
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: BZzbq7nZFalEnmfHV4+D2nFTgAGBav3fwIZFi+YhUgc=
Subject key identifier: 39:3C:DE:F5:BF:B4:CB:DA:52:1F:51:2F:C0:E6:26:36:AD:DB:BD:75
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 01A1279E390BABA1CC021E1297513B4DF708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0E5C
Signing time: Sat 10 Oct 2026 21:00:43 +0000
Manifest this update: Sat 10 Oct 2026 21:00:43 +0000
Manifest next update: Sun 11 Oct 2026 21:00:43 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: hgRiR2iRNGD2TaZXSEs74R8lpEf2ck9C1AN/S5Q036w=)
2: oDHRY2p4X6qIRWZRDGncYz0E4F0.roa (hash: DS/v77bYi2U6NujVd5gI6DZQbrS7LjtyuAFDzI6STCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:39:0b:ab:a1:cc:02:1e:12:97:51:3b:4d:f7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Oct 10 21:00:43 2026 GMT
Not After : Oct 11 21:00:43 2026 GMT
Subject: CN=393cdef5bfb4cbda521f512fc0e62636addbbd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:b1:cc:81:ce:6a:05:c7:11:e5:3b:0c:94:
ea:37:3e:ce:d0:59:0b:a7:58:02:be:f8:0d:30:85:
25:bf:c2:26:3e:ec:ba:4e:0c:80:9c:2a:d5:10:e1:
fe:3d:c8:33:fb:2e:d3:e6:6f:49:34:95:cb:c9:9f:
7d:4f:67:6e:10:e6:01:f2:0f:c8:e9:02:56:d2:87:
e0:9e:8c:30:57:7e:67:31:16:b0:8d:54:61:2d:44:
43:aa:58:58:f4:20:04:94:96:30:0d:7d:87:8a:cd:
8b:27:0b:a4:e8:25:a1:90:da:85:b0:46:ab:e9:6c:
07:46:e7:09:ce:a9:c6:87:94:7c:86:52:ac:82:84:
25:d3:f8:e5:43:40:c8:3c:8f:68:6a:4f:7a:de:6e:
0f:2b:ad:94:8c:00:2f:91:b8:5b:1c:4e:ad:3f:9d:
02:b1:7b:05:8d:bc:fc:ac:52:60:3c:61:92:4b:21:
4e:3d:b9:60:aa:49:da:ea:f9:dd:3e:cd:72:6d:b3:
2f:46:19:63:0b:f5:74:9e:00:23:26:26:ae:97:2b:
f4:a1:6b:08:28:76:4b:cf:e1:74:95:8f:a5:ab:40:
f5:c7:1e:71:5a:25:2d:af:15:52:c6:f6:f1:7a:80:
5e:26:c2:5f:08:e3:97:44:99:9a:3c:3a:07:03:54:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:DE:F5:BF:B4:CB:DA:52:1F:51:2F:C0:E6:26:36:AD:DB:BD:75
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e2:a2:0b:cf:3f:01:d0:78:46:24:48:9b:34:ed:2f:41:24:
f2:f3:b5:1a:bc:4f:31:39:61:10:0c:0a:36:c1:83:64:a8:52:
2d:d7:4d:21:a7:76:cf:7c:99:ee:db:67:d0:df:5e:71:ec:ef:
1e:87:65:91:46:03:b2:95:4e:53:76:4b:80:66:7e:43:e1:12:
ec:44:c7:4b:38:04:c1:9b:0b:dc:f1:ae:f9:b8:28:dc:a3:e4:
23:b8:dd:49:1f:77:95:04:fe:3b:94:5d:18:9e:2c:80:e8:04:
28:ba:70:d9:be:a5:36:2a:ff:df:ff:87:1b:c6:23:7d:78:4a:
0b:98:90:e2:67:57:f5:f0:ae:0b:27:5d:e0:b9:42:ae:81:96:
76:9d:5c:be:f7:b3:d0:fe:c3:a4:a0:f8:35:26:0d:63:a6:e4:
9f:95:2c:aa:22:29:d0:e5:53:f2:0a:f5:5f:ba:ca:59:ec:53:
0b:7e:8c:7a:ac:6d:8f:18:9f:24:50:6f:57:77:bc:43:f3:05:
50:ab:e0:c1:50:78:04:35:f6:f6:bf:a3:f4:31:06:81:9c:ea:
1b:bd:ab:ab:97:7b:91:c8:5c:54:77:7c:69:86:78:f6:00:6c:
88:44:cf:96:34:89:39:ec:63:7d:a6:68:a3:b2:43:8a:9d:36:
84:0a:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:50:44 2026 by rpki-client