Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: YU1OvbuZLAH48YeT+yTTzS/8XHupj4qtuwWxkyn8mck=
Subject key identifier: 7F:8A:54:E0:01:BD:16:8C:36:EE:60:6F:CB:EF:84:8F:98:F4:C2:F8
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 01A1569C7FCBE8333F7D4D45C454D9F0B7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 08A7
Signing time: Tue 20 Oct 2026 00:00:59 +0000
Manifest this update: Tue 20 Oct 2026 00:00:59 +0000
Manifest next update: Wed 21 Oct 2026 00:00:59 +0000
Files and hashes: 1: QdViC720LUGk8rbETFc7icn6Tx4.roa (hash: wxpHqs3D6Qy6qVLUeFjXp0nQiZFcnT7PBeNSBBjzhuM=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: 4WJlaWog0td3i6nzz5Gzq2Y+Th7l/n/LWuxkTRMLm5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9c:7f:cb:e8:33:3f:7d:4d:45:c4:54:d9:f0:b7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Oct 20 00:00:59 2026 GMT
Not After : Oct 21 00:00:59 2026 GMT
Subject: CN=7f8a54e001bd168c36ee606fcbef848f98f4c2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:62:6d:08:fe:1e:60:db:a7:cd:cd:17:2a:
62:af:de:e7:09:34:f0:56:f1:53:fb:04:45:40:ae:
e1:d1:a2:c3:68:6e:3b:b3:cb:fa:9d:64:2d:12:e9:
e7:b4:50:d9:be:7e:f5:57:99:a6:f1:51:78:74:4e:
06:e5:60:b2:4a:72:d2:f8:e4:39:4c:ff:f1:15:8d:
ec:3d:a8:d6:65:b8:37:36:66:08:f9:40:b5:5f:70:
6e:46:0a:43:f4:c6:b9:ed:c8:1b:f2:8c:32:a5:34:
84:50:a2:a7:25:d3:d4:50:93:58:5c:c1:a0:95:b5:
40:c6:f7:61:9c:e7:13:ae:95:a9:2e:7c:3a:65:1a:
cb:1b:be:6c:b7:ef:f7:a0:7b:fc:2b:30:e9:e7:be:
ea:ca:31:1a:7b:ab:d4:c6:aa:bc:ec:21:d6:fb:d4:
06:76:f5:9e:06:87:a3:1d:58:75:e3:e9:62:96:cb:
a2:03:cd:2b:d2:79:2b:bc:38:42:8a:a3:b4:04:58:
1c:15:9e:59:d4:c1:bc:93:00:0e:3c:da:8c:2f:d8:
92:79:77:44:ec:87:ca:e3:bb:0c:a0:a2:62:1f:a0:
e4:69:1b:19:54:7f:e2:51:c4:5a:18:6d:b3:02:bc:
00:1e:ef:f4:59:58:cf:1b:93:b6:53:66:aa:55:46:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8A:54:E0:01:BD:16:8C:36:EE:60:6F:CB:EF:84:8F:98:F4:C2:F8
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c4:39:1f:07:9a:84:d3:66:8b:ad:45:3b:1f:13:08:fe:10:
c9:a6:ce:74:94:97:d6:f7:49:f1:84:3b:66:97:48:4d:77:d3:
88:66:d2:7b:26:4b:9e:da:c5:9b:cf:ed:26:39:7c:5b:9e:05:
20:32:6f:da:1f:37:24:e7:ca:48:d7:72:8a:34:9a:15:06:56:
02:89:94:3f:55:76:d7:ff:d5:05:c3:2e:dc:0f:b6:f4:76:77:
e8:cf:bb:35:9b:52:33:dc:ed:ae:3e:3d:86:1b:20:1e:82:bb:
e4:08:e1:08:b9:b9:d5:68:ff:b5:f7:37:dc:38:2e:f7:d5:f2:
be:c4:1a:6c:c4:ff:a5:30:30:b2:48:97:61:0d:1e:12:5b:5c:
7c:04:f9:42:77:fc:71:7f:cf:53:82:e0:f6:b9:37:75:2b:87:
d6:4d:e8:49:c9:48:a3:fe:e3:4e:18:0e:dc:d4:69:05:dd:9b:
43:7a:64:64:31:26:49:6e:ad:7b:eb:ad:4d:da:ca:f9:b3:85:
f6:65:40:dc:d8:1a:fa:8a:a3:44:e8:f8:82:91:11:e1:8a:90:
9d:00:8d:26:89:c3:ce:99:64:c4:df:b3:c6:80:f0:56:1a:19:
fb:61:3a:d0:38:51:3c:5b:4d:ab:e0:f9:ae:98:8c:bb:26:bc:
e3:32:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:50:17 2026 by rpki-client