Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File: K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier: 8VXkI3GdcZO6OwPY80ZlXJSsf9gwM2cCuvJRIs3/y3s=
Subject key identifier: C5:05:DB:0C:DB:BF:2A:7B:4E:96:4B:DF:F2:54:37:62:9B:A4:40:35
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 01A18D8B0D388772499B7EFC0FF6A712D546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number: 1AE2
Signing time: Fri 30 Oct 2026 16:01:02 +0000
Manifest this update: Fri 30 Oct 2026 16:01:02 +0000
Manifest next update: Sat 31 Oct 2026 16:01:02 +0000
Files and hashes: 1: 5CrZJSgU3umnhBpv3SBW8GVEgqE.roa (hash: 2gixcHV7KBq6bvuQpRe8OX0ebav7J2q4kd7P6HGr740=)
2: 66eo3bJdi9RGbEdDXS4tD5cqq_o.roa (hash: 5t8peN4WCQBgYdxTrPyY0DXm3aBeHyQsSo4GmYIKBxg=)
3: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: wwh4ZsiA4d2uyz6SCgQkccx0MXshF+muVZXQsXyhlIc=)
4: K_ZSiUHd1rB1pcqdi19och0DGOM.roa (hash: 8mJ7F1VxOqtPJAA3HEixFXJNyvdHfHViy/fRZXdsxig=)
5: QPcZtk0DXKyMJbNEz2ZuJuMfm00.roa (hash: umOLljeZUfmplY2DajwQdgANFJvFzfTBHi6UK1dXAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:8b:0d:38:87:72:49:9b:7e:fc:0f:f6:a7:12:d5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Oct 30 16:01:02 2026 GMT
Not After : Oct 31 16:01:02 2026 GMT
Subject: CN=c505db0cdbbf2a7b4e964bdff25437629ba44035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:a2:8b:84:41:ee:45:b7:70:0e:a4:8b:ad:
ee:ca:29:29:d9:14:01:d8:9c:bc:b1:a8:ec:90:dc:
59:76:5b:75:de:32:a5:a3:33:5a:6e:0a:14:5b:65:
e4:74:c5:b6:d5:5e:72:2c:b3:5c:4b:54:c5:9d:e1:
12:ae:64:58:fb:b3:23:54:57:15:a1:fb:b3:48:0c:
3f:2e:7a:ab:f1:f3:54:a6:84:8f:2a:5c:7a:7e:98:
72:b3:fa:89:bc:76:8f:cd:09:85:2d:a4:c4:cc:9a:
fd:b0:bf:38:7e:36:b7:6c:b4:ae:73:92:75:a0:07:
58:64:e6:96:0a:bc:cb:27:29:39:f2:d0:dd:47:66:
37:de:ac:c9:6c:83:d9:72:3a:15:25:e4:7b:af:e6:
f4:8f:db:81:0f:69:9f:02:cb:4e:74:2b:76:fe:f3:
90:91:d9:c6:6e:61:c2:dd:8c:0c:96:2d:73:db:d4:
5d:d8:57:6f:e4:9c:48:62:2f:84:0a:43:56:ab:86:
b6:60:25:12:e0:92:ec:25:7a:0a:2a:67:e3:96:71:
89:d9:93:6b:30:bf:27:5f:42:39:57:56:93:dd:c8:
14:36:92:00:5f:d3:d6:fe:41:d0:97:16:40:d1:c3:
b8:96:b7:6c:74:9f:26:fe:a3:90:91:66:fa:d1:52:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:05:DB:0C:DB:BF:2A:7B:4E:96:4B:DF:F2:54:37:62:9B:A4:40:35
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:33:31:f1:d8:0e:da:95:28:80:da:3e:e4:c6:d0:12:45:d2:
b0:35:62:3c:83:50:11:65:77:9a:a1:aa:6c:99:97:f5:fe:51:
42:89:8a:21:b0:88:ef:41:f1:13:9e:26:b7:f0:9c:9e:c9:a4:
43:d2:31:96:60:cf:81:a1:ba:7a:1f:f1:5f:c4:a1:f2:12:94:
7a:e3:66:4c:e0:b8:4c:ac:84:d4:e0:eb:bd:6b:6b:51:fc:98:
5c:ae:19:08:68:16:8b:2c:02:39:97:bc:af:21:ae:18:71:84:
9f:97:9e:c7:c3:d1:11:5b:bd:21:ec:c3:d3:9f:8e:55:d0:12:
14:fe:33:1d:d2:51:c9:22:8c:67:bd:3a:36:a1:fd:05:91:7d:
d8:0e:99:76:e5:0d:49:40:ed:d6:64:ad:a6:6b:2b:f4:44:c1:
d5:fc:18:eb:fc:5d:04:cc:94:9e:0d:5b:96:71:25:19:80:f8:
c9:7f:96:f5:96:0b:db:2a:33:a8:6a:27:4f:68:00:67:0e:60:
ab:49:6f:91:6b:38:ae:e9:e5:42:96:3a:c1:6d:fb:5f:82:9b:
a2:ca:ba:8c:c4:79:ff:ff:0f:43:82:e7:e2:f8:6e:b0:d1:72:
a2:e8:0f:28:85:d0:18:9e:e2:bb:d9:2f:e6:b3:a3:6a:f7:27:
c4:45:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:25:05 2026 by rpki-client