Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: X1QiG+OMItUNwWNM8mW1FyMqYOSBCTDCgEsnUDEeuxM=
Subject key identifier: B0:45:77:07:B2:9D:AB:F9:E6:6D:2F:90:5C:74:8D:7E:96:C6:41:7E
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 01A1182A9816F00F3694E7DD4BC9899CDA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 14A1
Signing time: Wed 07 Oct 2026 21:00:06 +0000
Manifest this update: Wed 07 Oct 2026 21:00:06 +0000
Manifest next update: Thu 08 Oct 2026 21:00:06 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: tEAdE5/vTUouhfF6b9e6W84Tc+RhIC3jqCEA6y3htSY=)
2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 21:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:2a:98:16:f0:0f:36:94:e7:dd:4b:c9:89:9c:da:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Oct 7 21:00:06 2026 GMT
Not After : Oct 8 21:00:06 2026 GMT
Subject: CN=b0457707b29dabf9e66d2f905c748d7e96c6417e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:09:ba:87:e3:83:71:8e:a6:28:ad:43:8f:
e6:f1:0c:38:12:ac:83:01:ed:d6:24:a4:5e:a9:12:
b1:d9:cc:2d:06:41:23:23:ef:d8:fa:40:46:f3:db:
c3:57:84:3e:f4:d8:14:66:ee:71:5d:d4:c7:d3:8d:
14:f3:16:30:26:35:c0:02:e4:fa:c2:70:fa:eb:b1:
ce:77:b9:30:a1:13:43:e4:42:4f:84:2e:8b:c0:20:
3b:af:a6:c9:d2:90:5c:93:f0:02:ea:9d:eb:c2:a8:
50:f1:13:75:a9:dd:d6:b2:e7:7c:ce:fb:fe:69:ca:
ed:b1:35:17:a1:e4:27:f2:78:26:54:7b:e1:77:c0:
f4:c2:1b:47:d1:08:a9:a6:19:9d:25:48:fc:7a:ec:
0d:49:07:7d:66:5f:bf:af:db:23:07:c6:24:39:03:
43:24:ed:24:bb:5c:41:71:da:d6:f7:86:fc:b8:77:
ec:33:11:83:c6:bc:29:f0:58:37:f3:be:a2:4f:0c:
1b:72:31:8e:3e:b9:31:4c:a2:8d:10:bf:27:2a:cf:
83:f4:2f:d1:42:c6:a2:a9:a9:6c:19:23:fa:c3:09:
50:cf:8c:9a:0a:6c:19:50:5e:b5:7e:b8:25:40:68:
e4:96:7f:5c:2d:76:7f:14:05:6b:08:02:cf:93:7e:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:77:07:B2:9D:AB:F9:E6:6D:2F:90:5C:74:8D:7E:96:C6:41:7E
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6e:9a:42:aa:95:09:ac:44:41:d0:cd:ce:31:ac:cc:79:da:
c9:a4:9b:53:70:9b:3b:26:59:a6:ec:5a:06:89:52:9e:fc:6e:
7d:40:09:c5:08:28:82:69:32:6f:02:64:12:5a:6a:0f:46:77:
10:da:ff:a1:2b:72:16:74:a2:0b:b1:47:de:02:80:40:dd:ce:
9c:34:31:98:03:30:8b:17:ba:63:6b:4a:55:98:08:62:42:e9:
3a:e3:4b:46:f0:64:ee:32:07:51:e7:f3:f3:7f:ae:2d:44:07:
e2:7b:b3:70:90:d4:1a:33:b6:68:09:6b:b0:e0:8f:28:d1:74:
0a:95:4b:b9:16:00:87:05:ed:30:9a:14:07:dd:cd:27:36:e5:
37:c3:12:04:57:60:08:7a:c5:49:45:4d:39:69:a3:3a:c8:1a:
b6:1f:17:ed:94:68:1d:2f:71:5c:ba:a5:de:3f:44:f4:75:38:
90:6a:81:26:d6:1f:81:e0:32:76:7d:9f:be:6d:bc:92:4c:41:
45:63:fa:97:5b:ae:7b:3a:9f:6a:39:a5:14:9a:a5:79:67:71:
ab:ef:9f:f4:38:9f:7c:b8:a9:46:c6:24:f9:f4:bd:a8:34:ab:
07:7f:9d:69:97:7f:9f:0c:91:08:d2:b9:64:6f:fa:0f:79:f9:
6d:9d:fe:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:41:05 2026 by rpki-client