
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
File: _8P1ykeS2U0ao2616jqhtAQ80BQ.mft (raw, json)
Hash identifier: h/AjHakHvRhyKWhBWo2h4iFm1YX/wLNde9A8Lgy+0lU=
Subject key identifier: 98:F1:76:8D:12:0A:3D:85:CE:6F:FE:BE:12:C6:0A:12:EF:56:FF:37
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 01A17D736237FB5BA4A90222BFFAC1DF4806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
Manifest number: 0361
Signing time: Tue 27 Oct 2026 13:01:16 +0000
Manifest this update: Tue 27 Oct 2026 13:01:16 +0000
Manifest next update: Wed 28 Oct 2026 13:01:16 +0000
Files and hashes: 1: _8P1ykeS2U0ao2616jqhtAQ80BQ.crl (hash: LOE6XD9aDhE3UY9ENk3tksO0hbyX8d3wOikr15n1t/Q=)
2: hCw1qjN_O1SaJi8aTamX8ZgP-R4.roa (hash: U27PAUZJYLFVv1O7LFRzHAbfIJHJM/VIlG2VjywheWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:62:37:fb:5b:a4:a9:02:22:bf:fa:c1:df:48:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Oct 27 13:01:16 2026 GMT
Not After : Oct 28 13:01:16 2026 GMT
Subject: CN=98f1768d120a3d85ce6ffebe12c60a12ef56ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:80:18:7f:df:15:e2:ac:91:c1:4e:ed:15:
01:d5:5d:cb:b0:eb:95:c1:e0:83:2f:53:17:8e:05:
b9:93:e2:90:57:7e:73:af:2f:2f:6b:b8:2b:12:f1:
c3:f6:9a:1f:ad:76:84:ae:9b:2c:db:6a:9d:3f:e1:
6c:63:1b:b3:69:3f:06:46:b9:5f:49:9f:3d:36:6c:
c1:f5:89:05:d9:1c:f3:d7:8c:2c:f8:e1:e4:13:7f:
18:7c:1d:fa:e8:ff:89:43:a2:61:3e:24:eb:e9:f7:
db:63:a4:f1:34:0a:33:0c:7b:ce:23:9c:95:53:ad:
bc:0c:30:54:96:8e:7e:a9:16:79:a4:29:4e:2f:c9:
0d:7b:a8:ee:e7:13:56:94:c1:98:3a:19:7b:e4:0c:
53:82:27:3a:1a:f5:4f:e2:17:cd:07:be:84:11:fe:
4e:61:9b:59:4a:cc:d4:93:33:c1:35:99:59:dc:2c:
ea:18:98:ca:96:7d:0d:fc:f4:7f:a7:40:59:8d:fb:
35:02:b3:1b:00:11:b7:fd:48:db:5f:19:43:8d:6f:
0c:bc:f5:52:96:a1:45:d3:82:f2:c0:8a:45:34:c7:
d2:4d:70:b0:c5:c9:1b:0f:bf:cb:d2:44:57:7d:5d:
02:2d:ce:be:ce:5e:11:b6:6e:1a:d1:40:9a:25:14:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F1:76:8D:12:0A:3D:85:CE:6F:FE:BE:12:C6:0A:12:EF:56:FF:37
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:98:49:ca:fe:85:6d:b2:25:cc:78:8d:fe:d7:19:8d:1d:
cb:b1:72:9b:86:52:44:1e:d3:91:34:da:13:82:42:ae:f8:1a:
e8:2f:7c:12:48:c4:a3:e6:5e:17:02:5a:55:bf:a4:99:17:a2:
80:a5:2a:4e:98:4b:3b:82:d7:65:d1:3b:75:fe:21:9f:42:c5:
f2:fd:dd:34:f6:57:c8:46:36:38:77:c9:e9:f0:07:43:54:3a:
dc:e7:7b:87:72:57:87:b0:d7:67:4a:58:1e:f6:8d:cf:67:79:
be:95:04:1e:ee:ce:a1:7a:c1:c9:a0:89:cd:28:a0:ad:86:65:
65:0c:e6:68:23:10:08:02:19:86:2b:82:10:9c:17:19:2b:fa:
28:67:91:be:e3:4c:15:db:67:97:d0:da:32:f9:68:80:b0:90:
e1:60:68:49:89:4f:e3:10:02:e1:f3:58:6d:00:17:18:24:d7:
60:c2:93:1c:b3:ce:f0:98:d7:0d:7a:44:6b:86:cf:bc:10:86:
95:db:42:08:f5:0b:34:a6:2a:3c:bd:5d:de:1e:af:b4:a2:b3:
3c:b6:b3:75:a1:47:73:63:0d:0e:ef:cb:79:41:7c:2f:8d:b4:
4d:28:1d:c6:ab:c9:fb:34:8b:39:23:41:e0:68:8c:a0:ea:58:
21:e4:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:38:19 2026 by rpki-client