Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: vgr0Rx86aSeFWIntqh6qavrC59aNIT9TNHVIbSkLApw=
Subject key identifier: 5A:25:69:C4:6D:99:53:F7:84:D5:52:09:63:13:E4:38:83:FD:80:CD
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 01A11A197B65E98F6E55BD3BEC2D41C957D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 0C9E
Signing time: Thu 08 Oct 2026 06:00:39 +0000
Manifest this update: Thu 08 Oct 2026 06:00:39 +0000
Manifest next update: Fri 09 Oct 2026 06:00:39 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: jog8a8yDqqqVSgNIvCpXakAmtQhLO5mNgIU5pq4avVQ=)
2: i2cZnlYGJSDWJ6GKJm4zBpOtiSE.roa (hash: yQNvuB3MUN74TcqegiLU8qLGixGGpPrYKgj9auUBTzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:7b:65:e9:8f:6e:55:bd:3b:ec:2d:41:c9:57:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Oct 8 06:00:39 2026 GMT
Not After : Oct 9 06:00:39 2026 GMT
Subject: CN=5a2569c46d9953f784d552096313e43883fd80cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:1d:35:eb:3d:96:c5:d8:63:90:5c:20:bf:
ad:ec:86:e6:90:01:a5:b8:55:01:33:fd:6c:f6:28:
6d:f7:a5:bb:42:cb:4e:53:39:be:63:98:d0:4f:13:
b4:c0:e4:0b:b1:08:12:d3:40:75:18:a5:77:2b:22:
ca:a1:77:88:fc:72:a7:37:f6:fd:28:1f:82:75:51:
d0:3e:24:91:b9:00:45:52:f1:45:35:07:e7:6b:00:
0d:e4:d1:db:43:ee:b4:17:f4:bb:6e:bc:b3:df:66:
c0:b3:1f:94:e2:d5:43:cc:2e:42:d5:a6:c1:3e:a9:
4a:ff:51:29:31:28:57:35:8e:86:7c:3e:a7:d0:28:
4b:8e:d3:70:c3:de:99:d5:59:42:9c:45:de:cc:41:
70:ea:44:ea:37:69:ff:6d:80:46:5f:3c:5c:2d:5c:
2e:0f:40:de:1d:45:58:8c:a7:aa:ba:37:a5:d8:eb:
2f:35:c9:b7:29:1d:6d:cd:4b:ea:1f:56:88:4f:ce:
c7:f1:44:da:21:e3:b1:96:42:39:6c:a8:e2:bd:72:
54:92:1b:1b:a1:dd:f1:5e:9f:65:4c:74:fc:42:fd:
03:3f:84:12:98:5f:92:07:ab:0d:1a:54:9c:c7:89:
de:91:83:ec:7b:c7:64:2c:df:b2:26:05:e5:ae:14:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:25:69:C4:6D:99:53:F7:84:D5:52:09:63:13:E4:38:83:FD:80:CD
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c2:fd:8d:61:39:7f:72:aa:7d:d9:e6:5a:c0:06:b5:f2:01:
70:89:13:01:07:c6:73:ec:6b:82:3c:85:fa:8c:82:17:12:a8:
3e:40:cf:72:4f:24:96:fd:73:b3:c7:37:2f:65:b8:d1:30:a1:
33:23:c6:bb:6a:99:30:0a:32:5f:ee:0a:03:af:73:e2:98:cf:
2f:cb:8d:93:77:8b:be:19:db:53:62:65:5f:f5:69:ce:8e:b6:
37:cd:bd:81:73:a3:ab:dc:e8:08:88:ca:70:2b:02:81:41:1b:
06:61:a5:d7:35:a4:d4:91:37:c1:8a:49:84:85:44:9e:4d:10:
43:1f:92:b7:86:c9:54:67:fd:76:d9:b4:ae:d3:f2:30:be:1c:
a5:48:93:d6:85:6e:3d:7d:77:9c:d0:b4:47:da:52:3b:10:cc:
8d:5b:7c:28:71:a8:d6:a3:c8:c2:c8:90:67:a8:b5:7f:fd:27:
76:51:d9:69:75:18:98:98:8c:c6:ac:4b:05:a2:07:d1:25:df:
11:46:ba:a7:40:3a:7d:29:74:e5:b9:e1:af:c8:7a:98:3e:c3:
cf:d9:ae:5e:d6:b0:54:84:67:da:2d:17:2c:ba:9d:38:0d:d6:
83:83:9d:d2:2a:7d:a1:5d:ee:23:f9:81:b7:2f:3b:47:e7:f7:
2b:cd:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:05:09 2026 by rpki-client