
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File: F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier: q+uO195EcrhzLvKmsJbffo/xYmvczwdlaSgXQt+/RUw=
Subject key identifier: C7:82:A5:32:F1:EE:E0:8C:6F:3F:B3:6C:7D:9F:4C:0C:B8:FF:CC:EA
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 01A175B967D0D39EC94FD2CFF9A0D96323D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number: 1ACC
Signing time: Mon 26 Oct 2026 01:00:47 +0000
Manifest this update: Mon 26 Oct 2026 01:00:47 +0000
Manifest next update: Tue 27 Oct 2026 01:00:47 +0000
Files and hashes: 1: 2Z2Mezr_sYt_rFmNrbgtD7JcvRg.roa (hash: uRg8q37DVfZI6yBc5sgrO+ko0WZotW48TPAF7XoPsVE=)
2: DU0N-I5GJvyWrzwUmj2L1_AEZ1M.roa (hash: ZN8fdphiE3XiAL4oyd/tYR38zdzZj+4mwp0ocODidUk=)
3: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: SmYVltk3BqYb4XbYoNz2piYb/WyJHck2KSXscNqux+I=)
4: dzYbEo-cteZ2L-l9SGVqJRtNPn4.roa (hash: nGkk5VkpkEQp3zSwJU2wzLe3I3V3Q1pcrGZeVvvlJsM=)
5: m-2dYhQrAu-81Ydza21n-eRWlcw.roa (hash: yLjz+lgfJ+jDnIJSu5od2TETiCmbT6+DCzdwHtsWayA=)
6: s61yv5KU-MzMgLkWKPoUNVLjQhg.roa (hash: sBkMiUtHAV3ToABJLtfHzQGVeTvCXT0UMs6UHTlwlRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:67:d0:d3:9e:c9:4f:d2:cf:f9:a0:d9:63:23:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Oct 26 01:00:47 2026 GMT
Not After : Oct 27 01:00:47 2026 GMT
Subject: CN=c782a532f1eee08c6f3fb36c7d9f4c0cb8ffccea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:63:e0:e0:6e:15:c6:33:ca:7c:74:7f:3b:
41:14:f7:0b:42:6a:dd:97:81:61:c0:d8:5c:82:18:
50:7f:74:e7:e2:d7:a3:ec:89:41:e7:c6:2d:6e:26:
68:de:13:e9:a9:20:d6:0a:9d:e7:8c:f4:2f:91:cf:
55:dc:25:13:d7:91:f4:68:aa:f4:a6:97:b7:a9:5d:
dd:b5:89:82:0a:f7:a0:99:5f:2b:c9:39:aa:18:ec:
3f:dc:7e:e8:d4:47:c0:46:f4:3d:13:03:78:15:df:
62:88:7e:78:7f:e0:0b:df:51:e3:50:ff:a0:ca:48:
91:b4:82:a1:30:6b:9a:be:30:90:d8:00:c9:58:05:
f7:c6:14:91:2a:a5:55:f7:1a:a7:75:0e:06:fd:6e:
7b:78:cc:4c:94:f8:d9:9d:ec:c3:ea:38:c7:23:31:
fc:01:88:48:2e:80:84:c1:61:52:ef:29:91:78:c0:
97:57:36:f6:84:d1:08:fc:a3:c0:c9:6c:81:cf:39:
26:9e:d1:1e:f0:db:51:b6:0a:6f:87:59:5d:66:70:
13:52:e6:ff:51:44:48:97:c4:21:4a:2e:80:15:5d:
0a:a0:40:88:93:7e:c8:0c:4d:36:4f:a3:b6:24:c8:
5b:ca:c5:19:2e:84:72:04:51:33:6e:ab:26:55:6b:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:A5:32:F1:EE:E0:8C:6F:3F:B3:6C:7D:9F:4C:0C:B8:FF:CC:EA
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d2:d4:ca:35:64:a5:b4:40:43:d8:b0:19:f6:c7:43:1f:df:
12:2f:ae:e1:be:73:62:67:ac:2e:b4:94:92:f2:68:36:62:5a:
5a:f5:c9:6e:87:25:9f:86:bc:f7:47:13:4a:b3:89:af:3b:57:
c8:69:7f:d0:07:0c:4f:5b:ff:66:de:b7:59:13:e8:82:f1:04:
17:97:d3:68:2e:13:3f:47:e9:e4:e8:30:80:2e:e5:80:d2:93:
42:e5:55:38:0e:a0:65:00:d0:3b:39:55:ec:79:f5:b0:f8:09:
e7:7e:bf:d6:f8:82:ee:34:6e:5f:52:fd:50:24:1a:d8:84:91:
97:19:54:9b:49:bd:33:0b:bb:e9:64:5f:9c:0f:1d:3e:6e:33:
69:a9:98:5b:cb:52:50:d9:0a:07:67:78:b1:09:ad:de:f7:db:
63:53:fb:70:83:0e:02:1c:f2:d7:e8:ba:a1:19:7b:00:c0:37:
c4:14:87:ba:db:e0:c0:a5:71:b6:0e:69:57:4f:e3:0a:82:64:
6f:72:f8:06:72:74:4f:c6:11:6e:e8:77:67:43:be:6e:f6:5f:
4b:f5:81:72:ed:4b:39:53:60:88:42:36:36:40:a3:2f:b6:8c:
13:96:05:c6:ef:f4:4d:4d:0f:37:3a:98:42:57:86:8e:b6:aa:
10:91:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:07:00 2026 by rpki-client