Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: Ka9H8Yve+HXXWiJWy6tYC6CYBpHjM4QyMHyohU3FMyI=
Subject key identifier: F5:48:8E:E8:85:21:F5:EB:88:FC:F7:21:EE:EF:04:30:72:3A:1D:6F
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 01A180062052F19EB721E23C463E397C32E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 0571
Signing time: Wed 28 Oct 2026 01:00:47 +0000
Manifest this update: Wed 28 Oct 2026 01:00:47 +0000
Manifest next update: Thu 29 Oct 2026 01:00:47 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: O+zNXb+oGuCPFuUoa9ns+bIEQwhGAGDXd+K8s1ncgj4=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:20:52:f1:9e:b7:21:e2:3c:46:3e:39:7c:32:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Oct 28 01:00:47 2026 GMT
Not After : Oct 29 01:00:47 2026 GMT
Subject: CN=f5488ee88521f5eb88fcf721eeef0430723a1d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:bc:0c:92:b5:2e:a8:45:63:6b:80:07:6e:
61:2b:2c:04:f1:db:70:35:63:30:e9:be:65:a5:7c:
59:f4:34:67:9d:b1:11:cb:f8:75:85:34:84:44:4d:
16:6f:91:f0:16:5c:ed:12:31:65:6e:30:a1:80:02:
3e:df:57:1e:4b:bd:fa:88:b4:72:03:71:a5:44:17:
d2:06:58:e6:71:f7:6b:d9:35:56:4f:cd:2d:77:8d:
98:b1:87:7e:10:05:8b:b1:f1:48:61:86:c1:74:52:
82:c0:b1:f1:45:27:c7:dc:47:33:db:1a:7f:17:9e:
b6:47:bf:d0:d2:cf:03:a7:7f:7f:8f:82:45:2b:65:
39:b3:16:1b:c3:da:55:8d:ff:34:8d:e1:64:05:e8:
01:d3:3a:59:69:23:02:ec:70:0b:40:36:e9:f7:10:
9f:1e:84:9a:e5:13:07:a3:3a:53:74:86:ed:81:73:
f9:a2:b3:3f:c4:4e:27:7b:95:f5:93:47:be:e1:fc:
16:23:f3:18:c1:69:0b:04:13:17:c5:2f:95:bd:1c:
97:04:48:5e:72:ea:e0:0b:60:7a:c4:a3:a8:30:22:
74:1e:33:15:97:cc:94:45:66:ba:1f:8a:a0:ef:9c:
d2:33:d0:05:8c:00:70:44:1b:03:21:a7:a1:8b:6f:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:48:8E:E8:85:21:F5:EB:88:FC:F7:21:EE:EF:04:30:72:3A:1D:6F
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:52:b0:63:49:b3:7c:aa:80:d7:6e:1b:16:dd:a3:46:99:
fe:59:06:1a:ed:8a:e1:2f:ef:d4:ed:0f:48:c3:1e:c2:c3:ef:
7a:9c:00:0e:7e:61:c9:7b:b9:cf:3d:53:dc:51:06:03:07:88:
f8:ba:10:1b:69:6f:53:29:55:46:56:86:5b:9b:40:44:5c:33:
5e:d3:ff:bd:2a:1a:b1:c3:78:b0:19:a3:5f:10:ff:af:e9:0c:
68:ee:4c:09:1c:c2:2e:0b:ff:5f:23:68:5e:c4:75:57:ca:b2:
4a:04:b5:fc:87:d1:f8:2c:70:25:2d:7b:2f:dc:5a:9c:ee:46:
d5:41:f8:79:57:88:b8:a3:50:c2:b4:f9:ed:66:76:a2:9f:2f:
90:0b:dc:bc:5a:ad:88:f9:20:60:57:12:cd:71:fd:56:9f:ed:
73:3c:5e:02:61:c0:e7:81:28:ba:56:e4:28:d5:46:c7:99:05:
49:c4:ba:96:3f:14:67:d9:65:7d:33:df:20:1c:ba:00:3c:c3:
56:21:f0:a1:f4:b8:f0:80:21:f6:de:39:3c:79:e4:0c:e8:d7:
cf:e7:88:0f:55:37:7d:26:82:c5:54:64:e0:67:04:b3:eb:47:
8e:8c:5a:8a:48:f2:91:74:75:e4:0a:00:01:54:08:c4:63:38:
bd:cc:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:19:02 2026 by rpki-client