
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: q3E0u5lC//LTLdMjZ08FGumyET/sh6tzFxWQxnjhs4c=
Subject key identifier: 64:5E:1F:FA:6F:6B:8F:C8:EA:C3:E0:D7:93:AD:45:EE:6C:F8:7B:D6
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 01A13E5CEF6D10E852640D51B283C5D06AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 07:00:40 +0000
Manifest this update: Thu 15 Oct 2026 07:00:40 +0000
Manifest next update: Fri 16 Oct 2026 07:00:40 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: Mw13E3UKVeJavsq4/EHrF5srF1Y25qN2mVnGPLJSfMM=)
2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:ef:6d:10:e8:52:64:0d:51:b2:83:c5:d0:6a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Oct 15 07:00:40 2026 GMT
Not After : Oct 16 07:00:40 2026 GMT
Subject: CN=645e1ffa6f6b8fc8eac3e0d793ad45ee6cf87bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:d4:6c:33:b6:f8:8f:55:75:99:9b:85:d5:
2d:2d:54:2b:90:4c:43:24:23:df:d0:ae:6c:10:e6:
8a:9f:46:8c:82:ec:4a:c9:ce:65:4d:08:8e:a9:4d:
d3:07:3a:4b:55:5a:de:54:bb:21:f7:7b:e3:c5:b7:
2b:e2:25:de:06:09:36:66:ff:34:ce:46:bf:7e:02:
d5:d4:7c:8b:10:d9:32:74:a3:e6:20:2d:af:a5:0a:
a9:3c:ea:d3:b1:2c:32:02:c7:4c:e6:b9:5a:50:4f:
45:2f:ed:16:3f:f1:77:c4:50:ae:58:b8:49:72:35:
da:d9:ce:0a:f8:b6:f4:6d:03:38:10:e0:f7:42:b0:
cb:35:60:21:8d:f7:0e:48:12:36:50:21:22:a0:a3:
00:2d:66:92:fd:9e:f9:48:e3:44:92:6e:c6:bd:79:
7e:06:63:e9:a4:47:81:ca:e6:ca:31:f2:1f:84:c5:
77:43:d7:6a:06:04:fa:79:b5:d2:cf:5f:c0:10:d0:
83:39:43:db:6e:87:32:f1:f1:0a:04:2e:22:4a:e6:
e2:85:64:23:eb:53:3f:b2:43:13:dd:e0:ff:e6:5a:
7d:19:3d:6f:eb:54:e8:02:4c:18:e3:32:48:2a:cb:
87:de:6d:12:fe:93:76:d6:d9:3e:6f:86:ff:2e:6d:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5E:1F:FA:6F:6B:8F:C8:EA:C3:E0:D7:93:AD:45:EE:6C:F8:7B:D6
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9f:f2:a7:70:dc:23:b2:06:23:31:6a:5d:96:70:d1:87:5f:
12:49:55:65:d6:c9:78:58:20:02:2a:92:34:08:48:2e:09:57:
e7:7d:b3:e8:18:f4:63:f6:30:95:b9:33:c0:42:68:d8:d2:76:
fe:bd:e7:34:1f:02:ef:51:d1:d6:8f:b9:75:8b:23:de:f9:3c:
43:c1:ed:7b:4a:41:cd:02:4f:23:17:4a:4d:81:41:78:3f:90:
1e:21:a7:51:e1:94:ec:ed:c1:2b:dc:1d:f2:61:d1:39:ef:dc:
af:3b:c1:c8:f7:96:5c:51:bd:b7:da:9b:fe:85:d9:9a:bd:72:
42:75:df:f9:32:96:d5:6f:33:6e:25:04:d7:57:e5:2b:18:99:
90:6c:30:e7:6c:af:5a:39:e0:8b:c7:46:ef:fc:32:93:7d:54:
9f:a6:95:7c:ef:60:6a:7b:99:7c:9f:4f:c0:4a:d9:92:f3:1a:
12:72:de:0c:02:bf:7b:a7:72:5f:88:ff:16:14:f0:1d:6c:65:
1c:7b:6b:93:0f:29:7f:81:6c:69:7e:bf:b3:53:8d:5c:47:3f:
73:f2:f4:0e:e6:8b:e3:ea:4c:94:7d:69:cd:5f:8b:e0:24:ff:
57:32:cb:64:19:6d:91:45:7a:cc:96:05:5f:4b:67:1a:0d:07:
bd:36:4c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:07 2026 by rpki-client