Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: ngFXCaVp+uggmXK9sLgTfFsGRVGR2QM95XOQvlby8wQ=
Subject key identifier: 55:8C:C5:A2:58:C6:8A:E2:2B:99:DA:46:C9:12:BB:9D:AF:39:82:7D
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 01A126C2B56C769DD70640EAD71F14D011FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 17:00:56 +0000
Manifest this update: Sat 10 Oct 2026 17:00:56 +0000
Manifest next update: Sun 11 Oct 2026 17:00:56 +0000
Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: emqya+GWSX34aY2II28YokywOt/cdGkgEDhqSqNyS3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:c2:b5:6c:76:9d:d7:06:40:ea:d7:1f:14:d0:11:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Oct 10 17:00:56 2026 GMT
Not After : Oct 11 17:00:56 2026 GMT
Subject: CN=558cc5a258c68ae22b99da46c912bb9daf39827d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:84:ac:96:fd:e7:94:d0:b2:d3:fd:4b:43:14:
5d:96:a9:b3:1b:e9:bb:9a:e2:bd:25:7c:ed:92:5c:
43:ec:57:bb:75:7c:59:2b:5a:ae:b2:77:50:fc:e5:
ec:34:b2:61:41:ce:a6:6c:88:6e:22:62:51:54:19:
26:e4:a9:6d:74:e2:93:39:b3:53:66:1f:1a:b0:b9:
12:73:8d:85:62:6f:ce:c8:f6:bd:9a:d7:d6:d0:0a:
2d:dc:dd:09:5b:a2:be:06:f2:e0:3d:29:58:d9:0c:
77:f2:8b:9f:6e:9c:07:32:9c:b7:4f:12:e7:6a:03:
db:03:fc:e2:d7:99:a0:53:d1:02:7b:bd:e2:72:a7:
9b:b2:10:24:1f:d1:54:b4:79:80:37:ed:1d:53:26:
15:f6:fa:60:26:5e:66:05:5f:74:89:d1:ed:e0:de:
02:ba:59:ef:a1:5a:d7:3a:ed:65:d1:df:fa:b8:a0:
f4:c0:15:b1:34:d8:e1:e0:31:23:1c:f4:4c:88:36:
c4:0f:e9:c6:ee:98:94:fd:3c:d3:44:fc:4f:c1:35:
f6:15:d2:6e:36:2e:5e:ca:b3:e8:0b:22:62:2b:1a:
c0:09:72:62:9b:88:14:80:b8:5a:49:5f:d4:79:01:
5a:b0:00:4f:40:54:53:3e:90:6b:0a:d7:7d:1b:68:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8C:C5:A2:58:C6:8A:E2:2B:99:DA:46:C9:12:BB:9D:AF:39:82:7D
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c1:31:d2:9f:cf:7b:14:1a:1a:fe:a7:42:a1:1a:eb:46:d4:
76:67:8c:8e:3c:f9:39:c3:40:90:ce:ec:1e:87:e6:0a:0c:a6:
37:ec:3f:ed:b4:0d:b4:fe:15:75:3b:a8:81:7c:2d:90:69:53:
b0:39:db:79:e5:be:93:c3:b0:12:06:8c:88:d6:bc:76:2e:7a:
b1:80:3e:23:02:39:50:d8:3b:5f:f1:ae:18:f2:b7:28:9c:1c:
77:ce:57:14:6f:9c:c2:c2:eb:f8:95:e5:fe:f5:6e:ec:72:68:
67:07:88:e1:61:e9:65:57:64:fc:3b:07:e6:36:ea:fb:d3:99:
04:2a:d1:08:10:4b:fc:59:99:7f:b7:cd:83:21:8f:ab:24:fb:
f0:c5:9b:a6:33:06:3c:51:f3:a0:b1:24:f8:31:4f:a2:af:0d:
be:c7:46:8a:59:45:99:82:7d:4d:5a:23:7c:86:cb:84:d4:bf:
32:a1:c4:da:88:af:5f:a2:88:67:c4:d6:22:2a:ba:f6:34:e7:
90:47:f0:8f:c4:77:9c:04:29:b1:5d:c9:7b:34:46:55:75:bd:
5b:5a:44:a2:da:ee:a1:88:44:6d:95:8f:1e:29:94:2f:0e:7b:
86:ab:f3:19:80:87:c4:82:78:ba:d8:0a:75:f3:50:e7:29:a2:
97:cf:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:09:16 2026 by rpki-client