Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: nw02XkdvqBOIpLTX7qgZFYDLFN8Z2UZ26TII2WQm24c=
Subject key identifier: 42:E4:3E:93:A1:C8:AD:AF:23:AD:A7:0B:6F:41:CD:9C:9C:DF:B5:E1
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 01A1795F45FD487BE77C5EDDBA55D2F1F253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 101C
Signing time: Mon 26 Oct 2026 18:00:49 +0000
Manifest this update: Mon 26 Oct 2026 18:00:49 +0000
Manifest next update: Tue 27 Oct 2026 18:00:49 +0000
Files and hashes: 1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: VwGXqiJ/kUlqY70Hu9xQfbZPQDvws/wup0nLAeG+G+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5f:45:fd:48:7b:e7:7c:5e:dd:ba:55:d2:f1:f2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Oct 26 18:00:49 2026 GMT
Not After : Oct 27 18:00:49 2026 GMT
Subject: CN=42e43e93a1c8adaf23ada70b6f41cd9c9cdfb5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:69:d4:a2:76:83:5b:20:cb:da:85:69:2e:
d2:89:03:7c:00:b5:64:4c:a7:29:5a:9f:52:16:f5:
1f:3f:e4:c1:ee:b0:ec:cc:e4:bf:16:85:4f:9e:0b:
62:7d:fb:ab:29:08:60:6a:8a:6f:dc:c9:7f:73:dc:
f8:ff:d2:d5:53:7a:3e:df:a8:c0:21:2d:3a:c1:f0:
39:e9:30:c5:0d:9e:e5:b6:09:fe:03:e6:e5:7c:ec:
4f:2f:43:8d:ff:1e:a4:d0:5c:ac:33:2f:1d:aa:0d:
f4:3e:3c:18:cb:91:42:2e:01:7a:24:b3:db:4e:e1:
c0:10:91:54:a8:d5:1d:4e:03:1a:f6:3f:1f:82:63:
4f:2b:f2:f8:8b:01:88:e6:02:00:d7:85:b2:2f:31:
23:c4:d0:cc:e7:d7:22:b1:c8:83:6a:45:7d:86:29:
04:f7:e0:49:52:64:2f:a8:7b:d9:d6:ba:f9:c0:da:
2a:6e:a6:ba:40:b4:d4:b2:10:5a:87:d9:b1:e6:15:
23:66:d0:c4:94:88:08:91:db:d4:53:52:db:02:e0:
e2:d0:2a:d4:4b:c5:e9:38:76:21:a8:e0:dd:04:19:
41:c1:31:5a:eb:93:37:2b:f4:f7:b7:c0:4a:58:42:
30:1a:af:cf:79:f7:eb:96:cf:a9:c8:d0:cd:cc:11:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E4:3E:93:A1:C8:AD:AF:23:AD:A7:0B:6F:41:CD:9C:9C:DF:B5:E1
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b5:7a:97:f6:b1:23:db:e6:ae:14:cc:60:66:a2:53:c3:e1:
33:23:1d:0e:c3:f6:6b:c9:be:66:43:51:0a:a6:39:d4:3c:ed:
b2:1c:da:d4:4b:3b:63:7c:68:3f:6c:cd:e5:b2:42:28:51:f5:
0c:76:77:af:25:b3:56:ed:e4:33:7b:04:4e:4e:6e:3a:05:6a:
40:0a:7a:a2:4d:8d:4d:5c:35:e7:ca:e2:23:b0:4b:95:5c:ec:
60:73:c1:fc:f4:73:fd:fe:61:83:8b:b0:12:2c:71:1a:ba:b3:
f3:f2:27:65:1a:84:59:45:ad:96:0b:08:47:19:ef:d8:73:b4:
2a:24:46:78:87:85:b4:26:c0:b4:5f:44:95:63:3c:0b:76:a6:
32:ac:10:22:8e:41:ee:a5:9a:43:f9:d5:5e:14:d6:d2:53:dc:
61:3d:96:96:bc:f9:b5:58:9f:5a:75:b4:a6:d1:e3:f7:cf:6d:
66:85:4c:8d:19:2d:29:0a:4e:3b:df:67:4f:92:83:99:fb:fc:
1c:0b:a9:53:c6:c7:d7:f8:54:61:18:6a:37:90:38:ba:4e:1b:
6e:23:33:be:3e:ca:49:73:66:54:de:72:85:5f:e4:16:10:bd:
46:bf:0c:18:35:fb:72:91:53:78:e4:aa:66:56:94:1f:b6:91:
fb:28:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:23:21 2026 by rpki-client