Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier: SuQL2C/qDB3BMEBOskVMtquH4P2RDFxjZ/KQsMNDQWY=
Subject key identifier: 51:13:98:74:1C:9E:54:C4:F7:48:91:27:4A:C7:24:F8:CF:72:54:AE
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 01A1901DB270815FC23F143658514FF86E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number: 0D8D
Signing time: Sat 31 Oct 2026 04:00:27 +0000
Manifest this update: Sat 31 Oct 2026 04:00:27 +0000
Manifest next update: Sun 01 Nov 2026 04:00:27 +0000
Files and hashes: 1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: btjmgRAdkYNgYUa17ZqfIRmwfSTrCh6h7E4NOXcS3Hw=)
2: hOCqHr0-rwjOn6wU8z8C-ggKXAo.roa (hash: aczilg5expuAqkln7fFu+xj4eV4HRQvyQA+wDQF1/60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:1d:b2:70:81:5f:c2:3f:14:36:58:51:4f:f8:6e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Oct 31 04:00:27 2026 GMT
Not After : Nov 1 04:00:27 2026 GMT
Subject: CN=511398741c9e54c4f74891274ac724f8cf7254ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:5b:bc:ec:ee:fe:4c:66:b0:af:28:66:ca:
a0:46:fa:3d:a1:9a:b4:0d:fc:08:e6:b8:0b:f4:6f:
db:65:ee:79:6c:3d:c0:98:e7:87:09:d2:c6:8a:aa:
70:c4:28:e8:8b:91:1b:58:6f:1c:f6:f9:27:a4:5f:
ac:60:69:d0:d8:b2:aa:91:1a:d1:17:22:2d:c6:57:
b1:a3:87:12:b9:36:37:d6:28:b5:fe:99:71:07:ff:
90:d7:d5:d9:05:3d:50:ff:d7:a9:88:09:3a:ef:47:
62:0f:14:1f:60:46:64:48:1e:f9:38:c2:71:09:31:
cb:3a:89:4e:12:ce:84:62:a6:28:f1:bb:d3:f2:20:
30:48:43:3d:e3:3a:e4:bd:40:c7:2b:d8:d7:c8:5f:
56:c5:b4:6f:3d:91:bd:89:2d:22:a8:7c:7d:ca:94:
3a:06:3e:a4:74:2e:43:4b:59:b3:f0:61:ca:88:7f:
07:33:ef:23:bf:22:60:5b:16:25:dd:ea:d0:ca:3f:
22:90:eb:17:4c:ae:51:23:f4:d3:16:7f:cc:9e:76:
30:bf:50:d6:f7:ed:74:ef:9f:f3:76:9a:77:f2:6e:
4c:d2:b7:8c:7b:3d:7c:5f:52:3d:08:dd:15:3c:f6:
89:80:c2:a6:df:05:4e:53:db:6b:a1:c8:77:39:08:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:13:98:74:1C:9E:54:C4:F7:48:91:27:4A:C7:24:F8:CF:72:54:AE
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:42:b0:3a:cd:01:89:e1:89:18:3b:96:93:df:3a:cc:00:6c:
da:2d:cf:d0:af:57:b1:48:5c:4c:88:e6:61:fd:b2:83:63:40:
dc:0e:07:a2:c1:b0:14:04:ef:02:df:2c:cb:52:b4:1e:60:b9:
eb:f9:0a:4d:80:87:e6:aa:ea:c9:3b:e0:1e:a4:74:c8:6b:e6:
1f:c2:86:2a:97:47:0c:5b:3e:05:f7:c4:e3:1a:b9:81:bd:bd:
6d:40:a2:29:a9:ae:21:de:01:de:07:4b:02:bf:1e:ee:aa:e6:
5f:ec:ec:47:34:34:f3:53:f7:78:e4:66:45:86:30:c5:66:b7:
56:03:f1:77:e9:3a:ae:a8:a6:ca:aa:de:aa:07:80:cc:59:f7:
bb:b4:58:e1:57:1f:40:96:4f:2b:52:d4:61:82:dd:81:19:0a:
ea:85:63:4d:70:77:73:28:8b:f2:ae:d1:fe:cb:09:29:fe:17:
69:24:b0:fb:eb:2c:5e:14:5a:de:b2:b1:0f:6c:b9:2d:e6:04:
56:7f:dd:84:f3:0f:d6:66:82:5a:c6:e6:76:93:ea:3c:64:50:
53:c2:3a:57:f0:d9:cf:b4:2c:27:f5:bd:aa:af:f7:87:80:91:
2e:0f:82:62:72:76:f1:de:1c:1f:0f:a2:81:cc:a1:c6:45:fe:
1f:f4:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:49:07 2026 by rpki-client