Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: 1UMwGXK5+VErx76lBL6nDqcX96i4hBheG64WXtjj/1I=
Subject key identifier: 6F:DA:68:2E:37:E8:04:5A:4A:25:A4:AC:EF:83:EA:B0:F1:CA:3B:12
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 01A16D92551233020E2F32148D1DE17C017A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 141A
Signing time: Sat 24 Oct 2026 11:01:08 +0000
Manifest this update: Sat 24 Oct 2026 11:01:08 +0000
Manifest next update: Sun 25 Oct 2026 11:01:08 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: Or31aQXl5r5uy1UEb/XqXieb5MAtYgGuktUVjlr5pfo=)
2: NqvF_ewz1u5-ZwyZsvZfVCcv9eM.roa (hash: XSYe/oEdzIZhvEhSL0EIgTMEviLDbp4F9Od9G/pHsq4=)
3: RBXbDndLRayTNoddQBWUejwx-wI.roa (hash: fhavU3Dt7X4ridK/2PshYap/5RK0EYTK4ZX4zuqJn9E=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:92:55:12:33:02:0e:2f:32:14:8d:1d:e1:7c:01:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Oct 24 11:01:08 2026 GMT
Not After : Oct 25 11:01:08 2026 GMT
Subject: CN=6fda682e37e8045a4a25a4acef83eab0f1ca3b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:34:07:67:78:88:c0:10:a2:5d:8c:8c:78:
30:96:c7:5d:a7:e5:25:83:e2:cf:72:90:e7:7e:dd:
20:29:ed:97:36:32:85:20:1c:cb:b5:98:5d:4a:47:
ce:ab:78:8b:c8:cf:71:76:88:98:c9:ee:3e:ba:6d:
35:c7:6b:52:33:6a:e8:ef:a0:23:13:76:74:9f:f4:
e2:a0:48:26:1d:ca:f4:5f:26:cb:76:33:88:74:a2:
e4:f6:4b:58:e1:9c:b2:b2:55:00:69:90:3b:6b:a2:
c5:4f:b8:f5:3f:6b:8e:3f:4e:1f:7a:e3:d1:9a:85:
d3:34:cf:56:16:17:99:04:bc:bd:c2:b6:2e:4e:14:
3e:fc:fa:e7:22:16:da:c8:7e:a5:da:9d:81:cc:34:
37:e4:c1:91:a3:a8:a6:3b:02:37:08:6e:f0:76:bb:
7d:76:aa:c9:d4:6a:85:89:86:22:e4:13:08:85:d7:
0f:d4:05:c2:67:ea:10:d6:13:82:20:d4:89:05:2d:
0f:cd:e9:22:f1:9e:e9:90:bc:bc:6a:4e:e7:2a:52:
bb:ea:90:43:ae:23:d8:ae:ac:00:0a:5d:be:e5:cb:
50:67:a2:0c:41:48:18:83:c0:cb:82:b8:1b:6f:da:
f1:57:79:54:78:44:e1:67:d7:5f:75:94:34:10:55:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DA:68:2E:37:E8:04:5A:4A:25:A4:AC:EF:83:EA:B0:F1:CA:3B:12
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ad:e6:6a:52:be:6b:6a:b8:d6:43:a7:b6:5e:7e:b4:11:d0:
f2:d6:38:08:03:d4:6b:91:e3:4b:0d:33:31:a8:df:9a:4d:10:
2c:ef:a2:68:c3:4f:71:47:43:69:9d:c9:eb:94:d9:c4:a8:60:
b4:20:ff:3c:be:7f:2b:e1:1f:bc:40:e2:15:47:8d:88:03:4b:
d7:21:56:0a:1d:ca:71:e8:ae:3b:c7:9d:c5:cf:31:0e:73:c8:
c3:95:ad:eb:b6:29:b7:a6:47:a5:00:f0:36:9d:2c:53:e5:7b:
cd:3d:4c:36:87:38:56:5e:2c:d1:31:72:f3:d9:86:37:bb:97:
a2:74:17:58:91:05:2b:80:9d:2f:9d:54:1a:53:91:a9:95:3f:
a5:e9:57:ac:40:58:56:d6:c5:ed:5f:a0:10:b2:02:2c:2c:d7:
41:7d:ff:00:66:ea:17:a6:ea:4c:01:2c:cf:39:e9:d2:0b:c3:
3f:74:f7:36:84:40:2f:0e:78:4b:7d:1b:44:94:66:9e:32:b7:
d6:a0:da:94:78:75:43:d9:ef:39:b6:50:1d:92:01:2c:4f:22:
89:fd:00:a5:d2:1e:c9:de:8d:6d:c5:b1:a3:1f:60:8b:8f:6a:
3e:25:57:8c:ac:57:cc:a8:c5:2f:3a:a3:01:7c:59:23:08:a2:
a0:48:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:51:00 2026 by rpki-client