Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
File: 8zk0PMbVHduONjgpmhu0lfRYCSE.mft (raw, json)
Hash identifier: og0L2cypdggzkcW0ZPQ9v1L/xwDAQZwRUWowKX8RuNA=
Subject key identifier: D4:13:20:5D:BC:7E:9F:8F:76:CC:3C:A5:AC:01:4F:7D:3A:03:77:62
Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Certificate serial: 01A18C0ABB03C5911474FB2D08299DAEECAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
Manifest number: 1ACC
Signing time: Fri 30 Oct 2026 09:01:15 +0000
Manifest this update: Fri 30 Oct 2026 09:01:15 +0000
Manifest next update: Sat 31 Oct 2026 09:01:15 +0000
Files and hashes: 1: 3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa (hash: mYQ4ggMgVLrFbz01ZBuOhgHTwYfwTmz0/Kv0k+37TBo=)
2: 8zk0PMbVHduONjgpmhu0lfRYCSE.crl (hash: AoijSppjn6I6l+JFWEf2rcPiGl6mH0l7bmM9dgAHAF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:bb:03:c5:91:14:74:fb:2d:08:29:9d:ae:ec:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Validity
Not Before: Oct 30 09:01:15 2026 GMT
Not After : Oct 31 09:01:15 2026 GMT
Subject: CN=d413205dbc7e9f8f76cc3ca5ac014f7d3a037762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:36:7e:af:e5:da:7d:e0:bb:17:69:c8:22:
8d:33:4c:7f:e3:15:e4:1b:e5:ea:3d:98:c1:c2:80:
a7:19:77:b1:2c:31:c9:a4:23:3c:e0:1c:79:ad:e6:
5a:ce:9f:dc:54:b3:5a:be:c4:0f:e8:c4:b8:77:37:
44:9a:73:13:14:73:57:30:9e:19:45:27:8e:f5:06:
af:d3:8f:a9:e6:d8:ce:07:38:74:b9:5b:5e:7b:bf:
d2:c9:4d:5e:6c:48:e6:71:4f:8a:ac:db:fa:b3:d2:
77:3e:06:a3:5c:0a:52:b9:8b:e2:4f:e5:4f:83:a2:
71:56:f8:68:6d:b9:c7:ce:e7:2a:f2:90:f2:86:db:
c2:f9:50:23:63:7b:7a:c9:02:1a:b9:c7:55:2c:34:
1c:cf:d9:75:76:88:15:a6:56:cd:b4:07:06:91:e6:
d2:ab:24:1d:c7:8a:5a:37:ae:8a:21:7f:3c:81:04:
8f:72:2a:d9:8a:f0:21:0a:ed:09:d9:57:c2:e1:90:
04:87:7a:30:f9:2c:b8:00:bd:be:a9:11:77:e0:6f:
49:2f:59:f7:14:f1:95:e9:81:99:94:55:28:1f:75:
48:7f:c6:5f:da:fa:b7:80:fa:4e:4c:dc:06:b9:31:
74:59:75:5a:fa:12:0f:f0:9e:8d:cb:78:93:7b:a5:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:20:5D:BC:7E:9F:8F:76:CC:3C:A5:AC:01:4F:7D:3A:03:77:62
X509v3 Authority Key Identifier:
keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5b:64:c5:e4:b6:ec:47:2f:7f:6c:da:d7:65:71:9d:e5:74:
17:95:09:6a:31:20:33:ce:79:7d:17:da:0b:cb:f7:08:84:a7:
06:c9:b7:e9:30:61:47:e9:7e:5c:d8:d8:8b:68:c1:ff:ff:21:
9c:8c:45:77:27:2e:6e:29:9a:a7:6b:6e:9f:22:9c:85:88:66:
7d:81:5b:a4:af:d9:38:46:cf:f0:4b:3b:74:67:d6:5f:5f:03:
fa:69:59:cf:f3:82:97:ae:90:32:16:6c:e3:81:39:58:fe:47:
20:4e:32:1a:64:b5:a5:82:7f:e6:47:1f:5d:d0:94:76:c9:25:
12:a7:00:74:c6:6e:93:8c:84:64:96:ed:64:7b:8c:57:f5:d7:
32:1c:4a:12:1f:57:4f:00:dc:65:b6:32:03:31:7c:19:37:cc:
b8:71:c9:f4:e6:b4:93:75:70:7c:18:bc:fe:30:f6:51:8d:3c:
a7:91:4f:8d:3b:11:7e:28:c6:91:91:7b:27:b2:1e:fa:b2:ec:
35:0d:35:76:1f:92:fc:88:32:c5:31:26:1d:6d:75:f2:7e:6e:
04:2f:ba:5e:96:6a:10:76:9b:63:03:c1:c0:fb:bb:02:88:21:
41:8f:af:ba:23:e0:ec:82:e9:27:a0:92:f0:2c:3c:cd:0d:dc:
b1:f1:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:24:12 2026 by rpki-client