Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
File: 8HHkN5gsw0b26BfKZIknI-21QZo.mft (raw, json)
Hash identifier: FTOhLhWhGAzMNZtqeF/LESV0wkxktqPVH7IWHSYNFto=
Subject key identifier: 06:32:5A:E2:DC:71:76:18:E9:F5:C7:93:19:91:D4:33:78:FB:47:D6
Authority key identifier: F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
Certificate issuer: /CN=f071e437982cc346f6e817ca64892723edb5419a
Certificate serial: 01A14DD008AD83F0D6CFF579B9628F1620E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
Manifest number: 140E
Signing time: Sun 18 Oct 2026 07:00:41 +0000
Manifest this update: Sun 18 Oct 2026 07:00:41 +0000
Manifest next update: Mon 19 Oct 2026 07:00:41 +0000
Files and hashes: 1: 4dTiivW_bvCIIr9OKslRJ2ttAH0.roa (hash: nywsABEuvSZWyJVu4fBV0raW88OjCnUfbkwJDiN85oo=)
2: 8HHkN5gsw0b26BfKZIknI-21QZo.crl (hash: JjwvNCvHdMKVWZ9f8dGqK+DBLtH74/2tvWd9LUXIapY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:d0:08:ad:83:f0:d6:cf:f5:79:b9:62:8f:16:20:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071e437982cc346f6e817ca64892723edb5419a
Validity
Not Before: Oct 18 07:00:41 2026 GMT
Not After : Oct 19 07:00:41 2026 GMT
Subject: CN=06325ae2dc717618e9f5c7931991d43378fb47d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:a7:7a:dd:7a:b5:1b:59:b0:f3:de:a6:84:
88:ac:75:c4:40:68:3a:69:8a:b5:ad:27:42:68:c5:
fe:ea:12:04:b9:23:a7:c9:72:a2:98:87:2e:26:b8:
ac:06:b7:16:51:8d:ce:9d:2b:03:59:4a:11:64:40:
5a:87:f9:b7:e3:98:72:f1:78:c5:e6:0f:b9:97:3e:
3e:0d:ad:10:de:14:3c:b3:7a:61:25:00:82:3d:9b:
92:4b:cd:7f:6d:8f:d2:60:b5:fc:d5:b5:6c:36:36:
39:21:d2:b5:2b:6e:f9:59:f1:04:9e:85:fa:18:05:
3d:65:dc:60:62:f7:10:60:55:ba:48:21:ea:de:6b:
16:f8:4c:b2:c8:31:17:25:fa:f5:ed:ba:1c:69:c7:
77:be:3b:3c:40:17:74:31:f4:a5:db:6c:dc:27:8c:
0d:13:5e:ae:fc:33:69:1c:9a:49:ad:5c:a6:8e:b2:
d6:8b:52:25:58:a6:e8:0e:06:9d:dd:e3:9f:31:4b:
d2:3a:98:25:18:69:f1:71:73:d2:d9:f6:a3:d8:93:
f6:c2:2a:0b:2e:cb:c6:85:cb:03:01:a5:6c:d5:37:
6d:5c:3d:19:ab:d0:0e:3d:7d:99:b9:78:03:e3:b6:
b4:ab:9b:ba:05:5b:ce:8a:3a:67:75:48:6c:d9:89:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:32:5A:E2:DC:71:76:18:E9:F5:C7:93:19:91:D4:33:78:FB:47:D6
X509v3 Authority Key Identifier:
keyid:F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:14:8d:12:69:0f:bc:b7:77:bd:c7:fc:ff:e4:6f:d9:d6:b8:
3a:01:8f:6c:73:f9:35:af:a5:cb:1e:f3:0a:2e:aa:7e:d9:25:
4f:58:c8:7c:51:b6:e5:f7:bd:7a:31:9e:9b:84:a1:ed:38:df:
91:d9:b1:a8:75:6f:3c:db:6f:be:1f:52:f6:3d:89:ec:e8:fd:
67:b5:4c:1d:eb:e2:bb:f4:b3:7e:43:81:de:41:d2:d2:60:66:
f0:61:df:7d:5a:b8:a9:8c:1b:52:58:12:cb:6a:4b:f1:5a:c6:
1d:f8:a5:b3:e1:e0:76:03:8b:ee:4c:45:da:68:26:a6:f2:12:
43:50:90:c2:c5:24:72:c3:99:51:c2:e5:c2:43:6a:d3:da:bc:
e6:be:5c:09:c4:4d:d4:79:ab:79:20:97:ac:8f:ab:41:e6:c5:
2b:3a:c6:56:a2:66:9a:b4:d4:02:1a:aa:4e:d6:4c:2d:e8:c6:
ee:b4:88:91:d8:20:91:df:6e:7f:16:0b:f8:0b:c3:27:e5:78:
77:87:94:8f:32:23:19:1c:86:b2:0c:63:de:74:49:8e:eb:f2:
ed:a2:12:50:7d:c2:59:a0:e0:b2:b1:d6:94:62:51:1d:1a:16:
54:07:80:fd:2a:e0:7f:c9:01:85:c4:d8:6e:4c:3c:c8:5f:0c:
0b:2e:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:29:42 2026 by rpki-client