Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: jGcu64weEQVJ4GPyHQ/tvNzTFKR9HsOZ06jRakQfKWM=
Subject key identifier: DE:59:2F:D5:4E:25:14:D0:53:E0:90:78:FE:77:9D:9E:6F:75:04:B7
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 01A17DE10DD892C1A1720EF2C10F79EB5DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 15:01:03 +0000
Manifest this update: Tue 27 Oct 2026 15:01:03 +0000
Manifest next update: Wed 28 Oct 2026 15:01:03 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: BZ85cZQQ9hUBoA4MmIPXRsf0qb9ESmLI6BGQNfSq9u4=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:0d:d8:92:c1:a1:72:0e:f2:c1:0f:79:eb:5d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Oct 27 15:01:03 2026 GMT
Not After : Oct 28 15:01:03 2026 GMT
Subject: CN=de592fd54e2514d053e09078fe779d9e6f7504b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:43:0c:4b:a0:aa:d4:b7:06:56:e9:63:d7:
01:2f:89:11:7b:0a:5e:db:49:39:6b:0a:f1:3f:64:
34:fb:1a:e9:f2:d0:40:e3:96:b2:86:cd:1f:6f:f8:
4d:ef:e8:c2:8d:48:70:61:c0:9c:60:7c:b9:02:56:
20:6c:5e:a4:56:f7:bf:f7:ca:bb:12:8a:aa:ce:38:
6f:54:b1:6e:d5:81:7e:0d:57:81:8f:7e:36:4f:54:
22:7f:8d:06:bd:8e:1f:da:c6:6b:c2:8a:a8:b6:c3:
a9:d4:d3:46:e6:e3:41:ce:77:54:81:03:88:b0:95:
ae:cf:a1:e2:45:f0:2f:bd:03:a6:47:81:e4:6d:36:
01:67:bf:7e:83:f8:01:52:f0:f0:0c:2b:e2:34:ab:
1a:e7:ed:b5:72:a4:42:66:09:c5:b8:60:c5:8c:9c:
45:ff:cc:59:59:6f:ec:7c:fb:3d:c1:b0:b0:9e:ae:
16:c5:f4:28:01:23:e8:97:1f:f6:0c:46:49:e6:2b:
87:21:92:af:99:c0:1c:9d:bb:55:75:0c:88:cb:ba:
0b:e2:c6:35:4c:85:63:ef:ad:09:10:d1:63:d4:d8:
ba:30:31:ba:d9:81:ea:74:aa:9f:93:c6:34:e5:99:
88:fd:a1:ad:f5:4a:c7:2f:a5:3e:83:a8:87:30:cf:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:2F:D5:4E:25:14:D0:53:E0:90:78:FE:77:9D:9E:6F:75:04:B7
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e2:c0:4a:bb:d0:43:f9:f6:fd:b2:86:a0:56:a7:72:5f:b0:
27:72:96:80:f8:33:5e:28:58:8e:5a:e4:85:f2:96:b4:f5:13:
44:38:e4:c2:e5:d4:a5:58:ef:51:e0:16:e9:f6:45:fa:70:9b:
4d:6d:de:14:b9:89:6a:c9:ee:e9:97:db:f5:e8:5d:44:bf:58:
f2:3f:16:40:0f:a4:b0:43:33:db:20:4f:8c:34:b6:70:2b:2b:
5b:c4:64:7f:6f:33:22:c9:22:48:41:5a:d2:7c:8b:58:a8:d2:
d6:b1:a7:ff:c3:c1:d6:d9:65:bb:5b:18:80:68:a2:cd:61:03:
34:84:31:96:fb:b3:fa:a8:0f:1c:13:94:2d:99:00:ab:8f:7e:
64:86:e4:82:b8:52:43:9e:c9:93:6d:47:cb:fe:52:4c:40:d1:
e7:17:cb:d6:5c:69:00:69:f1:06:82:b5:a6:3f:88:43:b3:34:
62:de:59:f6:e8:99:2e:97:aa:34:4a:6a:51:b8:37:6e:63:85:
6f:ab:94:46:65:13:1f:7a:c4:d5:e1:b7:77:67:10:f6:14:b5:
e9:8b:76:a6:d7:ab:2f:d3:98:6a:5c:c5:4e:32:66:a0:69:89:
09:a1:58:ac:6d:a5:44:9e:57:c7:59:90:5c:73:45:75:75:ab:
62:d0:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:16 2026 by rpki-client