Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: t6tstdCnyIBVtJxzYyc8tUOBPt7wBGIVQlWQs3uTX1Q=
Subject key identifier: 5D:12:D3:05:E4:B5:18:EF:FD:26:CB:49:52:E7:EA:56:C0:C0:C8:3D
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 01A17AA8CFF53812D955B5A3A0F01353BFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 1AC3
Signing time: Tue 27 Oct 2026 00:00:45 +0000
Manifest this update: Tue 27 Oct 2026 00:00:45 +0000
Manifest next update: Wed 28 Oct 2026 00:00:45 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: i5W302cxCsxcc8Y7zUNLbYeu8QSUryw+nqPcXKOQIqQ=)
2: SulUeNH4yTw4wuibtQPCkvrNimE.roa (hash: /lThE7QiTo8Pw3w2T2Wjjtw5V8Pd4Y+WCHuTrGI19CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:cf:f5:38:12:d9:55:b5:a3:a0:f0:13:53:bf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Oct 27 00:00:45 2026 GMT
Not After : Oct 28 00:00:45 2026 GMT
Subject: CN=5d12d305e4b518effd26cb4952e7ea56c0c0c83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:8c:49:8d:52:81:f5:bb:18:88:a1:65:70:
57:0d:a6:1b:e6:dc:63:75:87:5a:bd:b4:7d:be:e2:
bd:44:e7:23:5c:ec:a8:a8:9d:0e:96:9c:64:1f:6f:
25:30:f3:87:55:e3:19:a3:36:47:26:bf:56:04:4d:
5d:b5:0c:41:c8:0a:5e:d5:fc:0e:4b:98:9d:33:4c:
71:4e:ec:7c:dc:09:8f:ab:7b:cf:01:65:91:e1:91:
e8:2c:1a:e5:2a:df:7b:4f:99:18:5b:87:4a:68:41:
da:a4:6e:73:0a:d6:15:e9:76:3c:15:ac:d8:ec:bc:
a3:b6:2e:31:ee:42:b9:e8:72:e0:ba:62:af:7b:a8:
37:7e:03:0d:19:ad:08:32:fd:b5:15:99:a3:14:c9:
5d:3b:45:8b:39:c1:29:f8:20:a5:40:7f:12:60:5a:
e3:59:f3:6e:84:64:a8:9c:a6:94:b9:f5:8e:3c:52:
13:11:23:1c:66:03:f9:10:23:f7:99:59:d5:b2:ed:
9d:23:f4:32:07:da:46:21:7e:dc:5f:d1:2e:11:0d:
31:0f:d0:1c:98:d0:73:31:c1:b6:98:da:c0:16:8b:
81:f9:25:0d:7c:78:93:2a:84:a1:ad:52:91:f1:f4:
11:72:cc:33:e0:94:75:ba:b4:78:ce:af:99:21:f6:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:D3:05:E4:B5:18:EF:FD:26:CB:49:52:E7:EA:56:C0:C0:C8:3D
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a9:f7:c8:aa:5a:8f:41:cb:20:d6:14:b3:76:2e:fe:23:50:
91:a1:f6:13:5c:40:de:63:c8:dc:cc:c5:5d:d4:b5:e1:f6:59:
d6:cf:7a:89:b1:01:aa:8b:40:b6:25:25:2b:e1:8f:fc:4a:85:
a5:51:5b:3f:b1:1f:a3:3d:0a:6e:e9:94:9f:20:38:e4:44:7f:
4d:51:ff:18:97:57:11:10:c8:08:7c:46:55:7a:7d:e4:93:95:
b4:8d:94:53:e4:21:ba:00:31:b2:7c:5b:c0:65:c1:cf:66:9c:
b8:d9:2b:80:c6:22:b9:b8:3e:f5:74:61:bb:5a:44:0d:67:65:
ed:81:3f:d1:f2:b7:b9:54:0e:39:ff:6e:47:12:ee:1e:d2:06:
3a:11:87:ab:89:bb:e7:ef:7a:d6:4a:36:e9:02:d2:34:7e:2a:
4d:0e:69:bf:34:64:ac:2e:7f:6e:76:63:13:68:bb:b2:e7:b6:
78:bc:ee:43:6b:f9:29:23:46:34:72:7a:52:43:34:09:6b:4c:
85:00:b8:38:94:89:16:87:9c:19:41:11:c2:c6:67:01:e8:24:
87:bf:9f:fe:bc:86:3f:4b:3d:3d:7d:c3:8a:33:03:78:c5:f9:
73:cf:70:e9:f8:e7:46:9c:4a:d8:a4:6d:e9:e1:e3:ef:10:74:
71:8a:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:44:34 2026 by rpki-client