
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File: R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier: BvtfjvGIn/lO5K9irBNz7caLIt33EsjAZgEVepbum7A=
Subject key identifier: 69:60:FB:E2:12:FC:D4:E9:8B:43:D0:1E:52:BA:2A:50:45:A9:58:B6
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer: /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial: 01A180AB3C2A107BC9DFDF0CCC7A2CC1B52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number: 1AC4
Signing time: Wed 28 Oct 2026 04:01:07 +0000
Manifest this update: Wed 28 Oct 2026 04:01:07 +0000
Manifest next update: Thu 29 Oct 2026 04:01:07 +0000
Files and hashes: 1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: YOWfnDuIpbXTVDCwyz+AVk3J0UBX5WNdEI+bxiniYfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:3c:2a:10:7b:c9:df:df:0c:cc:7a:2c:c1:b5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Validity
Not Before: Oct 28 04:01:07 2026 GMT
Not After : Oct 29 04:01:07 2026 GMT
Subject: CN=6960fbe212fcd4e98b43d01e52ba2a5045a958b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:db:7d:46:ea:33:33:b9:58:43:c3:1c:a4:
dc:39:bf:1c:76:b6:1e:69:f5:19:d4:ea:00:51:ce:
c4:cb:2b:df:9b:7e:46:07:2f:02:71:45:e2:39:a0:
30:bb:aa:c4:d2:d6:e1:22:8b:40:4c:62:f8:ec:7e:
b5:b5:de:44:5b:b8:d5:70:1f:04:95:20:17:71:9d:
95:1b:a8:30:1d:5f:ef:79:c5:3a:4f:35:5d:9e:11:
cf:c3:54:25:a7:3b:9b:e3:81:05:6c:df:69:99:c1:
a5:a4:92:9e:61:7f:44:f0:d5:fe:80:50:97:d2:f2:
56:8b:9d:55:41:81:70:31:72:9a:1d:2f:11:44:07:
fb:93:80:e8:dc:7a:1c:a1:45:ff:30:fd:9a:83:92:
6c:b0:57:25:49:c1:6c:90:30:f5:47:ed:9c:de:c7:
11:43:ca:7b:19:a5:60:6d:56:01:44:1a:9a:42:b8:
22:a1:24:cc:57:5f:2b:7a:cd:c9:4e:18:cd:67:32:
27:d7:53:4b:f6:fa:f5:6d:8c:84:c2:3a:9b:e6:c9:
cf:6c:a3:bb:f2:01:9e:cb:10:5f:07:98:04:3f:0f:
10:45:ec:11:24:46:f7:dd:cf:1a:3b:00:ba:d8:72:
3b:66:64:5f:90:45:08:db:80:8d:01:88:06:4f:da:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:FB:E2:12:FC:D4:E9:8B:43:D0:1E:52:BA:2A:50:45:A9:58:B6
X509v3 Authority Key Identifier:
keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e6:c1:23:1f:29:a8:5e:8c:e6:bf:95:02:d9:b4:37:a2:a2:
37:77:ee:05:93:9b:f0:0a:a2:70:d5:57:73:27:65:50:6c:b7:
46:bc:e5:00:d5:05:9b:de:a2:dd:5b:f2:4b:ca:76:f5:e2:9d:
83:f0:53:f2:72:29:65:ec:21:52:c9:18:e2:15:6a:7a:09:00:
53:97:36:0d:9f:9d:e1:a3:24:0a:e5:73:0c:25:f0:74:ec:8d:
61:91:5d:40:be:73:28:d6:df:0f:61:06:e1:4d:ce:eb:79:db:
21:e2:20:7e:05:a1:12:24:4b:e9:05:40:b6:28:06:09:95:31:
47:b8:27:60:4e:f1:6c:4c:a5:46:eb:b8:80:46:ae:cb:d8:17:
d7:c2:5a:82:e9:2f:d9:cb:f1:81:07:95:e5:f1:94:fb:ac:ff:
08:a7:8e:c8:f6:c3:34:2f:70:1e:3c:97:73:73:4b:86:34:a0:
3a:14:5d:2d:38:74:88:0e:63:cd:bb:a3:bc:6d:33:60:5b:c3:
0e:d5:c3:27:2a:22:3a:3c:ee:11:f6:f5:ba:10:1f:56:0d:0c:
dd:1e:7f:5a:3a:8a:f3:4d:15:98:1d:bd:34:29:ec:f9:72:3b:
60:e3:d0:a9:d1:b0:cc:c8:b5:67:86:57:7b:3d:2f:08:93:4c:
96:c8:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:11 2026 by rpki-client