Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
File: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft (raw, json)
Hash identifier: Ic8FxC6VxvIYTV2kX09tNrt7Glze+vkQxOYFyhO/jes=
Subject key identifier: E0:66:CE:8C:A9:FE:11:3E:F8:1B:66:53:52:51:F4:9B:67:46:A3:03
Authority key identifier: 32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
Certificate issuer: /CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Certificate serial: 01A17627C21B95E44F0FB97992ECA075B07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
Manifest number: 013B
Signing time: Mon 26 Oct 2026 03:01:19 +0000
Manifest this update: Mon 26 Oct 2026 03:01:19 +0000
Manifest next update: Tue 27 Oct 2026 03:01:19 +0000
Files and hashes: 1: LGwzUxcjbq9-wb2ocqMqu3uyOjM.roa (hash: cDH6YJZW5QqvmFNmhrhTy7ZODICEHh2BK7oCwwTt9+E=)
2: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl (hash: ZGScpL3ccfmqJ5pPdGX7EYZ8CptixnYUPBQyt7jGKQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:c2:1b:95:e4:4f:0f:b9:79:92:ec:a0:75:b0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Validity
Not Before: Oct 26 03:01:19 2026 GMT
Not After : Oct 27 03:01:19 2026 GMT
Subject: CN=e066ce8ca9fe113ef81b66535251f49b6746a303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:32:4b:83:7e:44:1b:0b:75:46:7a:91:fe:
ad:3a:e6:b9:3a:ab:f9:03:25:f6:8b:f3:cf:4a:4d:
7b:ab:0f:d0:b6:22:a6:74:54:41:3a:79:3b:37:fa:
28:57:1b:28:6a:5d:e5:f7:52:f0:b5:a5:71:5e:da:
83:7f:a9:a0:c6:d7:73:de:0a:13:12:18:e1:4c:be:
4e:45:21:85:e7:ef:21:a5:09:f6:b2:b3:42:02:66:
03:82:6f:ca:6f:23:ae:91:bd:a6:68:e9:d5:fb:a3:
b8:f2:61:30:5a:b6:00:ee:2f:aa:c6:58:69:fa:7d:
69:a5:cf:4a:8c:bc:f0:56:58:5f:b8:8e:bf:ec:1c:
7e:3c:17:2a:04:50:44:a7:0c:bb:56:4d:41:a5:94:
aa:43:48:b1:72:0b:1e:31:bc:eb:b2:4c:7a:a4:57:
b0:f7:4b:5a:bb:6d:1f:e1:7b:59:29:f7:b8:e1:24:
e2:45:ef:96:65:21:c3:77:8a:bf:9e:f0:57:37:6b:
33:47:63:be:6c:39:10:c5:e4:4a:5d:70:f3:92:e2:
38:55:f1:05:8c:eb:87:f2:cf:d3:db:ca:d8:e7:09:
44:63:a4:10:ec:d4:29:ac:f1:e3:89:83:55:23:0e:
f0:98:82:51:82:2f:71:a3:0a:95:1f:9a:fb:6f:b6:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:66:CE:8C:A9:FE:11:3E:F8:1B:66:53:52:51:F4:9B:67:46:A3:03
X509v3 Authority Key Identifier:
keyid:32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c5:38:62:e5:7c:7a:cf:bd:d5:c0:7a:55:af:87:46:9f:d8:
e6:9a:64:8c:28:c5:d7:3d:bd:7a:bf:e5:7f:4e:32:8a:bb:7f:
80:89:48:6b:49:b1:cc:ab:e5:09:0e:86:92:bf:32:8a:0a:b0:
b6:79:04:d0:bb:e6:ba:86:0e:27:6f:bf:a9:f8:45:ef:a3:25:
12:8f:73:64:b8:10:c1:e3:db:b5:74:cc:73:00:07:5e:11:ec:
b9:d2:4d:7d:4d:d7:68:06:bd:a7:27:f6:9b:b6:bc:87:07:ac:
2a:c5:33:57:73:ff:fa:4d:4e:4f:ec:ef:8b:22:98:23:b2:6d:
98:8e:69:38:9b:e4:dd:71:0b:c8:05:84:62:26:44:cd:f1:e2:
63:4e:51:d1:c4:2c:2b:69:39:56:a4:d9:cf:66:8f:69:0f:ea:
d6:c2:2d:12:41:a4:48:b0:23:d1:ae:66:67:7e:dc:8f:19:13:
6c:a7:bb:50:f0:b7:dc:ba:84:24:d7:97:c3:fe:24:55:10:d8:
92:1f:7a:25:59:fd:29:96:ee:cc:2c:30:bf:a8:97:ed:1a:7c:
5f:93:b4:70:c0:ed:f8:92:a7:55:04:95:71:00:f8:36:67:d0:
8e:91:ed:33:64:f8:c1:1a:19:13:87:3d:a3:3a:9b:66:d4:a2:
58:c3:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:20:55 2026 by rpki-client