Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: g7RA0Pq3cj0bFV8G49ZIf/IrSXRVFKvCfxM3QdViaz4=
Subject key identifier: 91:8E:EB:FB:83:F3:FA:25:58:83:A6:F9:4E:FE:3F:D9:45:DB:D8:01
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 01A17E85D297C5CA71F1768D0122776CC82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 1A57
Signing time: Tue 27 Oct 2026 18:01:01 +0000
Manifest this update: Tue 27 Oct 2026 18:01:01 +0000
Manifest next update: Wed 28 Oct 2026 18:01:01 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: aqfPn6PjFOGe9yfo7OuCcMQzX1b0I7i/uCamYF23kJM=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:d2:97:c5:ca:71:f1:76:8d:01:22:77:6c:c8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Oct 27 18:01:01 2026 GMT
Not After : Oct 28 18:01:01 2026 GMT
Subject: CN=918eebfb83f3fa255883a6f94efe3fd945dbd801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:0e:d2:aa:b8:b7:db:ec:db:80:83:3a:89:
8e:54:5d:4d:ac:ec:b6:7f:45:83:8e:4c:56:a6:da:
d6:fa:a6:ac:1d:3e:bb:79:37:3f:5b:23:85:50:d1:
4b:24:36:1d:14:2e:35:62:d0:5e:b1:2b:3f:83:93:
af:44:32:f2:34:69:a6:c1:97:d4:96:74:9e:cc:d3:
1f:d7:0b:47:6c:ff:39:ac:4d:85:5b:32:96:7c:65:
3b:7b:c0:7f:4f:51:59:21:a1:ec:d6:2f:ee:41:05:
87:fb:18:cd:1d:bc:83:76:0f:e9:96:3f:d0:29:7f:
6f:d4:04:a1:7a:b8:4e:d5:fd:b6:de:66:e7:61:20:
00:62:88:d1:66:db:64:74:c9:c3:92:8e:09:5d:f3:
d0:f8:dc:ac:44:e5:bd:72:a9:b4:fa:82:8a:fa:27:
ed:bb:b0:bf:0b:48:d1:78:73:5c:d3:ff:2d:b3:61:
ff:f0:b4:d9:c1:c8:38:bd:c6:a2:cf:0f:f2:2f:d1:
00:99:ed:45:02:0d:63:47:a5:e4:ad:f4:72:ef:a3:
5e:65:ab:cd:bc:34:6c:75:f0:35:f3:b0:a2:99:b1:
5d:ed:b9:8b:ef:c5:41:11:d8:97:1b:1a:9b:d3:63:
5b:bd:60:11:ff:70:0f:f6:44:d5:0a:51:1d:ca:b2:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8E:EB:FB:83:F3:FA:25:58:83:A6:F9:4E:FE:3F:D9:45:DB:D8:01
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2d:fa:5f:dc:4d:b2:27:f5:9f:6f:9a:6b:3e:83:78:11:95:
c9:cc:22:b7:2c:cc:19:8f:88:01:fc:fc:37:9d:90:83:2d:fe:
54:a1:ea:23:da:35:0c:3e:6b:42:a7:48:91:6f:b5:0e:0e:b3:
c2:a4:d1:78:df:3e:29:6c:de:65:8a:b1:eb:74:0b:72:1f:2b:
27:b6:8e:0b:fa:e7:15:56:2a:f9:68:af:05:71:2c:e5:cf:8d:
f0:2b:15:44:1a:23:8a:89:92:bb:b7:38:12:13:f6:9c:9e:b0:
75:d3:01:04:b3:df:f2:cf:ba:e4:fd:38:ce:e8:86:c1:c4:fb:
9a:a4:ea:e1:3b:47:74:71:31:49:20:e3:1b:87:e5:96:bc:9a:
2a:9d:57:b0:65:1a:a7:1d:3f:66:62:86:4b:b7:b3:6d:07:d3:
8d:80:5d:cb:7b:1d:b3:d4:1d:07:97:a3:b6:54:ae:b0:74:fc:
bf:ae:93:9c:68:d4:25:0d:a7:41:b8:cb:94:00:30:cf:d0:55:
d5:2d:12:55:b2:77:31:4a:0c:b4:02:c4:31:52:3e:09:0a:56:
c9:68:c9:e2:58:97:d6:b9:1b:15:5a:1f:33:20:67:1d:49:ca:
eb:1b:a4:14:fa:f4:08:7e:99:ff:87:e0:18:5e:e7:f5:78:af:
9f:3c:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:52:03 2026 by rpki-client