Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier: PyOoH7W9owkgGTqlfnZveAgUG46aK0E+X4mXY+OQFYA=
Subject key identifier: 41:73:C4:B1:CE:D7:F4:72:1B:2B:93:BD:49:0E:60:68:63:65:E3:82
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 01A1046E090D7B65499B253C6E80610EA332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number: 1AA0
Signing time: Sun 04 Oct 2026 01:01:22 +0000
Manifest this update: Sun 04 Oct 2026 01:01:22 +0000
Manifest next update: Mon 05 Oct 2026 01:01:22 +0000
Files and hashes: 1: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
2: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
3: a2QkPtyL0SmdjP5zau-ugnaW-EU.roa (hash: gM4VfQdg6WpZhQD+HowobTuTX+TLbbelKQeacFg1zmA=)
4: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
5: fFvKoiV0VFBu4-OsBK2GYOwQH4U.asa (hash: 6DUFJoRDSzQ5uZ9J7qiuNTODxM1mTEYJM2iS/0tUeFU=)
6: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: Ngzgxfca/59uO/6X8d4XBVBPNb6uqZb5N+JIDxu595A=)
7: iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (hash: oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=)
8: kZguNbKDxcwx7TTRhlYgy4TEeQ8.roa (hash: gALJSh2LcRXQqCp+dXvtYhynkz9C6FiHkuFaiMFg4sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:09:0d:7b:65:49:9b:25:3c:6e:80:61:0e:a3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Oct 4 01:01:22 2026 GMT
Not After : Oct 5 01:01:22 2026 GMT
Subject: CN=4173c4b1ced7f4721b2b93bd490e60686365e382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:77:0b:28:3e:9f:97:c7:d5:f4:b5:b4:9b:
be:07:44:9c:7e:14:02:35:9e:c2:a1:cc:d1:c4:1c:
1d:4d:7f:9f:fd:96:da:88:72:cf:19:9c:ff:2d:ee:
a1:fc:fa:66:0e:66:a7:8e:a8:76:97:63:cd:e3:6a:
8a:ca:fb:56:1e:a8:9f:e0:04:e9:b2:5f:2e:dc:6a:
16:84:be:64:8e:6c:93:df:99:ad:74:81:d2:a2:6a:
10:de:dd:80:6e:91:59:31:44:79:00:d1:84:71:e9:
62:3e:d5:c6:e8:bf:db:ce:97:c8:c3:bf:3f:51:96:
7e:1b:eb:bd:85:b7:25:27:60:9b:db:be:d6:47:4e:
d8:13:82:8e:ca:81:25:d1:02:3f:5d:69:3e:43:75:
1d:c4:21:19:11:fc:36:68:ac:e9:ea:82:14:74:2e:
a2:b0:d9:60:aa:8d:2e:b7:ae:71:77:b5:ed:1c:6e:
92:7a:2d:88:1b:bc:84:f8:30:75:cc:3d:0f:77:4e:
dc:6f:6e:b0:fd:92:bf:4b:72:77:01:1f:d5:35:cf:
79:3f:fd:fa:7d:50:58:42:40:9a:2e:64:00:e1:bb:
d1:a4:77:61:aa:32:c2:9a:8a:9e:9b:08:38:a1:77:
02:15:f7:3c:13:20:a9:c0:af:23:b2:23:c8:b7:d4:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:73:C4:B1:CE:D7:F4:72:1B:2B:93:BD:49:0E:60:68:63:65:E3:82
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3d:fc:31:7b:20:4d:5c:4c:10:0b:e7:ed:be:29:80:88:36:
61:18:d5:6a:b4:5e:81:66:f6:43:91:6f:3a:d2:b4:5e:6c:84:
be:88:b0:e0:23:c3:9e:fd:64:22:71:d5:25:14:20:7d:2b:2f:
72:ea:6d:d8:b4:71:7a:08:4a:ec:de:d3:93:44:42:25:cb:42:
94:2c:41:e4:93:83:1c:a5:9d:b7:46:76:d3:66:5a:7f:60:61:
37:8c:eb:33:a5:d6:88:a3:5f:c9:ed:a1:9e:7c:55:be:70:5d:
f1:15:60:96:d1:1f:63:c5:df:6c:6b:91:9d:3f:ef:ae:fd:ad:
cf:5a:48:1d:51:08:38:53:76:48:5c:6a:a2:00:f3:70:5e:e4:
65:fa:44:19:ed:99:3f:1f:a5:a5:1c:80:3a:2c:37:49:0b:f7:
0f:27:3f:2d:43:da:db:8c:f0:28:cf:34:7e:15:63:16:91:b4:
cc:d5:e1:63:07:c8:73:53:ad:0f:4a:36:5e:57:02:04:88:da:
46:68:4a:35:a1:67:50:23:d3:e2:20:b5:4c:07:ee:5d:0e:4f:
ab:0e:68:cb:43:d3:ba:0f:10:e1:59:d0:60:7b:29:0b:41:85:
e5:2e:6d:16:ce:bd:4a:fb:26:0e:01:82:5c:0c:3d:4e:9a:c5:
e7:fd:b0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:09:56 2026 by rpki-client