Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier: ve/VE95m72nKhl3ZF3UPkPIkj9qjLIJa3mbDoQ0GOVM=
Subject key identifier: 21:74:52:C4:FB:15:AE:18:87:ED:C7:0C:CD:4B:29:9B:52:7F:2B:E2
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 01A17695A7232E6B4A025DDFE0D91A22B248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number: 1A8B
Signing time: Mon 26 Oct 2026 05:01:21 +0000
Manifest this update: Mon 26 Oct 2026 05:01:21 +0000
Manifest next update: Tue 27 Oct 2026 05:01:21 +0000
Files and hashes: 1: 8nT5rb3UrAJDsICwRbRykN-JOS0.roa (hash: DT7HhfSPZrLtcCVQk42JiiDF/rCVVpx9BUd5IvtgTOU=)
2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: vgN+UgI/TNwhvkbe/9pi1FistHkWCZBydexI0SKZ2lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:a7:23:2e:6b:4a:02:5d:df:e0:d9:1a:22:b2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Oct 26 05:01:21 2026 GMT
Not After : Oct 27 05:01:21 2026 GMT
Subject: CN=217452c4fb15ae1887edc70ccd4b299b527f2be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:bb:bd:4f:25:20:b1:ba:aa:47:31:9e:7f:
c5:fa:e6:ea:94:52:6d:18:7e:d4:9e:fb:e5:74:1f:
f5:f4:12:72:7f:3c:a6:0d:80:58:2b:a1:72:21:7d:
0b:26:f9:fd:7e:16:3c:fe:5d:51:db:0e:c5:3f:47:
0d:e3:0f:99:3d:0e:5a:ba:f7:d3:76:74:10:c8:df:
1a:6e:ac:8c:fa:ed:1a:aa:1a:07:95:20:c2:dd:7a:
dc:e8:91:8a:39:88:df:3a:78:c3:72:1b:fd:5a:6f:
e5:04:a4:56:80:bf:9f:6e:17:1f:de:97:3c:f1:c3:
0c:88:15:e3:d0:48:24:61:f0:45:31:f5:96:05:b5:
01:a1:8c:58:bf:ba:63:41:87:30:5f:1b:8b:e5:f3:
14:df:a2:92:fb:93:9b:b8:eb:a2:ef:17:04:67:7d:
55:f5:fe:5c:0b:a7:2c:9b:58:8f:52:58:95:6c:f0:
b0:d8:d6:0a:61:92:f8:8a:f5:4e:32:c4:e0:1c:fd:
c2:c2:8a:45:3a:c8:33:e7:22:c3:09:38:61:6c:31:
4d:e1:51:73:4f:b6:77:a1:41:09:62:ff:b0:51:d6:
59:c3:2c:f6:47:ba:f2:5e:6e:12:0d:27:a6:9a:19:
88:78:59:df:ad:62:b7:5b:54:66:0a:8e:fd:15:d2:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:74:52:C4:FB:15:AE:18:87:ED:C7:0C:CD:4B:29:9B:52:7F:2B:E2
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:22:b2:77:ab:91:c7:b8:9e:e2:57:63:7b:93:86:d0:4d:69:
88:20:ed:2d:b6:80:77:bd:dc:5a:b5:3f:63:cd:2f:37:59:8c:
aa:97:27:af:4b:aa:58:4d:0a:80:00:9e:12:cd:63:c5:b1:ce:
7f:26:40:84:81:f1:59:f7:76:be:b2:1e:b2:44:28:b7:c5:15:
c9:d7:88:46:d8:07:3f:a1:a7:46:b3:32:30:a1:a1:e9:e1:c9:
c1:62:8a:7c:5b:df:7b:40:d1:47:ed:e4:82:0f:f0:a6:89:e4:
2e:fa:c5:8c:fe:64:c1:4f:61:72:08:02:8c:a1:e3:94:03:bc:
b0:40:d6:56:11:24:ed:6f:b1:92:c1:a9:c8:43:0a:5c:04:1e:
99:40:ad:58:af:eb:11:f5:f3:81:5d:2a:ed:41:a9:0c:b8:e6:
f5:67:94:cd:3d:22:6e:41:35:bd:10:7f:6c:42:56:de:23:4f:
12:07:38:e4:cf:0f:ed:9f:4c:17:ff:e2:15:31:5f:11:92:4b:
3d:26:fb:3a:73:ce:ac:ac:78:18:04:22:3d:26:62:aa:fb:e0:
f3:e2:36:f4:55:40:50:82:bb:c8:85:a0:87:b1:45:f0:16:e3:
d2:93:0c:ab:82:f0:08:02:45:91:5a:1a:da:01:ba:e9:75:b6:
e3:2c:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:23:41 2026 by rpki-client