Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: VNBOzV8ejB7yqk4I7HIQ9twpRbXUfoR2BnRMWcbXgc8=
Subject key identifier: A0:74:33:92:64:97:70:73:7A:19:54:A5:8D:84:AD:C3:46:B6:A0:37
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 01A13F02A50A5F55AA307BB9A28CAF470EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 1A39
Signing time: Thu 15 Oct 2026 10:01:40 +0000
Manifest this update: Thu 15 Oct 2026 10:01:40 +0000
Manifest next update: Fri 16 Oct 2026 10:01:40 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: OqfMIOUZ1PEdG5kVnsjnudJqBxAjBCAaBwLlJCBfV8w=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:a5:0a:5f:55:aa:30:7b:b9:a2:8c:af:47:0e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Oct 15 10:01:40 2026 GMT
Not After : Oct 16 10:01:40 2026 GMT
Subject: CN=a0743392649770737a1954a58d84adc346b6a037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:e2:a7:1a:df:89:2d:70:8d:66:2e:0c:e4:
24:38:a6:3d:30:7e:6b:17:b6:a9:74:52:61:56:15:
13:60:8c:be:17:c5:5e:63:bb:7f:a1:e6:e7:96:37:
7c:c4:a6:4e:22:a7:55:b9:5a:58:89:ca:00:25:b9:
15:5d:71:1b:a1:df:21:62:d3:e2:c6:14:83:91:87:
14:43:aa:19:8d:fc:0d:cb:20:8d:8b:8c:8d:34:78:
4e:e7:6b:d1:b7:0b:a5:d7:ae:85:b5:82:2a:24:98:
a7:96:5c:31:f5:a3:4c:3a:59:ec:36:c8:9c:58:ac:
be:95:68:17:c7:b7:03:1a:e4:4b:51:9d:0d:61:45:
73:9a:53:52:d3:87:44:01:64:0b:63:a8:d5:2a:b0:
73:8b:06:8d:4d:30:d3:3b:a6:de:a2:91:aa:90:0b:
d5:c7:25:12:ca:cf:21:88:58:7c:ae:4a:51:d5:d8:
b1:61:20:ff:f6:a4:1e:59:81:71:e4:a6:42:78:76:
15:74:e1:05:08:ea:6f:61:76:4a:ed:46:64:22:16:
db:c3:be:7a:2c:23:ba:1d:a9:5e:f9:1b:f7:fb:b6:
07:e7:7c:e0:e6:99:50:2b:32:5e:ee:36:3f:4c:21:
85:9e:7c:b8:8a:b4:6b:cb:52:e2:08:26:1e:db:d4:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:74:33:92:64:97:70:73:7A:19:54:A5:8D:84:AD:C3:46:B6:A0:37
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1d:6c:3a:e9:b0:04:48:3b:9c:12:dd:19:d5:3a:48:32:77:
25:4b:4b:1e:c3:fc:cd:ae:eb:56:85:aa:60:80:83:18:fe:d5:
2a:5d:00:5b:b9:bc:af:31:94:c3:30:10:e4:c2:8c:79:f2:c5:
6c:4d:c3:e3:8e:f4:fa:9a:cd:33:50:7e:91:5d:c6:85:45:0a:
19:dc:a8:19:86:9f:a8:8e:e6:6d:57:b8:01:a8:31:69:3a:13:
68:26:b8:83:af:28:d0:e7:80:56:28:29:2f:3f:0a:48:f9:a8:
8a:43:e8:c9:5a:d2:89:74:28:46:f2:89:4b:15:72:3c:bf:ba:
a7:3b:23:89:86:e7:2c:b2:ce:0b:be:b2:ec:7a:c0:fc:d0:fb:
25:dc:42:c1:ed:9d:14:13:44:03:9c:1c:1e:a2:0e:9c:b5:5a:
3e:bc:d6:eb:54:b2:40:af:1c:15:08:7e:a2:e0:30:c5:b5:91:
87:24:9a:8e:ec:47:42:41:48:f4:8a:5a:64:2f:19:d7:66:b7:
90:cc:e9:7e:cf:be:17:28:aa:60:fb:ad:e3:be:fd:82:7b:b0:
b7:01:de:f7:19:a3:08:41:ac:aa:3f:33:67:82:18:cb:50:59:
7a:85:bb:65:86:bf:cc:7f:d0:3b:29:54:7e:80:c1:b1:72:84:
1a:c5:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:45 2026 by rpki-client