Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: fEDy49TLVR6DSafg8ofHM+rtCjPOlYZT6MuO6SfsdX0=
Subject key identifier: 36:9A:11:A0:0E:B7:B3:D2:6F:E1:36:57:35:61:02:EA:3E:58:A7:9A
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 01A1841A5F8675955C5D53CD54EA836B5C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 08CA
Signing time: Wed 28 Oct 2026 20:01:23 +0000
Manifest this update: Wed 28 Oct 2026 20:01:23 +0000
Manifest next update: Thu 29 Oct 2026 20:01:23 +0000
Files and hashes: 1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: Agy5Lj8mZqv3tPyHrI8UDZMWd/U+z1n6m+3/Qm5F2As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:5f:86:75:95:5c:5d:53:cd:54:ea:83:6b:5c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Oct 28 20:01:23 2026 GMT
Not After : Oct 29 20:01:23 2026 GMT
Subject: CN=369a11a00eb7b3d26fe13657356102ea3e58a79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:aa:db:91:6b:e2:ea:d0:c1:f2:13:39:6a:
84:28:84:28:ea:80:4d:7e:d4:d9:f8:12:e7:28:75:
37:0f:50:85:f3:c5:1b:cc:29:2f:ec:77:18:e3:25:
0a:af:7c:5e:bf:ba:2d:5a:77:21:09:70:9e:0d:47:
f5:76:85:0b:b5:8d:cf:42:f4:aa:ff:c8:fa:b6:40:
7f:76:a8:a4:24:bd:f1:b7:26:cb:65:b2:52:ac:ce:
c1:78:df:9d:a1:9f:77:10:23:dd:49:03:35:f0:a2:
96:dc:3c:9a:28:58:86:d6:08:88:43:32:91:59:09:
e5:45:74:e5:d2:eb:38:e2:e6:91:25:98:1c:fb:f2:
94:9f:1d:9a:d8:9f:3e:84:fb:3c:a5:1b:29:fa:31:
ba:63:3a:6b:fd:43:76:a3:9e:44:3d:9c:87:13:d7:
22:1b:c6:27:36:df:c6:2f:86:40:3e:92:61:fb:f1:
7d:25:96:97:0e:88:d9:36:e3:46:9e:da:f2:ac:32:
8d:bc:f6:2a:33:18:a5:1d:af:26:39:d8:ec:59:94:
86:eb:75:65:14:b2:ee:5c:2f:f1:db:cb:ff:3c:1b:
28:cd:10:69:69:5d:00:c1:90:e5:99:af:f0:75:fe:
de:72:0d:62:a0:03:d0:fe:84:a4:ad:e8:e5:97:8b:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9A:11:A0:0E:B7:B3:D2:6F:E1:36:57:35:61:02:EA:3E:58:A7:9A
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:af:08:41:ce:fd:16:d7:67:41:d6:cf:51:0d:a2:2e:d3:c6:
db:e3:3f:4e:1b:fb:e0:35:fb:ef:f2:fb:22:8c:79:d9:39:4b:
14:90:e0:ad:ff:04:c2:5f:f4:d5:de:ba:f3:c8:55:e6:55:e4:
1e:d4:a3:9d:dd:46:f3:fd:aa:ae:17:4f:3e:03:4c:27:57:5e:
f3:92:df:5b:f0:42:e2:5c:2e:25:ae:20:08:f8:24:7e:56:c4:
cd:ee:4f:47:96:c4:7e:f2:a1:4a:29:67:6b:6c:84:38:88:6c:
84:60:3c:41:44:92:88:8a:76:65:96:4d:3d:cc:93:83:36:cb:
df:d2:8c:19:e7:82:e9:d2:0d:e3:c6:17:55:3f:47:66:35:8d:
45:f2:a2:a5:d7:bf:e4:6b:c7:b1:83:b5:3e:d1:25:d2:5c:d6:
7f:56:33:0d:de:fe:d0:8d:8b:95:2a:4c:59:7f:2b:bb:a3:3f:
46:cd:e4:b5:fa:43:34:fd:a4:4c:41:a5:31:3f:09:fa:ed:6b:
f8:81:a8:41:0a:e4:84:d3:21:83:c6:16:a7:a9:49:85:7a:3d:
4a:e2:8e:ed:b1:91:8d:ba:e3:d1:74:06:1f:0f:ef:6e:75:14:
51:35:45:66:f0:c9:fc:ea:8d:94:43:64:bb:6d:36:9e:fd:80:
33:c2:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:53:26 2026 by rpki-client