Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: jihfhzwANA3LPu6z3lDtSNlAhQZxGtTMopTU+zMojHQ=
Subject key identifier: 32:F3:6A:CA:17:82:90:BD:18:F4:40:63:65:6E:6D:E8:AD:C1:FE:16
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 01A1287A1A97B71CB702D0FB38B24EA0667F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 01:00:53 +0000
Manifest this update: Sun 11 Oct 2026 01:00:53 +0000
Manifest next update: Mon 12 Oct 2026 01:00:53 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: Cu8WpiD9lBD4Qw3MJKDnMXTBo8S7WFcvNeojFsqsJxU=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:1a:97:b7:1c:b7:02:d0:fb:38:b2:4e:a0:66:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Oct 11 01:00:53 2026 GMT
Not After : Oct 12 01:00:53 2026 GMT
Subject: CN=32f36aca178290bd18f44063656e6de8adc1fe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:55:12:1a:75:81:da:a2:98:7e:89:66:d7:
b1:fc:da:07:56:08:0e:4c:77:3a:04:ee:42:e8:0d:
97:18:2d:2f:0b:a0:1a:c0:59:d7:4d:e2:88:f8:a2:
cb:17:91:25:77:4f:fc:5f:a1:d6:d8:fe:ae:71:2d:
fb:2e:bc:20:f5:21:37:e4:d1:7d:31:59:ec:6c:91:
94:7a:7d:c7:3c:5f:b6:f6:8b:47:eb:78:3d:46:7f:
b7:8e:96:03:79:eb:72:4c:e9:8d:f1:1f:e1:60:a9:
7f:a1:4d:cc:e4:ec:f0:63:b7:f5:ce:13:52:1f:86:
e0:9f:35:d8:a2:12:1c:60:a8:9a:4f:22:e4:a1:fd:
b1:4c:fd:f0:9b:86:91:b8:55:e5:ff:45:ae:08:61:
d9:e4:6b:25:1e:e6:30:75:80:ec:94:9f:7f:e6:cf:
e7:b9:2f:ce:f6:a8:a9:6d:b9:10:39:0e:5d:59:cb:
c0:98:6d:d3:e1:7e:44:b1:16:fa:77:1b:66:1d:86:
cc:26:40:d4:39:a6:af:2b:91:6f:d2:48:3a:86:63:
59:05:66:40:54:8c:80:d7:6f:d9:ce:e3:c1:89:b0:
54:1f:54:90:b0:1b:a9:00:1b:d0:04:df:72:46:12:
61:a3:3d:c0:af:8b:05:18:e8:b1:18:33:96:00:47:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F3:6A:CA:17:82:90:BD:18:F4:40:63:65:6E:6D:E8:AD:C1:FE:16
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:42:8c:bf:37:c4:85:5d:dd:1d:a9:32:5b:4a:d0:28:a2:9d:
b8:bd:bb:83:90:2f:3e:da:c1:28:1f:5d:be:8d:8e:90:c5:dd:
f8:57:d0:a2:7d:56:e0:6a:52:2c:8b:80:66:a2:32:f5:5f:cd:
fa:81:38:91:51:6c:45:66:4d:c8:f1:e2:6e:2a:20:f2:0e:f1:
bb:b7:c0:ea:ba:16:71:c4:70:ab:8a:26:84:cc:bd:46:51:6d:
24:74:0a:1c:cc:9b:d1:49:95:4e:c7:24:0c:16:7d:d8:d7:04:
7d:b3:92:68:20:66:69:09:bf:3f:e5:19:eb:10:df:5c:e5:12:
1f:0a:e6:80:d4:7f:98:67:97:72:73:71:01:87:bf:75:5e:11:
ca:f4:3a:c6:31:05:47:98:cb:8c:a1:20:c1:30:35:0a:1e:e6:
61:d4:27:6e:95:ff:30:ed:c5:f9:e6:ad:87:f6:2f:17:96:ba:
23:02:17:c7:fb:f4:6c:f3:31:35:17:02:00:3a:b2:69:e7:b3:
6e:5a:08:14:d3:89:da:3a:a4:61:30:34:26:83:84:dc:c5:f4:
f9:8e:77:c2:cd:86:f6:ac:98:3f:c5:7c:99:e3:4d:21:06:44:
a3:6b:1f:08:1f:8b:bb:f5:35:ad:ca:3b:2d:bf:65:1a:48:41:
ab:bf:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:24:41 2026 by rpki-client