Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: EC70bKN47HTaLG58cRzge9YOwQ9kxZzfgknEO0Zb88M=
Subject key identifier: B4:5F:4F:33:DE:64:8B:57:DF:57:9B:04:61:CD:88:17:8A:EB:C2:E8
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 01A12A68BBB04573E77BCA5212A764A107A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0D27
Signing time: Sun 11 Oct 2026 10:01:09 +0000
Manifest this update: Sun 11 Oct 2026 10:01:09 +0000
Manifest next update: Mon 12 Oct 2026 10:01:09 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: nw+Gide4X+XpqrSSD/UJUm0mR6nSy/WhvhoK/GfrHJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:bb:b0:45:73:e7:7b:ca:52:12:a7:64:a1:07:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Oct 11 10:01:09 2026 GMT
Not After : Oct 12 10:01:09 2026 GMT
Subject: CN=b45f4f33de648b57df579b0461cd88178aebc2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:d8:02:44:2e:22:cd:04:6a:97:4f:5c:b7:
05:f0:e8:a0:3d:6a:5d:ba:5d:60:05:d6:a6:ce:f7:
b1:96:e5:b0:ec:8f:dd:61:e2:0b:fc:04:41:13:1e:
b5:f4:f0:9b:af:99:0f:1e:74:b7:4f:d0:96:96:ca:
b6:ae:4e:e6:95:74:f7:f5:53:60:e7:9b:a0:07:e6:
7b:a0:22:1f:1a:19:a9:f2:b3:4e:2b:dc:94:77:b7:
29:ef:f3:c1:0b:16:a3:43:ef:50:fe:04:e9:a1:59:
99:4f:d6:50:ac:c1:05:d0:09:ce:5b:12:e3:93:c7:
be:55:6f:0d:de:00:ac:0b:8d:c4:dc:d8:11:ba:d0:
a5:2a:c1:d1:28:ee:5b:46:1a:a2:a0:96:b7:17:70:
1c:ca:76:59:fc:c1:93:1d:9e:80:eb:cb:83:d3:73:
7a:20:b0:a2:ed:df:c3:18:a6:ed:d2:9b:ca:26:d5:
90:96:1d:ca:e1:2e:44:91:c9:0d:1c:bb:7c:1c:db:
58:e9:7b:3e:ba:ef:39:a0:a4:75:b3:3a:f2:79:ca:
a3:19:28:fe:ef:1b:67:bb:cc:e8:0f:d0:5e:3f:92:
e6:85:f4:cd:a7:c4:8d:b2:b9:24:57:f3:3d:ae:48:
8d:e6:f5:68:fd:3f:bf:83:5e:e0:7f:85:b3:56:23:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:4F:33:DE:64:8B:57:DF:57:9B:04:61:CD:88:17:8A:EB:C2:E8
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:66:b8:74:ee:10:98:7b:d7:1c:fb:7e:94:4d:1b:57:20:b0:
a1:ad:f3:e2:e7:17:b0:fe:27:d8:7b:c5:70:e1:22:f5:74:5c:
dc:07:23:59:4e:f4:7b:07:0f:fe:12:93:d5:7d:c4:01:d2:d0:
5a:67:9f:da:03:88:f5:df:0b:ed:32:c6:a6:e2:aa:da:ee:d4:
9b:c9:15:46:a2:6c:a9:c3:ec:3d:d0:47:72:0d:9b:68:f9:57:
02:a3:50:ce:64:b1:18:cc:0e:a7:37:1c:b0:5e:83:0b:74:f5:
d8:bf:43:42:40:c8:f1:bb:86:e2:3a:a4:61:d1:c6:cb:ec:ee:
57:2f:b2:3f:11:ad:94:c2:5f:48:ea:20:fd:ca:63:a3:4d:c3:
57:43:af:b0:a8:13:d4:9c:8e:83:44:7c:64:6b:63:eb:61:b9:
ae:90:c8:91:3d:9f:6f:18:2b:e1:57:92:3a:f7:b3:0e:79:c7:
aa:f0:30:59:7a:c0:6d:18:ab:f6:0a:e3:40:1b:23:16:0d:93:
6e:98:95:8e:74:8a:05:df:e4:61:fb:c1:c9:3a:c2:68:74:4d:
38:dc:e2:60:11:b4:40:12:3f:c4:0a:a1:ab:68:7d:d7:9c:ce:
24:ea:03:69:ba:82:87:78:48:fe:e6:16:54:9a:dc:30:21:93:
02:81:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:57:46 2026 by rpki-client