Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: qWynxpbk6C9nUGEp2Ecst6tV+eD2UqWIdDdMLOfaK7M=
Subject key identifier: 74:33:05:A2:3D:8E:9A:10:71:DD:4D:EB:A5:FD:B3:04:44:F6:18:0A
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 01A179288DC80CF2C195AAB27C3D60735F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 1AC8
Signing time: Mon 26 Oct 2026 17:01:03 +0000
Manifest this update: Mon 26 Oct 2026 17:01:03 +0000
Manifest next update: Tue 27 Oct 2026 17:01:03 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: MjW/gS5cKOg0ER4nkkSIBtRXHv/27IVNdTQy55p0nc4=)
2: YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa (hash: bxowbJpolM8aC3Tyo8Qe1Sfr/zVg+4jTgjgqaAuFw7k=)
3: nSoKCh55lGMD-7gl54YUpZEK_XE.roa (hash: KtXsJGsRFXBW5jD73l5yCg/b8S+cXBnf2k08FtiPNjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:8d:c8:0c:f2:c1:95:aa:b2:7c:3d:60:73:5f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Oct 26 17:01:03 2026 GMT
Not After : Oct 27 17:01:03 2026 GMT
Subject: CN=743305a23d8e9a1071dd4deba5fdb30444f6180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:05:16:7e:df:11:75:a4:e2:74:a9:97:f3:
82:1f:af:74:28:2b:0b:b5:1e:44:18:fd:f3:95:ad:
e6:3a:b7:64:58:a2:ab:83:0d:4e:3d:6f:d2:d0:b8:
6d:ed:61:ee:cc:c7:09:0d:38:30:bc:e6:3a:38:a5:
11:c4:1e:b8:2c:47:b7:a0:b5:99:84:b2:f4:99:6a:
bb:d0:ef:27:b9:dc:01:1b:08:c0:29:bd:38:0f:47:
13:10:e3:9d:10:c2:e6:3d:f8:26:58:27:7a:81:19:
20:df:6e:d5:dc:b9:26:fb:be:52:23:ea:3d:70:a3:
0d:f1:6c:da:d6:31:88:fa:d2:4f:3c:72:87:61:b6:
48:20:af:aa:62:d2:08:f1:51:39:6b:01:95:53:6e:
1e:1f:33:d7:9f:17:c6:a1:c9:34:a2:e9:11:92:d7:
8e:b7:ad:1f:3a:36:2f:2e:da:5c:33:7c:4c:af:ab:
6b:9c:21:df:fc:e0:d4:35:18:07:13:72:14:35:5b:
fc:6f:06:0b:53:ea:16:89:e4:5c:fb:7d:fe:7c:05:
94:fe:a4:fb:3c:d3:e3:7f:3f:ee:4e:21:6f:56:df:
ef:65:6c:7f:83:71:68:03:e8:1c:f4:10:22:a0:33:
10:b6:ff:bf:77:0c:e9:3f:c3:79:79:cf:6d:cb:b5:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:33:05:A2:3D:8E:9A:10:71:DD:4D:EB:A5:FD:B3:04:44:F6:18:0A
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:26:31:33:ca:48:d2:4d:b2:76:60:08:37:b3:c0:5d:bf:02:
56:7b:34:f4:6d:07:c2:f7:1c:74:31:73:68:cb:e9:19:a8:e7:
45:75:d9:8c:73:74:fa:29:b7:2b:4e:ed:0b:08:79:3d:a6:be:
c6:88:7c:72:ae:c1:65:e4:fb:60:ce:b6:71:d6:c0:66:74:26:
68:27:a4:7f:fc:02:de:f1:8f:50:d7:86:45:f4:d5:61:8c:78:
fa:e3:f5:5a:27:6e:2e:ff:ba:ef:c8:42:bd:4c:12:e9:24:6f:
2a:c0:9b:bf:58:d4:46:f3:e3:a5:43:0f:fc:3f:fb:a6:c6:34:
57:83:d1:1b:c9:81:f5:ce:96:e5:44:82:51:ef:c0:45:e4:b1:
b9:60:b1:da:e1:94:c2:ff:c2:86:f2:24:29:7f:7e:86:87:86:
0b:d5:de:e4:89:ae:fb:6e:bb:58:08:ed:c1:9f:23:f0:3f:d3:
ef:7b:13:28:d3:9a:fb:22:d8:62:77:27:c7:91:45:1a:b2:6a:
c7:19:9f:07:09:5e:e0:eb:60:52:0f:a9:c3:61:d4:38:c6:0f:
96:7e:52:3f:be:9a:4a:f6:26:70:a2:ec:63:89:79:40:14:78:
11:5a:5b:6a:72:1f:1d:dc:93:7c:b8:a8:56:f2:52:e6:82:db:
ce:25:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:34:05 2026 by rpki-client