Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: GVkJz1SOQXvpEAPqO/xnZqPgXeiqjbSPDvSruCv+tlM=
Subject key identifier: FA:5D:6E:63:6B:0A:E2:7D:30:4A:16:0A:42:4C:D7:C5:AB:1F:B1:5E
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 01A03E5FCB1B21A5E93D3F621A0644B3BF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 137D
Signing time: Wed 26 Aug 2026 14:01:00 +0000
Manifest this update: Wed 26 Aug 2026 14:01:00 +0000
Manifest next update: Thu 27 Aug 2026 14:01:00 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: hZpSSM/koStmGWWLnXRrOTWfrPEAvKBPeaIx9PdSQ5U=)
2: NqvF_ewz1u5-ZwyZsvZfVCcv9eM.roa (hash: XSYe/oEdzIZhvEhSL0EIgTMEviLDbp4F9Od9G/pHsq4=)
3: RBXbDndLRayTNoddQBWUejwx-wI.roa (hash: fhavU3Dt7X4ridK/2PshYap/5RK0EYTK4ZX4zuqJn9E=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:cb:1b:21:a5:e9:3d:3f:62:1a:06:44:b3:bf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Aug 26 14:01:00 2026 GMT
Not After : Aug 27 14:01:00 2026 GMT
Subject: CN=fa5d6e636b0ae27d304a160a424cd7c5ab1fb15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:d0:4e:c4:b9:27:2a:af:c5:7f:94:34:de:
ba:5d:d6:b0:0a:a6:ec:bc:77:39:d2:8f:b6:f4:99:
6f:0e:b7:bd:9b:35:c5:60:60:16:36:36:a9:fb:df:
9b:7c:64:c3:5e:c0:af:51:5b:68:1a:42:5b:06:36:
c1:f1:c9:60:19:fc:5c:5c:98:f4:23:04:af:a7:b7:
00:52:14:f3:40:83:0a:ec:d1:e7:44:9c:8b:6e:69:
b9:de:37:aa:ec:6d:1f:9e:b5:81:6b:de:81:2e:24:
b0:f4:73:c0:b6:bf:b4:28:b1:97:17:b3:30:48:cc:
55:a8:bf:5a:ec:c9:c7:07:ad:66:b9:f6:e0:34:fd:
22:a2:82:f8:3a:c1:2e:a7:04:93:12:3d:a9:04:a5:
2b:ef:46:b6:fc:7b:22:d8:df:9e:9c:1b:01:61:6f:
56:a4:8d:61:54:6b:c9:7d:18:c1:b1:48:fa:42:8e:
2d:2f:b6:06:91:30:59:da:4e:e6:89:cf:f7:44:06:
39:fb:ea:89:6a:03:34:51:36:23:5a:13:28:87:46:
68:26:a3:15:1d:16:1c:ee:38:77:ce:1f:cb:d6:70:
eb:4e:01:9a:68:a6:a7:59:81:39:f5:38:4d:cb:f7:
0b:94:18:2b:87:18:a9:ba:49:cc:af:a9:8b:1c:21:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5D:6E:63:6B:0A:E2:7D:30:4A:16:0A:42:4C:D7:C5:AB:1F:B1:5E
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a9:3f:ae:af:03:a3:d3:4f:3a:b8:34:93:84:63:2a:e7:64:
aa:e0:2e:64:c4:c9:41:af:fc:5e:55:a1:8f:c1:12:18:a2:f1:
2f:a7:e5:74:31:12:2f:42:2b:b2:50:bf:2f:56:7f:bc:3d:aa:
e2:67:27:20:7f:a9:b9:fd:11:db:5d:82:ff:a7:de:55:ac:9a:
8a:8e:22:55:6c:4b:27:87:a0:3e:5e:02:81:ca:27:f8:4c:ec:
a8:d1:9f:33:76:8a:6a:72:01:b6:5f:c7:95:4f:f0:07:62:06:
56:93:dc:22:87:4d:8a:4e:59:97:0f:22:7d:43:2c:4f:ff:e1:
35:ad:75:11:ce:6e:43:13:5a:36:cf:72:37:a5:ca:5c:41:8e:
65:c3:cf:93:19:fe:23:16:70:7f:64:1d:1e:a3:b7:b7:03:7e:
48:4a:11:1a:10:f0:10:dd:26:19:2d:17:50:e2:8b:ff:b1:8a:
0a:74:40:cc:54:25:69:6b:c4:21:a0:97:1a:c7:01:cf:ad:6a:
4b:b1:35:3f:8c:a9:ad:0e:e5:76:bd:c4:b8:33:b9:5f:cb:aa:
a3:ae:42:8e:d1:fc:33:e5:7f:c9:2b:e8:1b:96:e9:a5:df:d9:
9c:23:a8:b7:f1:b3:9c:32:99:b5:33:d8:9a:a5:34:e0:b8:d0:
50:d5:e8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:58:01 2026 by rpki-client