Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: vX/Pqq0aOY0VLnhyNPFHe/NXiBT42r/rcZNNfZq5T/Q=
Subject key identifier: 21:DD:DD:14:37:A3:CE:77:46:EA:38:24:92:DA:7D:B5:F1:4B:A8:8A
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01A157AF98B7CA4AB381F18480F3499686FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 182A
Signing time: Tue 20 Oct 2026 05:01:27 +0000
Manifest this update: Tue 20 Oct 2026 05:01:27 +0000
Manifest next update: Wed 21 Oct 2026 05:01:27 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: 9dPiTBshy5CRI+VNG9xjXJzljcOjYyAC3yc+if2sW14=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:af:98:b7:ca:4a:b3:81:f1:84:80:f3:49:96:86:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Oct 20 05:01:27 2026 GMT
Not After : Oct 21 05:01:27 2026 GMT
Subject: CN=21dddd1437a3ce7746ea382492da7db5f14ba88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:f2:aa:44:62:17:39:f6:5c:51:80:ac:b0:
cf:f4:1c:c8:23:3a:27:1e:e0:44:c3:6b:58:a6:f9:
ea:a0:57:b5:e5:86:10:63:bb:50:1a:a3:bb:df:15:
8d:1f:5b:ea:4c:46:3f:ce:67:b4:60:40:9b:9c:bd:
a7:a2:77:36:89:82:ca:4e:1a:eb:4d:91:3d:5d:f8:
d7:7d:ec:ce:56:18:fb:5e:8b:9e:32:f7:56:61:fd:
f9:af:fb:14:ad:fe:58:db:4a:89:cf:36:45:bf:73:
c2:bf:3a:cc:67:74:01:8a:b6:34:ca:0d:56:57:21:
cb:b3:95:c9:19:cc:8a:11:8e:e5:0d:11:9d:a8:f4:
a7:87:24:cd:3a:aa:42:db:0a:22:08:15:a6:c3:14:
b3:34:51:47:6b:55:e8:ce:21:4e:ab:e8:b2:a3:e9:
f1:57:b6:67:20:ee:6f:cd:c3:21:e4:05:21:43:86:
7b:8e:42:06:87:30:b2:9f:d2:74:f8:1d:63:e3:cd:
f3:3b:34:e7:98:0e:73:df:d3:5d:44:c4:ef:c6:21:
3d:51:34:cc:d0:3e:d7:ab:99:36:9d:bf:ed:08:47:
45:f1:bb:49:cd:5d:27:d2:f9:92:d6:b1:3d:d5:bc:
f4:e0:9a:09:46:14:ed:53:3b:a6:30:e1:14:cc:51:
70:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:DD:14:37:A3:CE:77:46:EA:38:24:92:DA:7D:B5:F1:4B:A8:8A
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7f:c3:ec:9f:98:8a:c6:f3:aa:44:0b:09:66:a5:dd:bb:cb:
fa:4b:bb:75:76:47:a1:ab:3e:85:3e:fc:8c:8c:7f:2c:10:2b:
8a:a8:7c:11:02:56:6b:d2:9e:67:fa:0e:d7:98:67:6c:02:cd:
70:bb:87:e7:bc:79:95:25:f2:dd:74:ca:0a:dd:75:30:97:ab:
cf:20:36:b7:2f:1e:f0:89:88:22:cf:50:81:a7:f9:74:8a:e6:
f7:a5:3c:5a:77:e9:bf:09:3b:25:a6:3c:6a:71:17:a2:80:d4:
b5:0b:d8:1f:10:8f:83:9d:13:ab:25:49:71:18:23:31:31:22:
30:7e:a1:4a:12:09:49:46:1b:27:c1:87:7e:37:2e:8b:82:00:
24:6f:8d:30:bc:cb:08:13:5d:2d:4b:f5:2d:bb:3e:59:e7:4b:
bc:cf:45:41:91:38:54:82:58:c5:84:02:01:e2:0c:6a:bf:01:
26:89:1e:66:f5:bc:1b:90:d2:91:08:67:a8:7c:69:cf:bf:84:
af:f2:fd:86:52:e8:7a:b3:86:3d:c9:27:8a:da:e0:f1:76:d1:
ed:df:4f:9a:b6:dc:b7:69:03:84:33:44:41:51:7e:d4:0a:53:
8b:a6:fc:63:ef:c7:88:66:73:89:3a:ad:ab:b5:83:ad:34:9b:
4a:aa:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:59:44 2026 by rpki-client