Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier: 7TcXiHfxGGP8oFqG4MHEOa1fKnDIUhKqkOiWojoxc/Y=
Subject key identifier: 71:B2:88:A2:DB:0D:A9:F8:8F:61:11:D3:1D:E4:30:46:21:67:65:BA
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 01A16F493A4967703707029BDE979B13A55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number: 10DB
Signing time: Sat 24 Oct 2026 19:00:32 +0000
Manifest this update: Sat 24 Oct 2026 19:00:32 +0000
Manifest next update: Sun 25 Oct 2026 19:00:32 +0000
Files and hashes: 1: p8Q1T6owao0UtFaI0uzL9fVOIDk.roa (hash: ETVPkMleWg5Tmk9ZZqBQNGmyAM72infgVzIH2DgSiBI=)
2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: pIfmv1qNYW7jgWZZw9yWijM2xau3GXCTKQmUh3SG/uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:49:3a:49:67:70:37:07:02:9b:de:97:9b:13:a5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: Oct 24 19:00:32 2026 GMT
Not After : Oct 25 19:00:32 2026 GMT
Subject: CN=71b288a2db0da9f88f6111d31de43046216765ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:0b:53:43:46:e3:eb:f2:3a:15:bd:67:30:
29:ac:ce:d3:2b:31:85:56:e4:7e:4c:fe:16:bd:14:
8b:de:5c:aa:1b:3d:6a:39:6d:f9:d5:2b:0a:68:c1:
fd:cb:e6:e8:de:75:83:4c:42:96:b9:b0:a0:d5:40:
02:13:e4:a5:58:8b:a0:f9:e7:b9:92:c4:24:87:9a:
c8:4c:e3:63:97:2a:b4:4b:50:76:b1:7c:8e:75:6c:
d7:9b:44:4f:2b:42:fc:65:60:79:3f:5f:ac:54:26:
c1:65:72:8f:19:ac:87:39:58:e1:98:bf:c1:d9:61:
2a:71:df:71:f4:70:69:44:43:5f:55:0d:0d:24:63:
43:9a:fa:97:5c:ef:99:c0:80:0f:b4:12:65:9e:95:
ef:9e:68:8f:0a:85:d5:5b:d2:72:ea:ea:2c:7d:1b:
cb:c0:da:09:b8:e2:70:d1:e5:22:b3:4d:74:18:dd:
a3:5e:59:f1:93:17:83:0d:41:be:ae:c4:89:6d:43:
a3:80:d0:e8:fa:5b:03:42:f7:a1:d6:8d:74:30:2a:
2c:34:52:98:a4:1b:51:80:77:2d:05:5f:81:83:f1:
b7:ca:15:20:c0:31:a9:14:ea:ae:86:b4:1a:55:bc:
2e:7f:23:c6:1c:73:e0:9f:c8:64:bf:1b:cd:f9:b4:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B2:88:A2:DB:0D:A9:F8:8F:61:11:D3:1D:E4:30:46:21:67:65:BA
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:46:91:fe:26:2e:03:f8:58:45:c3:47:13:3d:fb:b2:ed:b1:
9e:72:e8:5c:cd:89:96:7c:bd:bd:1a:b6:ae:c4:40:df:a9:c8:
ac:db:f9:27:21:79:0a:c6:b2:b9:a0:8a:0f:70:ab:e6:bf:d9:
a6:de:4c:b1:87:30:64:57:ba:99:62:12:cf:89:06:b3:0c:11:
e4:c8:0d:7f:4c:9d:9a:93:ea:bc:b7:bb:29:f1:b0:57:cb:7b:
4f:9d:ee:b9:a0:66:89:ce:53:91:fc:ba:7f:e9:ca:18:cd:72:
61:5e:06:62:67:48:4b:4d:8c:99:27:7c:13:db:ac:21:d2:99:
02:64:96:f0:74:2b:ad:20:d5:8b:86:0f:56:dd:f8:2f:d4:f1:
42:3e:92:78:63:3a:d7:d6:da:28:63:c2:bd:73:c8:d4:e2:28:
d8:49:bf:f1:a8:fb:bc:4a:df:f8:4b:a2:94:8e:22:2d:ab:8e:
17:d8:cc:9f:95:27:06:7e:86:c2:b7:59:8e:31:44:7f:f0:87:
ab:48:c6:32:3c:0d:fb:13:5e:8a:a8:a0:7e:35:eb:64:8f:80:
ee:26:0f:60:ad:d1:b1:0a:75:76:8b:8e:3e:36:87:3e:10:02:
42:4e:32:b8:45:cb:a4:d6:35:00:02:26:9f:e2:96:89:17:31:
e2:4e:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:49 2026 by rpki-client