Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
File: 8lizqXQbQx177NZChrnmvODpddo.mft (raw, json)
Hash identifier: b8NbHsFlac9FGlYOOH8Do8MmPn9TU37LqKbqBRBxd98=
Subject key identifier: 97:FF:D3:6D:04:8F:8F:E1:56:91:80:82:CF:51:4C:1C:9C:1A:D8:FE
Authority key identifier: F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
Certificate issuer: /CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Certificate serial: 01A13F02BB0358E389AC67A1F81F02862ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
Manifest number: 1A74
Signing time: Thu 15 Oct 2026 10:01:45 +0000
Manifest this update: Thu 15 Oct 2026 10:01:45 +0000
Manifest next update: Fri 16 Oct 2026 10:01:45 +0000
Files and hashes: 1: 8lizqXQbQx177NZChrnmvODpddo.crl (hash: AHevSrd070IKzRJy1DrwrRKfIFUAgihHLgKRdJqD/vs=)
2: 9vmezDMgMLAYgubj0dZwQBpw7Zo.roa (hash: QLo0rxDXf9m7rqbC9zynXdEyUGpcYsQ8wFalcr82vIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:bb:03:58:e3:89:ac:67:a1:f8:1f:02:86:2a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Validity
Not Before: Oct 15 10:01:45 2026 GMT
Not After : Oct 16 10:01:45 2026 GMT
Subject: CN=97ffd36d048f8fe156918082cf514c1c9c1ad8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:44:2f:31:66:32:06:8c:ed:cb:19:00:59:
a3:ac:4d:10:ad:4b:10:85:37:b7:06:60:68:76:74:
77:b0:c8:e5:a9:72:a7:f0:96:b4:d6:1f:f6:22:4b:
aa:86:aa:90:76:b6:45:84:06:d5:a0:df:77:8d:eb:
4c:84:2e:64:25:b8:64:8d:55:c1:6e:52:d4:07:ad:
af:e2:ac:a7:3a:e9:6b:53:86:26:20:1e:59:67:5c:
63:e3:47:c5:e7:31:0e:63:a1:62:e9:7b:6d:37:f6:
23:b3:74:87:32:b2:90:59:43:b9:01:e7:c8:27:26:
cb:fc:9f:f4:2c:6d:cc:b0:18:0d:ba:1b:04:3b:cf:
41:cc:c3:04:e3:9c:61:58:5f:d7:3d:1a:16:7b:0d:
ac:2f:92:68:ed:b8:f9:5f:a1:c8:76:16:2c:3d:71:
a1:0d:3c:c7:af:54:07:d4:69:c3:55:11:c7:38:3b:
73:11:e1:27:8e:de:24:d6:5c:09:2d:70:ff:3e:78:
4e:be:9b:9e:0e:36:a5:6c:3c:07:be:7f:f4:d8:20:
54:7c:19:ce:15:c1:c3:dc:d8:a9:51:35:69:dc:61:
b8:70:d6:a0:da:45:05:33:f1:0a:7b:dc:09:be:3c:
bb:f1:31:2a:fc:13:2f:a7:ce:d4:9f:51:e9:bc:9d:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FF:D3:6D:04:8F:8F:E1:56:91:80:82:CF:51:4C:1C:9C:1A:D8:FE
X509v3 Authority Key Identifier:
keyid:F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:58:8e:e7:5f:76:51:c4:2e:74:88:75:12:da:a3:33:39:
f8:05:f7:f8:c2:cf:11:6d:ea:a9:c7:c1:9e:40:1e:80:28:b9:
40:d7:a7:e7:6a:67:2b:b9:23:c8:f9:60:84:f3:f6:58:cc:79:
1b:c5:75:5c:9b:1a:ae:df:39:34:4f:93:89:be:54:8b:c0:18:
1f:74:f5:af:ce:1d:ca:8e:d5:a0:1d:5a:c1:d1:8e:f6:79:26:
3f:fb:c8:61:6e:91:dd:f1:2c:87:b5:df:89:33:81:0f:84:c9:
5d:ff:a7:93:82:f2:63:dd:e9:55:33:d1:88:ce:e7:8a:06:bf:
48:c7:d0:46:c4:cf:0c:79:2e:4a:40:ee:c5:1e:ad:5f:2d:bf:
48:7c:a6:9a:9e:4e:e1:53:c4:21:86:f4:54:5a:a7:5f:5b:ab:
0b:af:f4:dd:a6:58:e9:cb:5f:9c:5e:e3:0b:a7:e3:7b:69:61:
c0:e2:b1:5a:11:0d:55:c0:d9:6e:a5:c6:ca:c0:14:da:43:30:
c0:28:54:8f:1a:83:e6:e6:ec:19:22:4b:76:66:24:b7:ac:03:
3d:58:9b:27:65:db:36:bf:f7:c2:cb:de:49:73:6e:7f:8f:78:
03:46:f5:66:27:19:a8:d1:13:b2:f5:f3:f2:0c:0f:fd:5c:05:
5c:79:a6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:41 2026 by rpki-client