Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: I0Xj3Mdudg3ZHSwdLBytp8HCNF3w6oHfVb3ZdLN3r54=
Subject key identifier: D9:1A:33:31:E8:EA:92:58:10:7D:4F:6A:CF:81:40:6A:48:52:65:E5
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 01A14BE22FF86412C85D76F12E82025437A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0F2B
Signing time: Sat 17 Oct 2026 22:01:16 +0000
Manifest this update: Sat 17 Oct 2026 22:01:16 +0000
Manifest next update: Sun 18 Oct 2026 22:01:16 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: QN8zCGLxMDPigvc67IU/QUUdLaYROyOC9E87U7deTo8=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e2:2f:f8:64:12:c8:5d:76:f1:2e:82:02:54:37:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Oct 17 22:01:16 2026 GMT
Not After : Oct 18 22:01:16 2026 GMT
Subject: CN=d91a3331e8ea9258107d4f6acf81406a485265e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:68:5c:b4:78:f5:24:9a:1f:eb:f5:33:12:
f1:7d:2a:26:d0:b8:42:da:ed:42:3f:0a:d8:66:13:
46:6e:2b:6c:3a:0b:6c:cf:ab:45:0f:3b:a7:0b:48:
39:3e:ea:9f:56:cd:d9:c8:4d:07:29:f4:82:63:9d:
b6:3a:f3:a0:eb:7e:e6:07:0b:dc:9e:4d:8d:cf:e4:
99:00:95:a6:8e:52:4a:82:2c:c5:92:e5:23:18:a9:
3a:ea:d1:cd:80:52:85:5f:88:5a:92:d2:f4:15:5e:
1b:de:4d:58:bd:79:dd:2e:ae:5a:50:d8:29:4c:1e:
44:b3:52:33:c7:84:c7:16:b2:65:3c:80:27:cf:46:
e6:3e:c5:8a:38:92:23:2b:a9:bd:2a:27:04:7b:3e:
6a:9c:e2:95:63:d2:4d:34:cb:c8:bd:d4:3b:35:ed:
df:25:d7:b5:e2:0b:90:ce:43:61:ee:0c:a5:08:19:
40:22:ea:c3:37:b9:56:60:d2:1f:d6:fe:22:d6:72:
15:07:e5:6c:d4:07:58:f5:b5:82:32:47:3e:f4:89:
e0:6b:99:9c:d8:d9:7f:aa:2a:18:26:64:ba:5f:9c:
1c:6a:e3:ee:75:a4:e3:9e:f5:dc:30:5b:d2:11:04:
f6:bb:02:d4:a4:35:0b:9b:f2:75:09:89:39:c6:64:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1A:33:31:E8:EA:92:58:10:7D:4F:6A:CF:81:40:6A:48:52:65:E5
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:32:d3:55:8e:07:69:86:a7:44:4a:f8:05:d2:76:0c:e2:f3:
c0:9f:c1:83:11:b6:ad:8c:fb:19:38:fc:db:41:d7:af:18:69:
1b:a3:df:d0:b0:07:7d:20:7d:75:a0:2c:18:31:c5:25:a7:7a:
76:8e:9a:9f:69:84:00:f1:c4:c3:6c:9a:3e:0a:b1:ed:5e:31:
51:25:e0:89:b7:b1:bc:2d:e9:b7:dd:98:91:de:1d:1d:dd:43:
63:a0:e7:96:4e:05:6a:b0:de:ef:2b:ba:a2:dc:d0:58:66:ab:
4f:68:fc:68:c2:62:a6:ee:1a:69:6c:5e:6b:35:df:a2:2d:94:
19:47:32:56:57:d5:aa:cc:fb:2b:50:0e:ed:b2:d6:8b:a6:ae:
d8:66:b6:fc:89:96:4a:f0:84:69:a5:1d:f8:6a:5b:61:4d:39:
84:a8:5f:d4:a6:56:1d:e3:2e:17:65:e4:c6:e0:03:c9:5f:12:
a5:ad:18:79:c2:42:95:6c:dd:f6:fa:c8:c3:8d:58:ba:e8:84:
1c:9f:85:8f:eb:85:c1:9d:a1:bb:35:4e:86:d5:46:1a:df:a1:
9c:f6:e0:df:c3:14:6d:fd:65:97:ba:d0:02:e5:31:f7:e7:25:
e8:d2:47:97:3a:67:4b:a9:89:14:fa:d4:5c:9a:2e:09:71:9e:
6d:00:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:49 2026 by rpki-client