Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: H6Qw/Kl2urZSVt+lstRZJdC3HCk0C+VjK3VIAmI1Xa4=
Subject key identifier: A7:D6:9F:17:7B:C6:C4:D6:CA:84:CF:73:57:AD:E3:14:79:03:7E:2C
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 01A1735CF18E2D4FB240F2777A7EFF05E153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 04EB
Signing time: Sun 25 Oct 2026 14:00:33 +0000
Manifest this update: Sun 25 Oct 2026 14:00:33 +0000
Manifest next update: Mon 26 Oct 2026 14:00:33 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: 8YUpyT0qTQCA83gfXLcMToNVyaoll6SUEJkry3yf2rc=)
2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:5c:f1:8e:2d:4f:b2:40:f2:77:7a:7e:ff:05:e1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Oct 25 14:00:33 2026 GMT
Not After : Oct 26 14:00:33 2026 GMT
Subject: CN=a7d69f177bc6c4d6ca84cf7357ade31479037e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:79:19:42:07:50:0b:36:6c:ba:59:c3:98:
61:63:29:9a:eb:80:d4:ef:4e:f8:18:54:b4:8b:56:
d2:7e:49:cb:07:66:61:71:83:bb:22:a1:95:89:89:
d5:1e:6e:1d:83:96:dd:92:cc:ef:ad:dd:76:14:64:
b7:cb:aa:2b:70:74:d6:99:84:e3:b8:05:7a:89:c6:
68:28:50:44:c2:13:3e:92:73:d5:81:d9:24:cb:c2:
2c:d2:a8:f4:b9:f0:32:a9:62:8f:4a:45:24:35:40:
65:62:74:9a:9d:b9:62:13:17:cb:d6:69:e9:fb:5f:
b4:d4:c7:2d:54:9b:5d:7f:9b:b2:c4:51:40:74:23:
df:93:1c:64:a0:96:e9:60:69:d2:b2:bd:94:13:a1:
09:30:e6:91:ba:ff:be:6d:55:92:89:56:6b:75:4d:
8a:14:53:0f:94:8f:7e:ab:c0:11:60:83:cb:db:1b:
b5:49:0c:98:48:96:29:25:1b:4c:11:ca:c9:72:42:
e1:64:ae:2b:b5:5e:22:8a:5c:7c:c2:fe:bf:f1:47:
13:e9:eb:a6:d1:54:b5:41:6f:0c:67:e7:84:1b:74:
07:14:b9:30:21:58:13:a0:77:7f:81:bb:55:9b:9b:
e3:ba:66:e7:0c:33:2c:8c:d1:3b:ac:4f:9b:4a:e1:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:9F:17:7B:C6:C4:D6:CA:84:CF:73:57:AD:E3:14:79:03:7E:2C
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b9:b5:81:b3:fd:7a:f5:9f:c5:1f:7f:43:e7:df:a5:0b:f4:
25:a4:63:13:6b:9b:40:9f:ab:7a:63:59:a5:f8:13:8d:5c:10:
5c:e7:be:31:a6:df:88:ff:a3:6d:28:07:d1:99:0a:89:c9:c9:
97:cc:0c:76:b3:01:f0:96:10:e0:83:65:5f:06:62:23:05:30:
71:6b:7f:09:82:fc:0a:a6:be:e1:80:21:aa:1c:ab:b3:7b:a6:
26:55:06:39:b2:93:ce:f9:97:a5:79:22:ab:4f:5c:53:3d:93:
d7:ab:ef:9f:bd:10:c5:67:cc:7e:84:2a:22:4f:0c:8f:c0:73:
43:76:20:c0:e8:5e:00:31:46:1d:2c:e1:3d:d8:8f:a8:5e:3d:
9c:8d:43:91:68:96:9c:28:29:83:f4:9b:d6:c7:77:dd:95:fe:
80:3f:4e:ed:ba:31:5b:d4:9a:77:33:53:53:8a:59:7f:45:1d:
a3:df:d6:96:a2:ba:e0:a7:66:c2:ad:03:04:1d:1b:a6:7b:e6:
97:65:c0:be:22:09:a2:19:93:86:56:33:62:ea:11:ae:07:6f:
44:29:40:17:3f:d2:06:b8:b2:3c:29:ea:6e:f0:f9:40:28:9a:
51:96:9f:84:1a:0c:f2:74:f3:99:26:57:45:05:cc:7d:a2:d9:
0f:07:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:12:25 2026 by rpki-client