Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: nKDsRYLYWp7KRumFAyeAoEtf8C9uktJkkYxA5ttlJlI=
Subject key identifier: 2A:4D:5F:8B:69:86:5A:07:5C:07:27:0D:7D:9B:FA:1A:CA:21:05:8E
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 01A17AA8CA6DA278511C863C6594A3FED793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0F1D
Signing time: Tue 27 Oct 2026 00:00:44 +0000
Manifest this update: Tue 27 Oct 2026 00:00:44 +0000
Manifest next update: Wed 28 Oct 2026 00:00:44 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: ZSgHomFNGkuYzzvXslUbcsppdADdBpWMkVWdY8DHpeo=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:ca:6d:a2:78:51:1c:86:3c:65:94:a3:fe:d7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Oct 27 00:00:44 2026 GMT
Not After : Oct 28 00:00:44 2026 GMT
Subject: CN=2a4d5f8b69865a075c07270d7d9bfa1aca21058e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:26:34:b7:38:c6:3e:75:c1:6b:61:0a:14:d1:
89:d8:c7:ae:db:d4:c7:d8:02:af:86:e0:c8:94:70:
fc:3b:4c:38:ea:53:6c:fd:e7:0d:16:f5:52:c2:f4:
47:9d:02:e1:df:ba:e1:bd:cf:1f:69:26:28:da:8c:
56:9f:38:d8:24:c6:78:35:2f:cf:a5:41:cf:00:5e:
66:e4:21:e1:f3:d1:f7:b8:28:7e:8c:3f:07:83:cf:
d5:3c:09:28:6d:6d:25:43:5d:ce:b2:c1:6a:3a:86:
8d:82:04:06:15:47:71:c5:b1:6c:fc:5c:b2:b3:50:
45:b3:52:df:e5:82:d1:ab:28:49:31:8b:76:91:99:
3e:68:64:70:08:ee:b2:e7:3b:ca:77:db:83:92:72:
d6:74:b6:6c:de:e8:97:27:af:99:cf:87:2d:4b:1e:
69:b3:35:e7:94:ac:ef:78:d6:f8:02:50:e7:e3:8c:
ec:48:67:a7:90:b6:d3:f7:10:73:f9:87:62:d9:7b:
48:4b:b6:23:6e:81:c0:68:a5:6a:20:e6:cc:c9:6c:
09:80:d2:a0:0a:22:a0:d2:33:43:5a:15:4a:83:a0:
e4:4c:d6:ce:23:e2:5d:12:29:0d:3c:51:b4:bd:e6:
d6:a2:32:2c:87:a2:5f:8f:30:1a:4a:31:be:49:d7:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4D:5F:8B:69:86:5A:07:5C:07:27:0D:7D:9B:FA:1A:CA:21:05:8E
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:04:8e:b3:1a:b8:64:81:af:53:4a:ce:23:2d:d2:e4:85:d3:
be:68:5a:e8:40:cd:1e:f2:5b:08:f9:db:7f:5a:b9:83:04:d4:
05:d1:36:86:96:bf:47:07:b5:66:9f:09:d2:fb:0a:a5:a6:36:
d6:57:49:05:43:f0:cb:c1:86:2e:38:7f:3c:87:fb:0e:42:91:
52:a2:68:e3:ce:26:e4:6c:84:76:ef:da:57:68:6d:f7:e9:5a:
04:5c:07:71:3f:89:16:29:0e:00:66:74:98:ed:57:a0:e3:78:
ac:01:56:ab:aa:d4:c6:16:e3:04:15:5e:ac:53:09:ce:0f:9e:
fe:3f:ca:0e:10:42:d6:2b:77:37:d7:6f:d4:f3:05:ca:56:e9:
7d:09:90:e3:fb:7e:50:37:9e:d3:d7:42:5b:a3:e1:1d:d7:5c:
6d:a1:c6:c0:96:1d:45:08:f7:76:51:ed:e2:70:14:bd:5e:70:
c2:d1:53:9b:31:7b:63:15:42:ad:71:1f:73:96:c3:d5:15:eb:
2e:8c:46:1f:67:d3:46:bf:34:79:55:a5:99:19:b7:51:14:91:
ef:f6:cb:3f:6f:aa:2e:74:26:b6:1c:f5:ca:75:0c:0c:9a:67:
d7:19:4d:28:cc:f3:1c:a6:7e:3e:ed:97:5e:a6:a8:aa:16:f2:
65:1e:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:11:35 2026 by rpki-client