Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: rOoEkUjMZZa83NKfNiD6XgekGdVxSYHQHMmax8/HYEI=
Subject key identifier: 91:93:61:21:3B:78:6E:FD:A3:BA:45:DE:EB:CC:19:BF:84:35:7B:3E
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 01A17B4D89ABAFACDDB68E90E4D60FB9219C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 0EE7
Signing time: Tue 27 Oct 2026 03:00:41 +0000
Manifest this update: Tue 27 Oct 2026 03:00:41 +0000
Manifest next update: Wed 28 Oct 2026 03:00:41 +0000
Files and hashes: 1: HLxK0SHaAN4A3oDtW-6ynwZMoGM.roa (hash: cKsTdXMzCKVpvlljEBVOuNNhrA+YItiJ4O+zqqSok5Q=)
2: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: pEb5w80h+1do/SEdbr25di+8IBTPlbcSBhxavj0/5/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:89:ab:af:ac:dd:b6:8e:90:e4:d6:0f:b9:21:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Oct 27 03:00:41 2026 GMT
Not After : Oct 28 03:00:41 2026 GMT
Subject: CN=919361213b786efda3ba45deebcc19bf84357b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:43:70:34:38:77:07:f9:45:e2:8c:78:cf:
4c:9b:2b:0b:ec:bd:e4:d0:7c:e3:7e:18:e5:bb:e9:
a6:53:99:3b:4d:92:7f:cf:d5:1c:36:ce:2e:76:33:
d1:5c:28:83:15:c1:0a:df:17:f3:48:f3:11:e7:c3:
7d:3d:37:08:07:2e:2f:d9:c9:35:77:b1:30:4f:c9:
02:29:84:13:40:4f:e0:6c:22:8e:b8:97:f6:2b:53:
a7:9a:71:c2:61:b3:fc:c6:35:e1:b4:47:e2:57:d5:
17:8a:6e:64:01:ef:c3:52:15:71:19:d1:e1:99:79:
06:48:d1:76:21:d4:73:f3:49:11:85:4e:e9:75:4d:
3d:71:d4:ef:b6:7c:1d:35:37:f1:47:78:2f:7b:b8:
36:45:3d:72:0e:fb:17:c9:2c:f8:7d:6b:e3:af:db:
4c:ad:33:a1:02:fc:f5:a1:87:c6:51:36:39:87:95:
34:ac:65:bf:6a:a6:e3:f9:ef:96:64:1a:42:94:a8:
44:d6:81:6a:01:f3:8c:99:15:c2:b4:5e:d6:9a:af:
35:f4:76:67:76:76:5b:11:09:fa:74:9b:2a:51:3a:
8e:77:11:cb:69:51:73:58:22:48:f2:fd:3e:fe:03:
a3:e1:67:bc:88:56:b2:59:23:22:45:1d:ee:92:b2:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:93:61:21:3B:78:6E:FD:A3:BA:45:DE:EB:CC:19:BF:84:35:7B:3E
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:45:0a:86:07:1b:3c:4b:2b:1a:d6:7f:e6:25:88:8d:b3:e7:
2d:0f:c0:bf:a8:37:51:69:eb:3c:54:0b:2e:cd:d1:90:30:d1:
03:28:74:11:a3:1d:0c:4d:2b:09:ad:6b:a5:80:cb:a8:cd:57:
0b:c3:06:f1:d0:8e:3a:fb:3e:ea:f2:81:0e:01:17:49:19:df:
56:6d:17:1d:0f:a5:33:d6:8b:66:cc:ec:24:34:c4:11:5a:d2:
5f:70:3a:92:e6:d7:d0:ce:13:d4:72:51:ec:73:4e:cf:c8:e4:
27:5c:c7:08:77:32:0a:0f:8b:e8:97:e2:36:79:54:94:78:27:
df:54:c9:ca:92:2f:49:7b:fe:96:0f:76:1e:c2:31:20:85:5f:
20:a5:7c:04:03:ed:47:c7:4f:74:a7:11:05:a4:af:c3:40:91:
ba:e8:cf:ad:d4:ed:c2:10:06:92:9e:66:d6:a7:69:48:46:52:
9d:c0:7a:da:75:7f:f7:6c:a3:0f:7d:d0:e2:97:c7:82:7b:aa:
8b:b0:cf:6c:f4:e0:d7:e8:d2:5d:b4:54:23:ba:3c:11:d0:40:
35:88:86:29:14:1a:ae:46:2d:21:5d:71:f2:d1:b6:bb:73:ca:
ae:8b:7a:3d:94:fd:ed:5c:34:b9:36:3d:89:25:b5:fb:ee:6f:
4b:c6:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:14:58 2026 by rpki-client