Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: yaoh9N5pDusdeWlS2/ML+Vqz0nbs4VSyUwbLMFyuNZo=
Subject key identifier: 85:8B:6A:44:BF:C6:4F:9B:CD:81:D9:72:F7:B1:B7:CD:27:23:85:5D
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 01A13ECBC71ADAE53986BF343F64791F7B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 09:01:44 +0000
Manifest this update: Thu 15 Oct 2026 09:01:44 +0000
Manifest next update: Fri 16 Oct 2026 09:01:44 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: eFZ31RFNwFWq/JKdjzSMuxS8XBbalLtLtPtUbbJyNgI=)
2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:c7:1a:da:e5:39:86:bf:34:3f:64:79:1f:7b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Oct 15 09:01:44 2026 GMT
Not After : Oct 16 09:01:44 2026 GMT
Subject: CN=858b6a44bfc64f9bcd81d972f7b1b7cd2723855d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:22:bd:93:0a:48:77:f8:c3:06:a4:af:4c:
94:83:10:73:f2:3e:96:9f:48:60:72:53:54:c8:ca:
ad:30:f6:cd:2d:09:65:23:e4:63:bc:b1:0d:e0:e9:
df:2b:40:df:99:30:f9:57:cc:05:7c:0f:29:9a:37:
2f:4b:02:28:7d:82:1a:3a:5e:d1:37:2f:ce:a9:d5:
24:da:3b:67:58:02:2b:9b:99:90:d2:f4:6b:57:0b:
e4:72:a9:7a:83:cf:74:2e:59:98:f4:83:81:b5:c4:
ee:c6:16:2e:a3:8b:53:0a:6d:08:c1:e9:53:5a:55:
8f:db:67:c6:f6:08:13:50:53:f5:98:81:52:cb:3f:
51:fd:04:c7:0b:f4:4c:2a:e0:25:8e:d8:c3:b8:aa:
73:ad:e2:0a:85:2a:cf:df:ab:c7:9b:89:71:9c:d3:
87:bd:ea:ec:b6:cf:59:15:1c:0f:7e:a6:69:cd:7e:
81:de:c9:2f:32:3b:af:1b:19:2d:5b:a1:5b:9e:e2:
98:cd:67:7b:27:19:a3:15:57:d7:7c:bd:f5:9d:2b:
57:e5:53:1f:9d:64:66:17:a3:35:23:fb:b6:e6:ce:
a5:ac:c8:8a:0d:77:4d:16:1c:c8:9e:36:2c:05:38:
f5:2d:93:03:5a:94:50:8c:e5:fd:2f:43:b3:a1:a7:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8B:6A:44:BF:C6:4F:9B:CD:81:D9:72:F7:B1:B7:CD:27:23:85:5D
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:19:79:d1:40:24:84:58:99:db:6c:b1:e5:f9:7c:c2:4b:19:
9f:a9:cd:9c:d6:2e:f3:f1:6b:50:07:9d:bb:14:4c:54:ab:24:
c8:e2:6c:54:43:a4:0a:9b:7a:78:50:d2:d1:44:d3:e7:94:65:
4b:bb:61:1c:2f:b3:1e:3e:31:00:bd:a2:d1:60:04:bb:a1:17:
e2:04:cf:3d:fd:02:18:67:22:3c:f8:1d:e4:d9:6f:4b:76:52:
18:68:3c:27:f6:be:dd:46:b6:4b:53:b6:02:c8:bb:18:92:09:
70:d5:d5:e2:62:51:c4:61:bf:9b:99:3b:59:9b:20:16:b2:f1:
f0:9c:43:1f:8d:af:5b:d9:d3:dc:d9:f6:6f:c0:5b:cd:15:a7:
aa:06:3a:39:ee:ba:ca:4c:e1:eb:9e:77:27:59:76:a7:2f:a1:
11:f5:9a:84:31:32:df:4d:f8:9b:3e:1f:c2:53:c3:f0:67:9c:
fd:44:3c:ab:5b:19:8d:b7:be:18:9d:92:a1:f9:fd:ba:9d:14:
0f:ec:81:18:d2:14:7b:a8:3c:de:81:45:93:f3:61:fe:c9:b9:
dd:ab:cf:7e:26:da:84:83:40:cc:29:86:65:49:6c:34:3c:1d:
95:58:32:10:a0:d1:6e:86:f8:eb:cb:3b:d1:fd:14:db:06:fb:
b3:d6:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:49 2026 by rpki-client