Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: 2MzqPYSOvQw0tBLv+ORgi6znmxOb3TXPCEbIcDEvXBA=
Subject key identifier: 96:D7:42:4A:F5:7F:46:15:60:70:C8:40:8B:DE:5F:C9:B6:E9:4B:BE
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 01A13D136F1012D72FEE1826CB72E32D2B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 01:00:46 +0000
Manifest this update: Thu 15 Oct 2026 01:00:46 +0000
Manifest next update: Fri 16 Oct 2026 01:00:46 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: n9DHivJFZ3o8IObAgFlkv9IXSpwFsoO+6As4+tbyO9g=)
2: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (hash: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:6f:10:12:d7:2f:ee:18:26:cb:72:e3:2d:2b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Oct 15 01:00:46 2026 GMT
Not After : Oct 16 01:00:46 2026 GMT
Subject: CN=96d7424af57f46156070c8408bde5fc9b6e94bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5d:f9:b6:6c:d6:7c:dd:65:2e:03:d2:7f:c2:
1a:11:89:ca:80:c1:b7:ce:40:94:d2:e0:95:c3:7d:
21:8d:ce:52:76:4e:06:69:35:dd:c8:10:c7:69:60:
b3:22:35:3f:dd:6e:59:50:97:8d:23:c5:7b:0b:c4:
b1:b9:cf:0c:81:a0:8f:a5:ea:2b:ab:13:8b:12:ea:
6f:89:6a:ae:6a:38:42:f0:1e:77:f0:a9:a2:0b:fb:
87:99:0d:13:65:44:28:77:49:62:d7:29:16:bc:11:
95:28:75:4c:e7:01:d8:cc:59:d7:41:6a:78:4a:74:
96:d5:e7:9a:ad:47:12:45:54:ab:b7:c3:b9:0d:9f:
33:7a:ad:85:b2:11:14:c0:b5:02:0b:bf:55:19:d1:
00:8a:7f:59:af:01:eb:a9:4b:a9:80:b2:a2:07:44:
9b:19:e5:af:6a:d1:1e:c8:0e:cb:ac:61:bf:04:ef:
ea:1f:1a:b3:91:fa:bc:00:2c:c4:09:c9:32:de:62:
f0:69:1c:6e:33:44:7e:be:95:36:cc:2a:2a:ef:55:
3b:8b:03:c9:cc:4d:ce:58:d3:b1:65:5d:6d:5f:2e:
59:f2:73:49:e6:f5:96:6b:03:f9:52:be:1e:39:38:
55:8e:d0:4f:cc:0a:84:13:9c:70:41:21:07:fe:fc:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:42:4A:F5:7F:46:15:60:70:C8:40:8B:DE:5F:C9:B6:E9:4B:BE
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:07:2d:84:b8:c6:34:84:aa:d5:0a:70:46:a8:3f:49:4c:fc:
da:27:8e:bb:0c:f1:30:45:40:16:9d:86:20:3c:cd:97:fd:de:
6a:f7:1e:3f:63:33:e7:b3:11:c8:fb:60:31:fd:db:8d:6d:ee:
ac:e3:8b:ec:ad:95:42:47:11:d0:93:62:f5:45:2a:56:b1:94:
f3:49:b1:ed:9e:1f:24:4b:5f:91:b6:9e:fd:c0:cb:17:30:cf:
5b:82:03:ef:39:ff:96:9e:41:65:eb:4d:af:1a:69:6e:b7:71:
33:a0:c6:06:c8:86:89:0d:a5:dd:d3:ba:e3:73:e3:ef:d4:ac:
78:6a:c4:b4:90:b0:92:ca:a0:82:3d:e1:72:6f:1f:9a:9e:44:
c7:42:5f:43:ca:af:c2:51:51:e4:dd:7d:24:58:44:16:89:eb:
a1:ab:0e:34:be:91:bb:92:a6:b8:f3:bb:ea:23:9a:26:04:05:
6f:1c:7a:27:65:32:1a:0c:09:6d:66:09:6f:6a:28:db:90:cc:
27:b0:ba:63:ae:23:03:e3:22:5e:b4:c2:da:2d:3f:1b:be:20:
6f:52:03:49:72:e6:7c:3c:7e:73:03:32:11:14:14:56:82:16:
e8:92:06:a1:39:42:c4:f2:98:d9:64:f5:ac:12:f8:c3:6d:d7:
a8:a8:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:09 2026 by rpki-client