Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: +H0LnJXZmh193u5CUPpVZNlstgBGzXPodHh3RxV67gc=
Subject key identifier: 28:8F:CF:4F:F2:91:A7:E9:A1:3A:F7:67:60:D8:E2:6F:95:20:32:A1
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 01A13E5CCEADF698C0655FEE1E230BA8559F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 07:00:31 +0000
Manifest this update: Thu 15 Oct 2026 07:00:31 +0000
Manifest next update: Fri 16 Oct 2026 07:00:31 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: B6+YrKEphCUzLlwX5DWY1r5LpayqjZmzXpWwrkTAA6k=)
2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:ce:ad:f6:98:c0:65:5f:ee:1e:23:0b:a8:55:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Oct 15 07:00:31 2026 GMT
Not After : Oct 16 07:00:31 2026 GMT
Subject: CN=288fcf4ff291a7e9a13af76760d8e26f952032a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:71:86:23:48:28:b0:75:e6:76:7d:22:9f:
9f:27:f6:5a:09:26:0f:28:f5:61:0c:e1:28:78:a3:
9b:f8:3b:17:70:98:7d:3f:88:37:8d:3a:23:ff:24:
38:60:6c:8f:df:44:71:22:23:11:37:50:18:82:6e:
c6:14:d9:d3:84:21:f1:22:9b:a8:42:65:dc:38:2a:
f9:4d:23:3c:8f:6f:8f:62:2f:35:95:59:ba:a4:58:
b7:63:82:0c:3e:dc:f2:ad:e9:60:90:d3:11:95:03:
b2:5e:b5:9f:6a:32:fe:e7:a9:1e:19:b7:b9:1d:0e:
27:a3:7a:20:7a:e4:53:be:b1:c9:99:5f:fc:cf:98:
7a:22:ce:8a:ee:42:ad:97:b0:5a:35:3d:00:df:03:
6e:cd:4a:5a:12:3b:13:55:c3:6a:87:cf:c0:3c:04:
5a:0b:42:b0:28:33:25:a2:64:74:85:1a:6e:9c:c4:
11:9c:ad:a2:9a:11:2d:99:9a:f1:8c:ad:fa:40:8b:
bb:8c:3c:e1:6e:61:04:8f:b5:a7:23:c6:29:d2:94:
52:d3:1c:04:1d:97:98:d8:45:33:1e:8f:1d:9b:91:
01:14:d4:84:18:27:77:4d:74:d3:87:2b:45:b7:37:
6b:57:b6:9e:d7:25:c2:71:1a:68:17:0a:d2:fd:13:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8F:CF:4F:F2:91:A7:E9:A1:3A:F7:67:60:D8:E2:6F:95:20:32:A1
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:37:69:4f:c6:07:ec:1b:8d:06:0e:39:b4:bd:ee:76:2d:b2:
de:2d:bd:dd:2f:be:fd:2c:c7:09:3b:46:e3:52:c0:33:b3:f9:
01:33:62:e7:6f:3d:c0:84:79:5f:da:e0:1e:35:df:65:4e:25:
6a:9d:aa:86:f6:28:2f:95:e6:a1:73:8f:9f:53:2e:32:3c:7a:
fd:3d:6f:9b:de:29:fc:68:4b:a7:55:9e:96:7e:8b:11:2a:d6:
a9:fc:ff:a5:ec:3b:65:4d:61:97:49:82:a4:a4:ff:0a:92:31:
88:0b:e6:e3:45:90:0f:0d:34:4a:b6:f6:ac:b0:06:fd:a1:f0:
ef:19:f4:9a:cf:52:9b:41:2d:ec:97:53:fa:14:a6:9a:45:c4:
00:30:4b:f1:57:b4:77:dd:16:85:1b:94:3d:d9:c5:c6:ba:9e:
0e:27:27:54:95:83:57:0e:27:54:32:cc:c0:06:95:8f:da:fb:
a5:5f:e0:f3:65:8b:ac:74:b9:5d:29:4f:96:9d:72:80:5e:0a:
e6:a9:3e:ba:78:91:92:46:2b:08:24:d7:53:c9:5b:c1:6b:0a:
bd:26:1d:f2:0a:fe:be:d8:7b:ab:12:03:14:2a:88:a2:80:2e:
88:31:39:9b:6e:e5:6e:65:61:ee:e6:e9:22:e1:5b:b4:45:f3:
82:f9:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:23:36 2026 by rpki-client