Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: af6uWOKjImpvHUHtnzWFr0nIIFfO2zyQNcMT1ty9cHc=
Subject key identifier: A9:12:5D:99:70:26:E7:BF:F5:A7:E1:F7:B6:68:6D:68:8E:D8:1E:43
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 01A160E8EBF0F935F00794AB360E517EA4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 11C9
Signing time: Thu 22 Oct 2026 00:00:39 +0000
Manifest this update: Thu 22 Oct 2026 00:00:39 +0000
Manifest next update: Fri 23 Oct 2026 00:00:39 +0000
Files and hashes: 1: 81Tn4UOT-STQR0S2LKi1Fkeb39A.roa (hash: H9vhMh1yOq8AyMCdWdyT5N1VPH5W7KOnfH94i52sBpM=)
2: cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa (hash: Tjz6f7FaWUDdbc5zyvKrfzNZTUHB4msYRQvxnsJef0Q=)
3: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: ZTXRTuqxvySJdjIrUPtkw7k1IEEyWCp7Kk+Ajs2DkpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e8:eb:f0:f9:35:f0:07:94:ab:36:0e:51:7e:a4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Oct 22 00:00:39 2026 GMT
Not After : Oct 23 00:00:39 2026 GMT
Subject: CN=a9125d997026e7bff5a7e1f7b6686d688ed81e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:0e:10:5e:a4:f1:32:a1:c5:84:2d:29:fd:
db:ee:04:bd:15:91:ad:5e:40:c4:ef:54:a6:2f:58:
d4:20:a2:a7:e5:c1:0a:4b:8e:a9:4d:81:20:53:d8:
0e:55:30:87:4f:50:f0:f7:de:7a:2d:8b:82:4c:b9:
f8:86:e2:75:04:6a:8d:bb:cb:f0:dd:82:2f:91:69:
db:13:b2:0e:b2:ee:0d:62:33:53:6a:95:96:6e:e8:
95:1b:3d:01:ea:91:20:f0:87:05:45:6f:6e:56:64:
ea:70:50:1f:dd:b4:7d:08:a3:55:7c:65:77:af:50:
b0:f2:73:a4:28:d9:df:b7:2e:42:92:e2:04:42:fc:
bb:2d:86:b4:8f:3e:d2:2d:a3:87:18:a1:7e:21:f2:
71:65:f7:b2:a4:bf:12:2c:61:c2:9f:ff:7c:41:55:
f2:61:af:6e:6a:b5:c2:7e:a6:43:9c:5a:08:ab:78:
e9:09:02:4f:65:b1:91:f8:53:74:e4:ba:4b:0c:77:
4e:4d:dc:76:ff:aa:ed:91:85:9f:7f:05:e3:c0:3a:
3c:28:d8:a5:03:de:6f:46:48:1f:fe:25:df:18:67:
67:38:1e:4a:f4:2c:00:60:6c:86:e3:73:d1:88:6b:
fc:28:a3:73:d3:c8:06:e0:7b:77:31:0e:9b:9b:49:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:5D:99:70:26:E7:BF:F5:A7:E1:F7:B6:68:6D:68:8E:D8:1E:43
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e3:35:d7:16:26:ca:28:b2:19:fd:ea:fd:9d:c2:a1:a6:83:
a9:c7:8d:29:7a:11:a2:1b:c2:9e:20:8b:b9:9c:73:70:f8:c4:
b7:34:3d:77:ab:fe:9c:88:46:90:51:78:c0:4e:71:18:f3:55:
ee:5a:2e:cb:c5:34:d5:60:35:44:6e:e8:7e:a5:fd:2b:1c:a2:
6b:50:ec:55:62:95:0b:2b:0c:32:51:42:6f:a0:12:bf:10:37:
c3:db:3b:2f:0b:a0:32:ce:90:f8:28:05:27:dd:b0:f1:02:a1:
9e:ee:08:8d:7e:50:56:28:2f:da:97:e9:d8:7d:6a:7a:19:bf:
03:ba:6d:2d:a5:0f:e7:2b:6c:c1:4a:e6:f3:f3:09:e6:89:2a:
bc:16:fe:71:2b:a9:cb:ad:0e:fc:03:32:67:56:04:35:e3:4a:
75:3d:6a:9e:d7:5b:77:70:2b:39:cd:ae:79:c1:2a:12:fc:20:
60:02:01:f2:c8:3e:0c:e3:7f:be:c9:ed:d7:d6:22:5b:d3:c3:
bc:a0:8f:f3:42:e6:64:04:71:27:8a:a3:de:a0:a0:49:15:18:
2e:90:e7:ff:7f:c9:92:03:c1:70:5b:97:be:4f:75:e3:30:d6:
41:28:51:d3:15:85:fc:0b:c5:9c:64:79:a8:dd:48:e3:b7:03:
5d:53:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 07:36:59 2026 by rpki-client