Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
File: P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft (raw, json)
Hash identifier: MOa6uEN6ft4C3iiZiPgJXJAJ67Zb2DhDYSuQYxcNcQM=
Subject key identifier: D8:88:2B:86:EE:9E:13:A9:F4:DC:C8:E4:8F:ED:8A:D4:57:AC:2B:B2
Authority key identifier: 3F:FD:69:F3:05:D1:BD:59:D3:FE:88:B0:E3:24:12:8B:09:DA:FD:88
Certificate issuer: /CN=3ffd69f305d1bd59d3fe88b0e324128b09dafd88
Certificate serial: 01A177A797221325034D87A6AC3C3DC7E98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_1p8wXRvVnT_oiw4yQSiwna_Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
Manifest number: 0130
Signing time: Mon 26 Oct 2026 10:00:34 +0000
Manifest this update: Mon 26 Oct 2026 10:00:34 +0000
Manifest next update: Tue 27 Oct 2026 10:00:34 +0000
Files and hashes: 1: P_1p8wXRvVnT_oiw4yQSiwna_Yg.crl (hash: XEzMC7cmmUZaKOKZMCIZNTpYXZFU7qQ0bHobNaEAgNI=)
2: ZHfipkhj4ZBR5NV1YEBpfVvZkAk.roa (hash: ZipHrq8iiEQt8O7cV6/RGetNUyLW5eIr9JBTahVOOBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_1p8wXRvVnT_oiw4yQSiwna_Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:97:22:13:25:03:4d:87:a6:ac:3c:3d:c7:e9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffd69f305d1bd59d3fe88b0e324128b09dafd88
Validity
Not Before: Oct 26 10:00:34 2026 GMT
Not After : Oct 27 10:00:34 2026 GMT
Subject: CN=d8882b86ee9e13a9f4dcc8e48fed8ad457ac2bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:56:da:08:22:f0:47:f0:76:47:41:c1:ca:
8e:7d:03:34:4c:e2:52:77:b6:76:09:b6:46:47:0e:
dd:62:78:e2:8e:53:c3:65:8c:37:c2:9b:3f:41:a8:
8c:a3:37:97:21:30:95:d5:b6:ca:22:79:4f:d0:10:
ca:5f:4a:83:9e:c8:2b:c2:f7:48:5f:e3:37:06:97:
d4:80:a8:aa:bb:c9:24:a6:8a:f3:f1:27:12:78:22:
c5:1e:9d:02:9e:34:1c:64:85:b2:e6:d6:9d:e6:b6:
97:49:9e:6a:2d:03:47:37:61:9f:ba:15:25:4a:eb:
f7:58:74:bd:4c:10:f9:ac:b5:56:d2:d0:f4:bc:53:
53:30:b9:e3:99:96:ee:c0:55:f2:62:8f:d2:1e:d7:
ab:e7:f3:92:45:0d:13:20:59:db:2e:82:15:b1:56:
ac:d0:ba:99:e9:70:ee:69:5b:0b:c8:00:7d:09:31:
91:ae:67:61:12:bf:51:5d:00:1c:b3:8f:ae:99:24:
57:41:55:55:31:49:9b:32:ab:70:12:95:3a:a6:f2:
fc:0a:b7:a1:fe:c0:2e:ee:97:f1:a9:3f:5a:b8:ea:
57:b4:c0:62:32:62:94:2c:e7:c7:7d:ba:8f:62:23:
e4:5a:39:09:4e:be:f6:36:d3:66:83:df:b4:bf:35:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:2B:86:EE:9E:13:A9:F4:DC:C8:E4:8F:ED:8A:D4:57:AC:2B:B2
X509v3 Authority Key Identifier:
keyid:3F:FD:69:F3:05:D1:BD:59:D3:FE:88:B0:E3:24:12:8B:09:DA:FD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_1p8wXRvVnT_oiw4yQSiwna_Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:44:5e:da:83:43:5b:aa:d6:44:2d:73:c8:cf:19:48:82:7e:
d8:31:e2:c3:26:ea:3d:62:a8:97:c6:03:75:6e:c2:6a:94:5e:
68:e5:5f:69:f2:a9:76:c1:16:54:46:e5:60:d6:25:42:e6:fb:
0d:7e:77:ec:5b:d7:dd:19:93:27:12:ab:68:26:67:c5:b1:4d:
43:53:4b:77:3c:f2:c1:c7:0a:fe:5d:e2:fb:37:84:c1:3b:34:
59:4f:30:c4:f8:65:25:ff:d4:39:f0:0d:84:1d:bd:f3:41:4b:
c0:ed:52:59:7c:d9:e2:1d:1c:70:9d:62:60:06:45:cf:01:d1:
a9:6f:e5:9e:33:db:40:73:9f:3f:38:bb:82:09:73:ba:f6:1c:
82:73:e1:ba:f0:31:8c:4c:02:dc:ff:ac:af:4a:48:ba:a0:58:
7e:c3:65:3e:7c:cb:69:33:26:42:7b:2d:95:4d:0b:1c:bb:f0:
b2:c2:9b:8f:11:49:2a:51:8b:72:6d:20:62:4e:86:4b:15:f8:
ea:f8:9c:5a:73:9f:54:03:b6:67:06:91:58:d5:87:24:ea:76:
32:1b:46:d2:40:15:42:22:ef:23:40:1c:91:7c:34:56:b6:15:
8f:fc:72:79:ae:66:c9:84:c5:40:61:71:b4:cb:13:9d:71:cd:
4a:38:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:55 2026 by rpki-client