Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: L3E6t1x1ZeZfXCuhkzuGbVJHkeIjPyIcS3Zzk/fyJEk=
Subject key identifier: F9:70:9F:EB:54:EE:23:05:6D:61:C9:B7:BF:4E:5B:C3:F7:7B:A3:34
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 01A14BE1ECA90988EDF8230DEBDB56EFCC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0F1B
Signing time: Sat 17 Oct 2026 22:00:59 +0000
Manifest this update: Sat 17 Oct 2026 22:00:59 +0000
Manifest next update: Sun 18 Oct 2026 22:00:59 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: k+4t9BON8egSdn0+IyHI9Nai4h1XAUh7uybfXvAma78=)
2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
3: w5-KHcw5iW2dZ4Gu6lDIZSylhAw.roa (hash: Mh4CtHCCAyOEQHT+0GZL5DrmI0KACaziKJcUGyMXvcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e1:ec:a9:09:88:ed:f8:23:0d:eb:db:56:ef:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Oct 17 22:00:59 2026 GMT
Not After : Oct 18 22:00:59 2026 GMT
Subject: CN=f9709feb54ee23056d61c9b7bf4e5bc3f77ba334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:69:82:dd:e6:22:21:94:7a:0e:fe:65:ec:
48:f8:f9:d5:88:a7:b6:92:3a:42:8f:12:05:56:af:
4a:69:1c:1c:8c:d1:ee:5a:31:44:cf:01:90:b1:0e:
16:34:0a:91:80:d5:5c:6a:3e:78:14:24:44:a9:90:
ef:7a:b7:c8:c8:70:f6:7e:63:ad:cb:bb:5d:03:c1:
c2:95:49:ba:bb:45:36:c2:af:b0:b4:e3:64:f8:c1:
be:f9:b5:8b:31:25:36:23:b4:cf:03:c3:d9:45:8e:
05:d0:68:fe:21:55:f4:52:94:0f:40:64:68:b2:51:
21:c9:73:a1:22:62:98:3e:0f:08:0e:48:96:a9:84:
d5:82:d7:7b:c6:54:7f:15:00:2b:95:9c:30:cf:0f:
8e:05:05:1f:8e:97:35:01:c3:94:87:d1:a8:2a:d0:
ae:47:93:8c:a4:ce:9d:dc:38:ab:39:f0:19:c3:d2:
0e:63:3b:e1:28:26:c7:37:fe:1a:c3:d2:61:56:b9:
16:d4:26:45:2b:fc:00:6c:3e:27:aa:8f:da:79:af:
d2:9d:1d:d7:55:11:f6:67:0e:55:6e:89:c3:2c:cd:
05:1b:32:27:de:47:58:10:7a:e8:eb:fa:da:e5:93:
49:7d:50:2c:b1:03:76:0a:a8:8b:f0:96:97:f3:75:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:70:9F:EB:54:EE:23:05:6D:61:C9:B7:BF:4E:5B:C3:F7:7B:A3:34
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ea:99:04:b1:e4:8a:2e:38:4e:76:a5:26:8b:47:f6:39:df:
c3:0f:fb:79:eb:24:fa:09:f0:c9:a2:67:50:dd:78:14:f2:ef:
24:e7:99:f8:67:46:71:d1:0c:41:85:f6:38:ba:ed:44:83:a4:
f4:0e:7b:9e:0a:61:7c:90:7f:2c:95:60:e3:ac:48:b0:db:94:
2c:7a:e0:17:42:6c:f5:b8:9e:bc:4f:72:39:c4:35:4d:7f:37:
33:86:0b:01:a3:1e:df:ef:eb:03:ec:71:41:1b:93:0c:14:97:
4b:58:d2:39:fe:b1:3f:0e:f9:d7:00:d8:a4:6b:d7:b1:3a:64:
de:dc:85:94:99:54:89:21:d0:3a:49:43:07:b2:2c:16:ec:d4:
28:99:da:c2:86:7f:a6:b3:87:95:9b:27:62:1a:29:45:0b:31:
dc:60:f5:e5:82:ce:c3:dc:87:67:9d:9b:70:83:1a:b7:a8:2b:
62:d1:34:aa:26:90:73:b3:87:9c:b7:59:90:4f:e1:57:65:a5:
68:b3:c3:9b:2c:c5:9c:9f:7c:4c:6b:14:5a:87:62:b6:ef:fd:
98:f8:5a:de:47:de:b0:c5:62:03:37:8c:6a:b5:f6:f4:2e:35:
c8:35:70:a3:1b:5a:9b:31:35:d7:d6:87:46:6a:eb:95:14:1c:
53:a0:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:36 2026 by rpki-client