Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
File: 8457gT6aM4MKE7jBiDhMLcTHXJc.mft (raw, json)
Hash identifier: xxmqZOKZxIBg5Zd3kTa74jPVKooaGevpZR/4NSDR85Y=
Subject key identifier: 4D:5E:EA:B7:5F:2D:16:47:E5:1F:00:D8:46:A5:7F:3E:0A:BF:E4:2C
Authority key identifier: F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
Certificate issuer: /CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Certificate serial: 01A11598983B5DB250C829EB9DDE8F4A4B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
Manifest number: 0109
Signing time: Wed 07 Oct 2026 09:01:24 +0000
Manifest this update: Wed 07 Oct 2026 09:01:24 +0000
Manifest next update: Thu 08 Oct 2026 09:01:24 +0000
Files and hashes: 1: 1lHC3eEb4JgrWUhgQdZGe237xNE.roa (hash: tiibMI6HO4qP8jmiKq9SAdjkuilfWtaVHKPxHUTz4wg=)
2: 8457gT6aM4MKE7jBiDhMLcTHXJc.crl (hash: v5hAbNm3+Hkw4rdEd1T5Hzew5iv7iYrDFXEQsBT0Gxs=)
3: PYTmdV0F9SG-733WM6hd2UxmEKQ.roa (hash: C/kjeN97nB1/VJQ7m/rVNOnzP/hxeC+2PpOB/KvRfaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:98:98:3b:5d:b2:50:c8:29:eb:9d:de:8f:4a:4b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Validity
Not Before: Oct 7 09:01:24 2026 GMT
Not After : Oct 8 09:01:24 2026 GMT
Subject: CN=4d5eeab75f2d1647e51f00d846a57f3e0abfe42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:34:3f:2b:46:2c:69:ec:ee:6b:a9:5f:cc:
9d:2b:51:48:2e:35:11:b0:cb:14:9c:de:02:35:f1:
f6:4b:b4:20:18:7d:d8:97:53:4c:03:d8:7b:8b:9d:
83:6d:4c:8c:bc:a4:aa:00:2b:05:60:81:a4:d5:87:
ab:7d:d9:b9:ba:98:d0:ab:d8:42:1f:b5:7a:59:bc:
fe:27:51:a0:d4:ff:f0:46:b3:f0:d1:6e:18:e5:e6:
c9:72:b5:83:85:5a:ab:23:44:27:a0:76:5d:45:96:
bb:6b:06:70:ae:94:4a:94:10:ee:f6:18:a1:b5:f9:
14:d2:4a:af:22:e4:b2:ee:e8:0d:bf:8a:0e:18:1d:
bc:5d:f4:a5:85:b0:fd:f5:e1:ae:cb:02:54:09:00:
04:60:92:9d:14:95:a5:08:3f:10:18:7c:22:e7:68:
9a:f7:57:27:93:8d:6d:fc:9a:22:4b:13:24:0e:08:
e4:92:1f:9b:c6:65:70:df:a0:6e:16:11:8d:c2:cf:
d5:ec:f8:f2:0c:21:de:4e:5a:28:15:ce:de:f7:44:
e8:a7:ff:fd:a8:5d:ce:7b:cd:0a:f3:0d:5a:84:ba:
c7:69:33:dd:ee:70:02:0c:d1:09:89:ea:c3:23:9d:
1c:12:0c:8e:69:be:b5:91:81:1c:f6:de:1a:ba:09:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5E:EA:B7:5F:2D:16:47:E5:1F:00:D8:46:A5:7F:3E:0A:BF:E4:2C
X509v3 Authority Key Identifier:
keyid:F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:24:16:44:1e:b8:6a:87:fa:72:65:9b:71:32:32:f2:88:86:
90:2c:2e:ce:c4:6a:38:1a:01:f0:5e:fc:56:80:43:5a:50:ba:
89:93:d1:02:01:b7:d5:e3:a1:21:f4:50:ec:4e:86:4e:67:e1:
99:c7:28:87:3f:39:88:0c:66:5b:12:a0:70:c9:db:ac:34:41:
02:48:29:79:b5:55:2e:56:ef:5e:52:94:b2:ed:52:71:26:f8:
88:e3:d1:eb:9e:52:19:5c:f0:03:de:8c:39:74:a2:d3:0c:0c:
64:fc:7e:bc:e3:c4:b3:e3:2b:f3:72:cc:6e:ae:7c:97:ab:e4:
4b:d8:c2:62:aa:0f:c8:ed:e0:15:f8:cc:4c:65:19:8f:6a:1e:
10:93:b7:e2:ea:19:4b:80:58:a0:80:ba:82:66:e3:fa:0f:e0:
3b:33:92:81:f9:84:11:e2:4b:5d:5d:49:4f:13:48:e7:93:86:
f0:52:c4:9a:0d:70:b7:f4:64:68:19:b7:79:29:54:31:a4:f9:
3a:4f:30:0a:d7:66:fa:8a:36:fe:c1:da:e8:61:07:74:6c:6c:
27:2f:33:86:51:09:f9:eb:1c:63:dc:33:c3:62:4c:cd:aa:e6:
0e:2e:48:3b:bf:aa:24:53:2f:58:f9:73:82:12:43:56:1b:61:
f6:6e:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:03:44 2026 by rpki-client