Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: iwJ+Gfpmnm8kDvsZYzXVRtybF3W5hH0RlZyI2iniRHw=
Subject key identifier: 13:48:70:36:9F:E9:C5:FE:84:95:2B:69:64:7E:EB:EB:6D:EC:12:B8
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 01A17BF3183510B221CF1FCC95AC351D9B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 152A
Signing time: Tue 27 Oct 2026 06:01:31 +0000
Manifest this update: Tue 27 Oct 2026 06:01:31 +0000
Manifest next update: Wed 28 Oct 2026 06:01:31 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: qwwrGe75kq4tgNHfUFdTbWSeHNGNvOfEr5gcs3RNa/A=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f3:18:35:10:b2:21:cf:1f:cc:95:ac:35:1d:9b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Oct 27 06:01:31 2026 GMT
Not After : Oct 28 06:01:31 2026 GMT
Subject: CN=134870369fe9c5fe84952b69647eebeb6dec12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:75:ed:77:39:0b:86:fc:5e:ca:2c:95:bc:
65:b3:dc:8c:7f:c2:40:be:55:98:cc:ba:9d:2f:c2:
8d:23:e9:95:70:91:d0:fb:b1:70:69:b9:5b:18:30:
4d:f6:db:ed:1c:2f:5b:f6:d8:8f:d3:3c:c9:1a:31:
ea:c5:a3:be:fa:06:e7:9d:aa:70:9f:63:e2:ea:5d:
7a:fa:72:33:0b:82:cb:f4:fc:2e:77:4e:63:f1:9c:
49:06:01:ee:7c:2b:e9:60:7a:6f:04:b4:98:db:ff:
91:64:e5:40:3a:00:b6:bd:eb:56:64:a9:43:43:73:
ac:7b:b4:e5:fb:c8:b3:78:ae:f2:60:a0:00:2d:4a:
33:2c:c2:2b:e1:59:7b:2b:6f:bc:e4:af:09:57:41:
7c:d3:e7:f8:77:5f:e4:b0:ad:4f:27:3c:e2:6c:29:
28:de:ad:b8:61:19:da:d3:ca:0e:bd:24:99:35:9b:
63:23:64:d7:a6:dd:aa:a0:f8:96:44:35:84:d6:1b:
a5:23:c0:12:d7:62:64:00:b8:2a:71:e2:60:ca:81:
01:e8:af:1b:57:8c:2a:33:ab:7e:b5:bc:76:c2:c8:
80:9b:7b:23:dd:6a:2b:d9:df:da:f2:aa:aa:ea:4a:
86:84:92:ea:47:ac:24:ad:87:a5:bd:d2:11:89:7e:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:48:70:36:9F:E9:C5:FE:84:95:2B:69:64:7E:EB:EB:6D:EC:12:B8
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:6e:60:a0:ee:8a:4c:24:99:52:84:a6:73:ae:65:d7:77:a9:
af:54:9c:83:3a:6c:75:f5:9c:6e:d9:03:8a:b3:b4:79:64:e6:
38:dc:5c:bb:95:31:ab:2b:f3:27:95:39:04:7b:95:a6:cc:30:
c2:33:4b:5c:1d:33:6f:3a:d8:0f:8b:20:5a:fc:66:17:4c:99:
af:90:4f:25:ca:35:c8:27:ff:9a:b7:6b:17:a7:ba:20:5e:b7:
b5:ef:f4:dd:c9:2e:e4:b2:a9:3b:64:35:08:78:37:04:4c:22:
6b:eb:2d:34:de:89:40:42:57:54:2c:8a:c3:6a:ef:40:2b:ec:
00:9f:02:6d:d0:77:d8:6a:49:0d:a0:90:98:13:bd:6a:08:11:
92:d9:62:42:40:b5:64:74:53:4a:75:8d:25:56:94:8d:15:6e:
ce:66:33:0d:a1:83:7e:49:65:9c:0f:24:33:28:68:ae:79:6b:
d1:1e:b0:95:65:79:2d:a1:2d:b5:a5:a0:33:62:c7:61:15:c9:
41:d8:16:3b:ad:0b:0d:84:94:c1:fc:ad:54:9b:68:2e:05:57:
ee:6c:43:3e:ef:5f:a9:d4:a2:e9:cf:3b:60:df:c4:3f:7f:42:
87:65:41:aa:3f:0b:fc:23:87:de:ae:86:66:ce:98:2b:26:8d:
b5:82:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:11:12 2026 by rpki-client