Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: UOi7zImOICZy9feSCi3ErFG8pOuZSPrBHxmGWaTskpU=
Subject key identifier: 3E:97:4E:FA:8F:A4:5A:9E:2D:58:31:2C:2D:1E:14:44:21:C5:9D:49
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 01A13F029EDE76A399F6173781300ACA4D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 0C4A
Signing time: Thu 15 Oct 2026 10:01:38 +0000
Manifest this update: Thu 15 Oct 2026 10:01:38 +0000
Manifest next update: Fri 16 Oct 2026 10:01:38 +0000
Files and hashes: 1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: DxmxpxpYLx+L6hyelfjfcoEBZsBZhHdgTAMakydraLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:9e:de:76:a3:99:f6:17:37:81:30:0a:ca:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Oct 15 10:01:38 2026 GMT
Not After : Oct 16 10:01:38 2026 GMT
Subject: CN=3e974efa8fa45a9e2d58312c2d1e144421c59d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:52:e2:67:fb:ef:6b:09:b7:31:2c:35:1f:
1a:76:39:62:46:6a:1d:05:1c:fd:96:71:fc:4d:43:
27:7c:2c:83:7e:2d:5b:ec:27:74:c6:e0:b8:ee:1e:
56:9a:f3:11:26:28:0c:f7:00:a2:6e:b2:25:aa:40:
fc:7f:df:31:f0:18:f0:7e:96:37:52:8d:5f:ad:b6:
17:d1:e5:e4:20:4d:1d:67:43:5c:dd:b4:1a:f4:55:
bb:4a:37:a8:99:23:68:a3:bd:92:e1:47:33:9a:8e:
9b:42:0f:ec:e3:35:59:d7:84:70:42:00:88:8e:6f:
4b:5d:45:0a:15:a0:e0:6b:6a:a4:c3:23:26:5f:b9:
b6:fe:e8:8a:1d:a8:e9:f8:ab:f5:bd:1e:4b:83:1d:
9c:23:36:83:74:f3:ea:7d:fc:64:53:40:f0:e8:34:
1c:f2:4a:e1:ef:60:87:6d:21:ef:21:95:c6:c4:34:
24:e0:ec:9f:1b:7f:d8:6f:c2:63:74:90:e6:fb:a0:
5d:a5:bd:96:35:d5:3b:17:1e:b7:1d:56:e5:65:2a:
e3:13:5c:50:8f:b4:47:22:d1:a8:4d:cb:3a:93:ce:
71:f0:94:f4:65:51:5a:cb:f5:6d:86:e7:0e:86:d0:
8d:df:a9:95:e6:0e:e8:fd:fc:a6:0b:74:39:9c:99:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:4E:FA:8F:A4:5A:9E:2D:58:31:2C:2D:1E:14:44:21:C5:9D:49
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ad:03:66:4a:58:d6:cd:d7:cd:33:19:51:52:ed:c0:2b:02:
9b:7f:05:4e:94:16:ed:6e:ec:14:43:0c:01:fe:43:43:ee:23:
87:8c:9e:ae:55:a6:a3:0d:00:32:6c:34:c6:d3:e0:b8:18:59:
8e:df:04:96:07:8e:e1:05:a8:24:23:28:4c:57:d7:b8:88:9b:
3c:a5:95:44:6e:c0:93:38:18:be:2d:25:3c:a6:81:01:f8:4a:
46:e3:8e:36:75:ec:f6:ee:2f:06:56:84:9a:08:49:a4:64:0d:
5c:57:a7:d5:84:92:3f:2b:da:db:55:92:78:71:7c:24:61:92:
27:64:12:6e:cf:65:86:87:5e:41:86:d2:26:a3:90:5c:73:b0:
74:51:09:36:ce:d0:80:32:84:1b:e6:86:2d:be:2b:39:cb:e7:
30:ff:88:27:a2:6a:7b:5a:df:bf:2d:0d:29:4b:a5:59:bd:6c:
c3:49:6b:9e:20:9e:e7:ed:89:94:b8:15:04:6e:32:dd:f4:da:
53:48:b4:4a:bb:06:eb:6a:27:eb:47:61:60:80:21:0f:24:57:
65:de:d6:c8:60:f4:ca:fc:9e:a8:ca:72:27:35:3a:d7:7d:5d:
4a:48:b4:01:f4:36:5d:c4:3f:8f:04:3a:d0:67:96:31:5d:73:
b7:d6:d5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:46 2026 by rpki-client