Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier: sRxC2icwup+Ee6CUa/5VNSG9SGyUOftfpWILjHvOKB4=
Subject key identifier: CE:82:B6:6A:AD:86:73:AF:4C:F5:E1:3F:A2:74:F0:EA:90:A9:A7:BC
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 01A17B4D4E4C96053132440C96ADD18442F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number: 0532
Signing time: Tue 27 Oct 2026 03:00:26 +0000
Manifest this update: Tue 27 Oct 2026 03:00:26 +0000
Manifest next update: Wed 28 Oct 2026 03:00:26 +0000
Files and hashes: 1: 3W0r7_vH4Ttz-bP11_crp0stnDs.roa (hash: n+/Ciq7cGqaPplZE7FEUrLiSmC9wkdkZUvzoaApzzuc=)
2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: plSTf1/wpSSgy4GhYAFCwfd1qEKs3c2EvC5LdLqixx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:4e:4c:96:05:31:32:44:0c:96:ad:d1:84:42:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Oct 27 03:00:26 2026 GMT
Not After : Oct 28 03:00:26 2026 GMT
Subject: CN=ce82b66aad8673af4cf5e13fa274f0ea90a9a7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:9e:9e:ef:52:5d:a8:f8:33:c5:60:5e:42:
3f:8c:14:89:f5:84:53:b2:36:f0:68:fc:e6:f0:8a:
b3:f6:53:69:92:48:ac:aa:18:d5:85:92:7f:6d:4d:
64:54:2a:a8:b4:37:3f:e7:9d:97:3d:38:0c:68:09:
51:53:aa:13:24:9a:75:f8:fb:4e:67:6a:a4:86:7f:
90:8f:57:0f:f4:1c:b1:2e:0c:81:c5:b9:61:68:76:
a3:80:28:26:67:60:d6:c7:71:cd:60:66:21:85:9f:
70:11:bd:48:7f:76:11:44:9b:db:42:4a:97:75:b8:
1f:61:47:fb:20:a8:6a:9a:3e:91:83:d0:c4:b4:36:
c9:69:bd:03:4d:c2:76:73:9f:4b:d5:0f:d6:45:54:
1f:63:65:1f:02:f1:6d:84:72:a0:36:e0:ab:94:7c:
c5:74:cd:ff:6a:53:c2:a5:6c:d3:97:ff:09:25:1d:
83:80:06:18:68:e3:1b:cc:88:eb:87:d4:f4:21:ee:
77:00:c1:9c:78:0c:ca:86:10:b3:7b:ec:3d:69:81:
b3:66:7c:bd:80:9f:f6:a8:7e:31:d9:71:20:70:6e:
0a:e3:67:32:25:7d:d8:dd:6f:00:f6:49:fb:27:94:
69:09:b8:70:2a:17:d0:de:05:c7:57:29:dd:51:21:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:B6:6A:AD:86:73:AF:4C:F5:E1:3F:A2:74:F0:EA:90:A9:A7:BC
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:85:02:26:0b:26:c9:d7:9d:17:00:66:c6:bd:af:ae:ca:11:
be:38:69:5b:9d:9c:b5:48:0a:dd:d6:e7:aa:b5:cc:89:bc:b6:
6d:70:be:b9:7a:04:92:bb:d7:d5:e5:17:15:70:2d:52:c8:df:
49:d6:7e:1a:e4:06:9a:1d:e5:7f:b5:7d:ed:88:36:16:1a:48:
7c:e6:97:c5:cf:32:dc:d9:4d:03:42:66:03:76:27:9d:15:d4:
de:21:8f:4c:5b:e8:59:c7:ee:94:f2:85:6c:5e:d4:a1:f3:6f:
97:04:17:ac:58:3b:38:a9:72:5d:11:1c:ea:31:52:f8:92:6b:
2c:ba:e2:69:fb:08:94:bd:0d:b6:48:f5:8d:d1:71:ec:bb:74:
2a:04:95:60:56:9b:99:f2:4d:09:fd:d3:da:ee:34:65:27:4a:
e7:1e:0d:b5:d4:a4:ae:8f:e4:fa:f9:d3:dd:01:6f:b6:bd:68:
ea:85:31:8b:47:f2:93:ed:7a:a0:3f:41:49:75:dd:77:3a:fe:
1a:38:21:b3:25:35:a4:c9:cd:16:fd:04:2f:4d:1a:7d:4b:9b:
ed:3c:f3:95:30:fa:d5:38:f6:80:cb:70:e6:dc:9c:10:fa:a3:
a0:da:36:f6:a0:4c:44:58:d7:26:42:0c:7d:6a:f3:33:03:84:
1e:73:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:56 2026 by rpki-client