
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.mft
File: 8seZnfj7NT9ElqmAAOo51VTrG6I.mft (raw, json)
Hash identifier: TuVgZnD42iBvpZREAS+K6O8U5hVro3D5KmA/iYKceJM=
Subject key identifier: 55:87:2E:9B:6E:D8:D0:FF:3F:F3:7E:C3:5D:21:F3:96:9F:08:4B:33
Authority key identifier: F2:C7:99:9D:F8:FB:35:3F:44:96:A9:80:00:EA:39:D5:54:EB:1B:A2
Certificate issuer: /CN=f2c7999df8fb353f4496a98000ea39d554eb1ba2
Certificate serial: 01A164C5E209189F3EEF93EBE0C52A0C4BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8seZnfj7NT9ElqmAAOo51VTrG6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.mft
Manifest number: 0132
Signing time: Thu 22 Oct 2026 18:00:52 +0000
Manifest this update: Thu 22 Oct 2026 18:00:52 +0000
Manifest next update: Fri 23 Oct 2026 18:00:52 +0000
Files and hashes: 1: 8seZnfj7NT9ElqmAAOo51VTrG6I.crl (hash: 8zIbvha+nf3drfmYcwnp6nt8PjYvsZVvGZpWLuu0bGU=)
2: mCHsCP7Hw-vDINkHUBUlMpgm4kc.roa (hash: I5GM+zycIKl3V+6KCvVt4wyzrZN/yulSVnyaG6oiE7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8seZnfj7NT9ElqmAAOo51VTrG6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:c5:e2:09:18:9f:3e:ef:93:eb:e0:c5:2a:0c:4b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2c7999df8fb353f4496a98000ea39d554eb1ba2
Validity
Not Before: Oct 22 18:00:52 2026 GMT
Not After : Oct 23 18:00:52 2026 GMT
Subject: CN=55872e9b6ed8d0ff3ff37ec35d21f3969f084b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:86:0b:56:91:cb:cc:2e:28:f6:a5:bc:22:
c5:77:44:a1:4a:08:8f:56:e3:62:8d:87:6f:47:ed:
90:72:a6:8a:af:fa:56:13:db:ca:86:bd:dd:95:57:
f1:49:4f:65:00:ca:fd:0d:de:16:b8:6b:b7:d1:fc:
26:ea:df:29:f5:6e:87:55:52:20:f6:23:76:c7:57:
25:40:b0:65:7e:1a:e1:27:7d:92:e3:c0:7e:b7:0d:
b7:d0:3d:ab:7e:f4:13:ae:39:48:42:97:b3:f1:75:
2f:f4:06:86:49:59:0f:67:a1:2c:db:a3:ac:e5:69:
22:fe:07:6d:28:76:bb:02:78:b5:3e:7e:57:4c:d0:
97:02:7d:6b:6b:1a:f1:32:80:e9:47:99:2d:06:6c:
fd:5b:9f:9d:4f:52:0b:a1:d3:2a:f4:b6:a9:09:29:
92:88:cf:ff:9b:16:83:d0:14:f4:62:71:a0:1d:04:
c1:59:66:ce:7b:c4:b3:19:c9:a3:b1:d2:95:fd:bb:
50:91:c2:e6:21:4c:35:05:8d:3d:a1:18:32:c1:41:
7c:2b:ce:46:dd:49:f7:c8:4f:14:7f:28:48:01:4d:
d9:60:55:03:d3:06:bd:02:73:f2:71:5e:f4:1a:f5:
90:fc:a2:91:d6:cd:ea:5e:cc:54:5b:aa:90:e3:83:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:87:2E:9B:6E:D8:D0:FF:3F:F3:7E:C3:5D:21:F3:96:9F:08:4B:33
X509v3 Authority Key Identifier:
keyid:F2:C7:99:9D:F8:FB:35:3F:44:96:A9:80:00:EA:39:D5:54:EB:1B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8seZnfj7NT9ElqmAAOo51VTrG6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6e:4e:3c:b0:28:a8:b9:0a:f9:0b:f4:e0:6f:ba:48:6d:84:
f9:c3:c2:b8:49:d9:bb:97:6b:ae:a3:18:69:24:52:c7:9a:3c:
9f:2f:82:53:c7:6f:32:de:c7:d3:8c:8f:69:50:bb:02:0c:d2:
7b:49:a7:9a:c7:2e:cf:3e:5b:07:60:90:f0:48:0b:e3:34:74:
04:bb:03:1f:e3:6d:51:04:d1:51:ba:86:62:96:6c:71:bd:94:
66:ce:0e:ed:62:b2:af:16:cb:72:e7:79:7f:c1:9b:0a:6d:36:
14:c4:e3:7f:13:de:d2:a8:8b:00:4f:8a:59:87:2a:52:40:0f:
be:c9:eb:25:77:b5:43:4a:d6:bb:09:39:e3:f3:d8:8d:c7:22:
da:19:41:9b:4c:36:bc:6b:ed:45:5b:d3:c1:a2:dc:fb:b4:1b:
b1:98:81:fd:f3:8b:0f:b6:b4:7a:9b:95:15:93:21:c3:e7:bb:
1f:02:cc:26:8a:4d:42:49:4c:c3:cb:99:2c:10:bc:47:18:c6:
99:70:d3:0f:43:d7:c1:97:b6:fb:d4:5c:5c:94:68:c7:74:f1:
95:1e:dd:14:e0:e1:ed:e0:8c:71:1d:fa:e4:29:f5:d7:b4:94:
f9:b3:b4:0f:56:85:c8:ef:35:76:f6:57:1a:10:ab:7a:5b:4a:
a8:19:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:29:18 2026 by rpki-client