Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: /4SXf/woHALI2b94TCBWNUIrzqltMDQS4pxqOPwHYF4=
Subject key identifier: 0B:F8:63:37:A5:76:33:1F:5A:25:98:CA:C7:60:6B:E5:DC:25:FF:BE
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 01A17BBB3FE55EF55CCAE419D059F22210F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 19AF
Signing time: Tue 27 Oct 2026 05:00:31 +0000
Manifest this update: Tue 27 Oct 2026 05:00:31 +0000
Manifest next update: Wed 28 Oct 2026 05:00:31 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: 2QbFUzbaCmrTdcdwsCoK5nyqXGGIyE9ivpFJlHDvGrk=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:3f:e5:5e:f5:5c:ca:e4:19:d0:59:f2:22:10:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Oct 27 05:00:31 2026 GMT
Not After : Oct 28 05:00:31 2026 GMT
Subject: CN=0bf86337a576331f5a2598cac7606be5dc25ffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:a1:70:32:d0:d5:3b:0d:7d:ce:be:b8:3e:
fe:16:9b:40:72:bd:e6:f6:49:87:2d:cc:7a:1e:37:
1c:bd:f7:9c:ff:c3:5f:ee:f7:95:20:62:3e:62:3b:
d8:11:a8:0c:51:08:6c:1c:20:54:24:d7:f9:08:dd:
b1:e5:91:00:ce:00:61:ed:b2:ad:2e:f0:fc:83:07:
a8:5d:46:74:db:cf:db:ed:b6:1a:c1:92:1e:6d:8a:
64:10:18:a3:73:b5:57:be:fb:f1:4a:ed:81:20:c3:
1e:0e:17:79:5e:6e:f2:bb:f8:5e:a2:f6:2f:dd:c6:
35:d8:d0:f8:b2:24:bc:5a:80:7e:c7:34:a3:d3:82:
15:87:41:95:9c:6e:9e:bb:80:af:54:84:19:f3:0f:
90:4f:aa:54:36:bb:e2:73:31:3c:dd:2d:05:6a:78:
16:1f:0e:0c:77:b7:08:f7:d4:50:1c:0c:76:56:f5:
25:25:e4:22:7e:11:1e:93:53:e8:50:b0:38:72:03:
ee:66:37:30:42:a0:b2:99:04:9c:67:b4:3b:84:07:
52:f7:e6:ad:60:91:d5:3e:e6:a2:16:3a:94:2f:1c:
df:93:d4:ab:0f:14:a5:49:fe:46:0e:a3:e4:5c:c2:
49:c6:44:dc:56:b2:1c:0e:cb:4f:97:70:8b:96:1b:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F8:63:37:A5:76:33:1F:5A:25:98:CA:C7:60:6B:E5:DC:25:FF:BE
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dc:80:b3:dc:75:80:13:d3:ef:28:da:51:78:51:5b:97:19:
59:0b:0a:c5:66:cb:54:03:6b:23:e3:8e:d8:74:74:ef:55:6c:
ea:89:65:92:09:f7:25:a7:50:fe:3c:b9:0f:5d:44:f4:b0:84:
ea:47:76:6c:43:11:a0:8f:88:5f:ce:46:fd:9d:7d:cb:0a:b7:
d1:3e:88:ca:92:df:22:5c:b9:28:52:3f:11:5a:a5:d2:c9:60:
6b:d5:ef:80:0a:ca:cb:87:d5:2c:62:8a:92:ca:7a:7b:73:f8:
a6:46:54:5d:60:40:bf:87:67:08:e7:92:26:52:04:00:3d:12:
0d:4d:4e:b5:d3:ed:09:c5:2b:08:eb:41:e3:d7:4c:9e:e1:38:
47:10:01:49:d8:a0:14:54:2e:5d:3b:b1:bb:3f:5d:36:3b:31:
20:77:6f:fa:0b:81:0b:24:f6:ec:f8:c4:f1:e0:12:60:10:69:
08:af:a5:e8:59:a8:33:37:4b:94:00:2e:96:82:42:49:a8:74:
b2:4d:42:34:6c:4c:dc:c6:b9:a1:c4:bf:63:c0:91:45:3b:6c:
b8:83:cc:55:3d:2a:0c:ea:c1:6c:2b:2b:ea:08:95:af:4c:e3:
3b:65:44:d0:62:6e:55:06:19:a2:b9:8f:33:ca:4a:74:01:b1:
64:4f:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:25 2026 by rpki-client