Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: 3FibphjU1PN++Be6LYRvWVztiwC+VSo+Iv7SDIW1qDs=
Subject key identifier: 5B:1E:02:6E:90:9C:8C:97:2F:A7:4E:35:76:3A:66:BE:04:26:95:85
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 01A1815002BD2440B182871842B1241A006B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 06BD
Signing time: Wed 28 Oct 2026 07:01:06 +0000
Manifest this update: Wed 28 Oct 2026 07:01:06 +0000
Manifest next update: Thu 29 Oct 2026 07:01:06 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: zpSEjo24IGSB7ZDRoHnvcIygJaDsEYu+u5SGxX8GzL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:02:bd:24:40:b1:82:87:18:42:b1:24:1a:00:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Oct 28 07:01:06 2026 GMT
Not After : Oct 29 07:01:06 2026 GMT
Subject: CN=5b1e026e909c8c972fa74e35763a66be04269585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:32:88:a6:80:34:e0:12:b8:40:77:9b:66:
5c:35:5e:f1:2d:c5:3a:19:b0:82:b5:c6:9b:df:b1:
ec:52:ff:73:c5:92:ef:3b:bc:65:c6:29:62:64:ca:
69:51:ed:ff:86:80:b8:14:0c:79:47:b7:b1:1e:cc:
8b:74:8e:fe:8e:ea:90:c4:b8:b9:09:09:0a:18:31:
70:fa:1d:63:10:6c:25:4f:d6:51:fc:07:97:2f:2b:
9e:2e:09:8d:db:d3:5b:00:63:22:f2:dd:b3:7c:53:
bf:7b:2c:27:13:b1:9d:33:0d:73:49:34:12:3d:22:
dd:87:9a:96:76:33:c2:ec:51:71:93:8e:1a:fe:82:
7f:ee:5b:c6:cf:f3:e0:60:80:d1:77:6a:88:75:dd:
f8:c8:35:23:df:32:2d:78:f5:26:a6:db:cf:af:be:
4a:e2:c3:88:13:b3:b0:ac:35:b6:63:08:5b:d9:5a:
0b:ae:ce:45:5e:88:10:bd:06:db:8f:1f:4e:d6:51:
f3:98:fa:d6:94:7e:9d:3f:4e:a9:2b:9a:88:12:bd:
3e:ea:60:ad:e1:a5:d9:fa:42:92:f2:2b:8d:9f:11:
0d:80:db:4b:01:21:26:2f:0a:8f:eb:7d:89:37:bd:
23:a4:ea:78:fc:b4:73:89:96:c2:03:33:82:ae:f4:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:02:6E:90:9C:8C:97:2F:A7:4E:35:76:3A:66:BE:04:26:95:85
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:aa:dc:f1:48:4a:d8:e5:57:cb:59:a1:5b:02:c7:65:64:
57:81:af:70:82:83:23:1b:f9:1a:bb:51:45:a8:49:69:12:63:
b3:34:e3:c5:08:70:0d:15:d8:15:8d:5a:30:59:98:94:34:76:
bd:2a:c0:af:6a:a7:ff:9c:ad:9e:74:c4:b8:44:c2:39:31:34:
ef:c1:00:14:71:f7:19:67:32:38:76:ed:61:a5:55:f1:8b:d3:
9d:c0:b6:55:10:db:51:c1:67:33:4a:95:da:60:7d:26:dd:5c:
f8:7e:ae:56:cf:f3:fe:59:b1:18:c4:81:71:02:98:a9:aa:25:
53:ac:75:19:c0:32:9a:87:b5:da:9d:5f:7e:82:3f:c1:4a:29:
10:eb:99:4f:30:36:f8:f9:c7:c9:3e:b2:28:a6:7e:0b:5d:0a:
89:04:1f:14:96:f1:3c:4e:23:b3:4f:ed:88:60:09:b0:1c:79:
d8:32:f7:d0:48:26:4e:c3:ce:48:97:3b:70:71:6a:9d:11:b6:
1e:39:26:e7:d0:2e:63:03:f4:71:85:e4:55:f2:81:24:29:53:
f9:8f:3c:0d:41:7a:b4:82:d3:7b:f8:3f:28:b2:60:0c:c2:12:
69:71:a0:4b:a6:5c:90:ac:12:4f:de:9b:35:f9:82:dd:32:52:
8f:f3:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:19 2026 by rpki-client