Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: hdW/3kEebsMYznRYuM97/+0xllsq4mRLdjsdwvHhbtA=
Subject key identifier: 7E:52:25:A8:C7:21:B9:5D:48:C5:3C:83:31:D1:BC:3D:0D:C6:1C:0E
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 01A153659280238C6499A2020A3AE7369768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 09:02:07 +0000
Manifest this update: Mon 19 Oct 2026 09:02:07 +0000
Manifest next update: Tue 20 Oct 2026 09:02:07 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: qOFEc2N6GbP3tiJkkmB7eJFjnF9pYkP4DzAO2502UCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:92:80:23:8c:64:99:a2:02:0a:3a:e7:36:97:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Oct 19 09:02:07 2026 GMT
Not After : Oct 20 09:02:07 2026 GMT
Subject: CN=7e5225a8c721b95d48c53c8331d1bc3d0dc61c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e5:ff:2c:0f:a4:a9:8a:47:58:fd:a5:b1:cb:
2b:e3:58:7c:52:88:b3:ab:f2:03:80:7a:89:03:6f:
5d:fa:6c:5d:aa:a1:bb:2f:84:f6:f4:3b:a2:12:a1:
e5:21:54:0d:6b:d2:e1:fb:ec:c9:55:67:64:59:62:
3d:7b:48:8b:2a:00:28:21:f6:e9:8e:29:fe:00:59:
cc:c3:5a:ab:aa:ea:bd:9a:08:f7:e4:31:16:a5:9d:
15:68:21:36:cb:f5:c9:65:18:27:89:05:aa:c1:5d:
7b:83:f9:f8:ed:6e:63:bb:fe:02:3b:e4:7e:d0:f7:
07:5a:7d:0e:c2:26:32:18:d0:b9:52:03:4b:96:b1:
a9:8a:34:be:df:7a:22:df:02:b5:04:94:ab:ec:54:
25:60:b8:fb:a1:1b:cc:fb:b0:39:35:2e:82:dc:79:
13:6e:87:13:26:3c:00:74:0c:c8:e3:0c:6d:2b:b2:
78:01:ac:46:fa:ee:08:8b:73:aa:48:f1:b3:38:8a:
37:f7:17:86:14:d5:90:e6:c8:44:ed:21:3c:48:0f:
65:0c:0a:93:46:02:2e:76:7a:ae:0c:26:43:34:30:
f2:b5:25:1a:b9:e2:45:4a:8c:da:63:10:91:e5:95:
21:c4:f7:c7:11:b7:b6:2c:bf:7d:14:7b:2b:59:c2:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:25:A8:C7:21:B9:5D:48:C5:3C:83:31:D1:BC:3D:0D:C6:1C:0E
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7b:8c:45:ae:cf:de:4a:c7:be:4f:86:79:ac:82:e7:0c:e1:
14:bb:49:83:58:f9:f2:e1:b8:f1:0a:17:23:76:6d:13:6c:31:
89:c3:5c:11:a9:d4:7f:88:30:61:5f:55:a4:0d:3a:1f:6e:f8:
4a:33:6b:5d:5c:d3:66:44:bf:96:7e:aa:0d:70:bc:2b:ec:8f:
af:aa:55:66:a0:40:ac:2a:7d:46:9b:31:70:85:b2:e2:01:9d:
a1:51:0a:fe:69:bc:32:9d:d4:b6:a0:a6:34:67:f0:a9:05:5a:
83:a0:52:89:8b:30:18:d6:ab:96:84:ac:0c:d3:83:60:1a:eb:
2b:ea:f8:0a:7b:8f:27:be:90:e9:3b:f7:c4:48:44:99:c3:4b:
e3:56:17:95:1b:be:a0:6d:d5:18:0f:c3:7c:10:97:7f:a3:6a:
1e:7c:bb:2d:c6:ae:3a:84:2d:40:6b:3a:18:d2:fb:96:fe:69:
4a:b2:85:b7:12:5c:f1:c5:4f:ad:a6:dd:a6:aa:a6:67:c6:3d:
a2:cd:c7:ed:72:95:18:54:df:96:c2:f6:31:33:e0:78:64:96:
5c:c6:5f:f8:8f:06:94:cf:46:1c:cf:8f:e4:df:71:4d:63:99:
4f:eb:b2:4f:24:d0:c2:16:18:b4:70:5a:97:9e:a1:5e:9e:36:
c2:f8:47:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:37:07 2026 by rpki-client