Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: eZoxvfDKq6/rZ9Pinex+SQ2rx5Xk3ZRGXvJ2IHL8Sv4=
Subject key identifier: 14:E6:A8:01:5F:92:EB:8E:F9:2F:F0:E1:13:6E:2D:46:A0:67:D1:56
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 01A13E953D925CEEA14ABE926D5E81DF695C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 08:02:10 +0000
Manifest this update: Thu 15 Oct 2026 08:02:10 +0000
Manifest next update: Fri 16 Oct 2026 08:02:10 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: Ape0p/NFIJzCTVfX3oTemwgiuzyFirbWkZ9RQVKEDPU=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:3d:92:5c:ee:a1:4a:be:92:6d:5e:81:df:69:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Oct 15 08:02:10 2026 GMT
Not After : Oct 16 08:02:10 2026 GMT
Subject: CN=14e6a8015f92eb8ef92ff0e1136e2d46a067d156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:f8:72:82:00:7a:a9:fa:be:44:82:c7:07:
a4:3f:f7:16:df:72:67:24:ff:a6:0d:50:c9:f7:ff:
d6:4b:b9:92:e3:f6:0d:89:a3:69:c4:f3:48:63:90:
0c:04:fd:d3:4f:f2:98:59:55:c0:08:f7:4f:c7:6c:
4d:d2:50:96:d9:b5:83:e6:7c:04:d9:b8:e6:21:aa:
7f:be:f6:d8:00:14:ae:e1:0f:93:6b:58:fb:84:1e:
32:f9:3e:0c:aa:f2:67:50:83:e8:d8:d0:a3:65:e3:
13:58:6d:59:fb:0b:6e:66:33:a9:a3:0e:51:79:14:
ee:73:1d:c2:89:bf:1c:98:0a:e5:da:7c:b2:54:4c:
d2:d8:e8:4f:af:f3:81:a7:c9:fd:6e:ed:72:4d:65:
c9:61:54:87:c0:d0:ad:a9:bd:f4:10:b0:93:5e:eb:
a4:75:cb:d7:97:fe:64:9c:3f:29:e9:27:ad:a8:b6:
ec:70:27:8a:4c:13:0e:49:7d:98:ef:23:00:97:26:
d4:37:79:1f:3b:00:2c:d4:07:ac:ef:e3:13:7a:31:
58:28:0b:51:2c:e6:bb:43:94:39:ba:02:d4:d6:e5:
f7:59:f8:7f:79:0d:06:22:fb:ed:03:a8:04:11:8a:
b1:d1:2e:b6:b2:b1:8c:b6:38:9a:ff:55:6e:11:a3:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E6:A8:01:5F:92:EB:8E:F9:2F:F0:E1:13:6E:2D:46:A0:67:D1:56
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0b:2f:56:95:5c:ef:2d:81:62:a2:37:58:b9:e0:1b:53:87:
53:24:ff:34:d4:25:5a:37:c8:15:79:0d:69:bd:aa:3e:43:91:
2c:f8:8e:4a:bc:e2:7a:4c:af:c1:9f:d5:08:aa:85:44:a6:3d:
8f:a3:ba:86:29:45:9b:19:8e:2b:34:37:2a:64:09:ab:1b:6b:
48:e9:0e:22:d2:0c:45:93:1d:0e:9c:12:87:14:31:3d:c9:df:
72:dd:e7:7e:06:78:11:d5:4e:7d:64:83:d7:0e:2a:bb:23:87:
6b:fe:f6:e3:b4:33:87:f5:d7:cc:4e:e4:2f:20:81:ec:54:5d:
f5:56:9d:b5:98:32:d2:00:f1:9e:97:0a:98:38:b8:b3:84:c1:
8d:a7:bc:16:0e:e4:5f:72:e5:f6:98:f2:a7:99:39:6b:57:55:
2b:b9:59:59:d5:09:5a:04:2f:91:13:6e:ca:5a:6a:b1:da:6b:
1a:05:e3:7b:25:8e:d1:8d:8c:c7:dc:da:f7:9c:0a:ad:cb:1f:
ee:02:5a:31:71:20:bf:99:b4:ca:68:07:6a:f2:0e:43:42:1a:
71:1d:60:3f:bb:c6:11:00:1e:45:86:55:fd:cf:6f:b8:c1:26:
08:60:27:ba:74:40:76:9f:af:02:84:d1:bd:e6:2d:00:86:ff:
bc:63:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:27 2026 by rpki-client