Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: 0OiL+ioY0iVSxJt1u8xbLBOnRB6FZCVa8hz2hfaUWbg=
Subject key identifier: B7:12:F5:CD:2A:08:B8:E3:6B:3E:8E:75:4E:CE:34:6B:EE:A7:39:C8
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 01A1599D4BC8754CBFA3C6CE704E6288F214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 0A4E
Signing time: Tue 20 Oct 2026 14:00:43 +0000
Manifest this update: Tue 20 Oct 2026 14:00:43 +0000
Manifest next update: Wed 21 Oct 2026 14:00:43 +0000
Files and hashes: 1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: kdiL7KENxzkrpuoV4ichsfGaDDu8gytCJuSQbU1bAS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:9d:4b:c8:75:4c:bf:a3:c6:ce:70:4e:62:88:f2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Oct 20 14:00:43 2026 GMT
Not After : Oct 21 14:00:43 2026 GMT
Subject: CN=b712f5cd2a08b8e36b3e8e754ece346beea739c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:ca:3a:eb:3a:36:6f:6a:b2:55:78:20:82:
f2:ba:d4:e0:9b:0b:5e:ac:42:b5:a3:24:98:61:24:
c9:c0:b2:1e:27:2d:23:c2:cc:60:84:c5:39:68:69:
74:ad:f7:3c:43:fc:ac:6a:2f:5f:26:f9:39:c5:af:
88:1a:17:98:06:f1:06:7b:61:01:ac:d5:4c:c8:dd:
46:b6:03:ba:53:59:41:02:a1:0f:ff:0a:ff:cc:76:
d3:3e:50:62:e2:21:ce:59:6c:48:35:0f:a2:39:69:
c8:83:b0:e5:33:93:3d:1d:3b:d3:0a:7c:fb:d7:2d:
44:c9:36:65:2b:73:72:00:9c:f0:89:24:90:99:1f:
24:c9:0c:72:4b:58:7b:8f:de:a5:a6:e4:e6:3c:19:
80:3f:94:18:82:94:19:9b:32:7c:f3:92:f2:a1:d1:
fc:1a:c4:42:07:b5:ea:58:8a:15:bd:37:20:25:25:
ae:64:b2:95:da:fe:29:bd:dd:3c:fa:11:a1:ef:66:
15:33:9c:6a:cf:c5:4a:54:57:8f:b5:75:fb:bf:34:
fd:8b:34:71:35:e8:be:12:83:fd:9e:ed:93:38:d1:
f8:5e:f3:46:ca:5e:b9:70:73:ad:84:97:cc:3e:b4:
c7:2b:a8:ee:ab:92:e5:ec:e3:b0:ee:04:81:0b:56:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:12:F5:CD:2A:08:B8:E3:6B:3E:8E:75:4E:CE:34:6B:EE:A7:39:C8
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:03:91:09:e3:d9:63:52:22:db:1b:23:04:67:75:9f:90:94:
c3:75:a6:47:25:24:2a:8e:d3:8c:1a:7c:cc:57:82:fc:a9:e2:
4b:46:e5:d6:2a:b5:86:cd:5f:f6:f7:4d:02:bb:ac:7b:b8:73:
18:3a:eb:bc:6e:82:95:82:8f:e2:88:72:22:ae:8b:81:94:87:
b7:c7:2e:b8:ad:c4:f1:e6:3c:07:c5:c6:e8:ad:e4:b5:05:ac:
f9:98:df:6b:1c:32:94:00:f5:f5:19:fe:08:3d:66:03:66:7d:
6b:9c:9f:a6:63:46:bf:04:64:7e:57:ce:30:05:40:6a:ab:72:
ce:e9:c5:d7:fb:db:51:4e:82:39:81:ec:8d:29:6e:7c:f2:10:
4d:f6:79:34:24:aa:0b:31:8f:aa:99:6a:7d:e0:20:a1:3d:d0:
e3:df:b7:bf:69:14:7a:aa:e7:f8:af:5c:aa:57:e5:2a:30:1f:
8a:b4:24:f1:93:27:47:66:87:95:1a:6e:7c:bd:24:06:ed:0e:
37:16:ef:c1:9e:70:35:b3:b8:b2:ef:0b:4e:3a:81:38:b5:48:
4d:99:65:79:2f:3f:c4:d0:c8:48:00:ed:73:63:ad:32:15:5d:
0a:50:da:a4:63:54:1a:c7:fb:05:5c:e5:41:20:12:41:b5:19:
5e:fe:b4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:31:19 2026 by rpki-client