:a4:
d7:e9:87:e1:8b:da:bc:10:da:bb:92:b2:88:72:05:
51:3d:56:51:cf:48:72:98:6c:af:2f:23:5e:f5:a5:
32:e7:02:43:cd:c0:be:a7:dc:39:36:6e:e1:63:f7:
f5:42:d9:85:be:70:63:b4:29:f1:c8:3a:05:32:5b:
b5:30:01:b9:9c:56:ea:6a:c3:13:a2:db:8c:34:aa:
d7:ec:eb:65:03:81:44:54:1c:db:1f:da:a9:bf:cb:
f8:60:af:97:02:91:53:40:39:fe:18:9e:f7:1a:c3:
aa:59:67:f0:46:e2:a2:b9:29:97:30:a3:de:95:26:
08:e1:fa:47:22:b6:ce:45:da:3b:f2:1a:5e:db:30:
1b:ac:c7:f3:2b:72:17:52:7b:40:4e:e1:82:fc:11:
f3:fe:f8:3f:cb:54:7b:d3:92:59:c4:77:ae:62:a2:
06:68:aa:e4:12:52:73:da:58:68:53:a6:8c:c5:3a:
49:ed:b3:ae:36:1e:3c:40:bc:26:50:94:a7:17:cf:
f2:84:86:a8:b7:30:f4:3d:6a:fe:8b:c3:85:63:ac:
5f:67:d0:a7:8c:6b:31:4d:2f:f4:d8:45:fe:59:67:
93:1f:bf:46:d5:e0:ff:4b:79:90:93:e7:09:26:79:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:97:03:F3:A7:00:76:0E:16:B1:D0:8B:D6:B9:40:30:EF:C3:9D
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fd:da:f8:c7:38:3c:26:e1:d1:f4:a2:3f:29:30:23:32:c6:
7a:22:14:83:c5:8b:05:3a:dc:7f:12:5e:0b:45:34:bc:fa:62:
ae:1d:a9:6e:c3:8d:d7:bb:e5:81:ef:80:00:9c:03:95:6b:f3:
a4:91:f2:dc:da:5a:4c:25:f8:cd:21:5c:7e:0d:82:db:ba:44:
d5:cc:96:aa:79:94:c0:a6:c6:89:ed:56:69:09:6e:2d:68:0f:
1a:3c:b3:c4:d1:1e:f4:cc:a7:20:2c:57:b8:9a:a1:ba:69:33:
12:2e:07:68:a9:53:34:a0:d3:f7:59:55:46:80:cc:00:27:32:
c6:f4:de:74:bc:da:b6:11:4f:b9:c9:c2:d3:2c:17:54:8d:6f:
71:c9:b2:d9:68:32:2a:84:fa:97:d9:79:8d:2d:e0:6c:32:bd:
34:58:6b:5f:e8:93:d9:2e:c0:1a:a5:ee:ca:66:26:63:ce:21:
48:9e:2f:c4:c8:9b:3d:a2:ef:7d:b7:2b:7c:e6:e0:83:89:e9:
70:e8:b0:26:00:97:b0:a5:a5:2f:f2:4d:7f:70:3f:68:d6:9f:
c3:b7:4b:eb:8e:8e:16:1d:22:30:56:82:8f:dc:cd:7f:a2:a4:
e8:80:8a:74:50:48:96:71:94:8d:d3:1a:37:4f:50:ea:7b:80:
f9:d3:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:27 2026 by rpki-client