Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: I79C77MQTemm/lpUFyS3pbMuqMngRDLVwgJlgq3tpQ8=
Subject key identifier: EE:98:C6:19:13:0B:24:2B:5A:78:2D:20:AB:3A:74:EE:EF:97:0A:5D
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 01A17DA9E4962B8896628C38738132EC121E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 19B0
Signing time: Tue 27 Oct 2026 14:00:48 +0000
Manifest this update: Tue 27 Oct 2026 14:00:48 +0000
Manifest next update: Wed 28 Oct 2026 14:00:48 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: W5jPBKFPjfl4nMvu9h+B4sWUibsw5gStt/EdsysRHa8=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:a9:e4:96:2b:88:96:62:8c:38:73:81:32:ec:12:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Oct 27 14:00:48 2026 GMT
Not After : Oct 28 14:00:48 2026 GMT
Subject: CN=ee98c619130b242b5a782d20ab3a74eeef970a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:5f:45:df:ee:a8:e1:09:96:47:bf:af:92:
d8:aa:1f:0f:49:a6:ee:be:c5:c7:ff:ea:ab:60:b2:
ec:ee:4a:e8:8b:da:de:4f:40:b3:29:fb:6c:b0:85:
5b:7c:03:11:4a:24:be:52:54:8e:68:c6:82:6f:70:
0e:25:0c:79:c6:f1:38:8e:c6:a7:33:30:1d:96:00:
f7:e5:08:30:4e:8b:db:8b:37:03:4d:97:e1:8a:3d:
3b:a5:74:ba:11:fb:a6:a0:23:b2:30:fb:4c:2b:ca:
1d:b7:b3:1d:2d:39:d8:db:50:d8:b9:9d:79:8d:d5:
11:b0:af:84:d3:67:3e:bf:8a:59:a6:72:33:b9:c5:
bd:29:9c:d6:68:27:66:0a:4f:e7:be:bd:d2:2d:84:
dd:e9:94:48:a0:5b:e3:18:4c:e5:b6:ea:5a:27:09:
04:0e:28:be:50:4d:e2:ae:fc:46:ea:c3:71:f2:b4:
09:aa:24:81:ac:68:38:ef:18:8f:cd:93:41:4d:03:
c3:f4:61:4d:e9:ff:54:22:8a:6a:3f:ed:1f:45:fe:
92:19:ba:2f:b4:9d:35:f7:7a:25:24:33:29:cd:e1:
89:4e:72:d0:a5:db:89:d4:da:e0:51:c4:89:79:00:
ef:24:9d:8f:51:a2:d8:28:ec:bf:b3:86:62:ec:bf:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:98:C6:19:13:0B:24:2B:5A:78:2D:20:AB:3A:74:EE:EF:97:0A:5D
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2d:71:8e:ab:4f:cd:20:71:0e:ef:84:32:c5:fb:cd:b9:5c:
c0:7a:59:54:7f:23:a1:17:ea:e8:a1:a2:99:b9:64:76:e5:e8:
de:3a:d3:0e:38:dd:90:4a:b1:79:f7:90:aa:8a:39:40:77:bd:
32:be:d1:39:85:48:41:00:7c:25:73:77:0e:b7:49:b3:b8:a1:
0a:f6:ac:cb:07:bb:13:22:bf:45:f3:82:e0:53:e6:7a:d2:55:
a1:29:79:4c:58:7f:89:92:4b:18:87:bf:1f:56:e7:e1:50:bb:
bf:df:fa:07:1b:a7:0f:8e:ec:90:6b:79:e0:50:ad:8c:68:fd:
9f:df:1e:32:40:dc:9b:a5:d8:b8:55:4d:a2:02:a9:3d:ea:22:
81:cd:22:9f:81:e7:89:6d:b9:23:52:66:a6:e9:0a:76:1d:c1:
c3:36:f6:fe:50:54:61:20:2d:15:8b:dc:15:56:f4:b9:73:1b:
c4:04:81:d8:27:64:ea:17:50:72:e3:a0:cd:4d:a6:33:f7:85:
84:ea:28:5a:82:01:ff:21:e9:28:af:91:7b:a4:f0:d2:2a:3d:
cc:e1:0e:1c:fd:b6:93:2c:69:57:81:73:47:22:5d:d8:1b:7e:
5e:e2:d1:e0:4a:82:b1:aa:94:66:eb:60:d5:aa:e3:74:0e:52:
60:9d:ce:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:28 2026 by rpki-client