Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier: xnkX7Ug+Tm4ndyA1KumHiLxSTPpL1rEbAxGwvgTs1N8=
Subject key identifier: 9C:C6:28:A7:95:45:F9:38:28:44:3F:4D:7B:91:A8:93:FF:75:24:E4
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 01A17A3A75EA857EB9811AC10C43DAA16F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number: 142A
Signing time: Mon 26 Oct 2026 22:00:13 +0000
Manifest this update: Mon 26 Oct 2026 22:00:13 +0000
Manifest next update: Tue 27 Oct 2026 22:00:13 +0000
Files and hashes: 1: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: e91FkDBdSS0q+zECpSWTUEz0S3WiIgYgQHFJAnCE990=)
2: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (hash: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:75:ea:85:7e:b9:81:1a:c1:0c:43:da:a1:6f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Oct 26 22:00:13 2026 GMT
Not After : Oct 27 22:00:13 2026 GMT
Subject: CN=9cc628a79545f93828443f4d7b91a893ff7524e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:88:be:e2:14:ed:4c:c8:92:d3:63:b4:3a:
de:3c:84:8e:37:78:39:aa:7c:e7:79:67:cf:57:d9:
5c:8f:0d:aa:86:d6:19:b7:bd:e8:1b:c2:56:14:ec:
f6:ee:95:41:a5:09:03:4e:0c:9c:6a:d5:27:6a:41:
8c:53:27:4f:59:18:9e:89:6d:cf:fc:63:42:69:0e:
ae:c2:d9:eb:15:64:19:f9:e1:ab:24:27:30:ee:4c:
c9:3b:26:62:a8:b6:cd:11:f8:21:bc:7d:bf:3a:1c:
4a:1a:67:72:65:e0:34:66:3c:3e:88:c4:6d:33:6d:
6b:0b:f6:4c:70:1b:e8:e4:e9:60:53:33:65:38:4f:
f2:d1:23:63:ff:fd:0d:83:72:a6:63:ab:f3:ac:0e:
71:8e:78:0c:e3:1a:a8:6a:4c:a5:16:2d:f4:fb:f2:
b6:42:03:f6:d6:cf:dc:7d:e9:a2:ba:c8:ef:69:06:
a1:ae:e2:fe:40:f3:b1:98:c2:7e:c9:c2:9e:8c:af:
1f:37:cf:42:72:39:e5:5c:55:cb:58:bd:1e:d4:d4:
54:e3:ff:27:66:35:23:cf:cb:d5:e5:70:a1:f8:de:
17:f7:6e:11:2d:0f:3d:a9:cb:bc:6f:21:e2:a9:65:
53:38:8a:a4:51:ee:3b:4a:e7:50:d0:2d:7a:a3:1a:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C6:28:A7:95:45:F9:38:28:44:3F:4D:7B:91:A8:93:FF:75:24:E4
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2a:2b:dc:c9:16:33:6d:52:ac:7b:b6:c8:8f:0e:0a:3d:d6:
2e:8e:eb:58:fb:5e:60:22:9c:de:23:9c:f7:4a:27:de:37:42:
79:a7:9a:c8:c8:05:df:81:dc:0f:20:69:f1:e6:fb:df:77:54:
98:23:ad:aa:f3:96:f0:39:50:c5:2f:92:c8:f9:c1:b4:1c:eb:
87:fc:7f:97:e1:17:02:7b:1e:a1:30:af:23:52:9b:27:53:a5:
80:6f:90:25:69:b9:a9:3c:4e:94:e5:11:b2:8f:13:5d:9a:f4:
38:65:33:97:64:38:b3:3a:0d:94:27:cb:26:0f:76:0c:8a:7b:
cc:88:76:de:45:06:d4:1b:8f:37:11:e5:ba:a8:07:3b:53:0f:
60:46:36:1f:b8:49:ec:e1:9a:09:83:59:35:2b:20:1c:02:f2:
95:9c:f4:85:c4:6c:e0:f1:1a:12:73:ce:e4:dd:a0:67:2c:27:
3b:d2:0e:9a:72:14:24:e1:51:0c:77:47:93:e5:38:9c:f1:f6:
28:31:cc:e4:ca:ec:14:10:35:c1:28:47:8a:4b:57:01:9b:85:
b7:f5:f7:9f:2f:06:83:8a:96:b3:62:b1:a7:1a:25:15:9b:fa:
cf:dc:80:09:2f:c8:da:d3:a6:9a:73:fb:95:c9:03:19:3b:77:
bf:30:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:40 2026 by rpki-client