
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: 4h3ZjXp8e+gfPRgwT/SBwWCIG2PvcxDpryGU+rFIXcc=
Subject key identifier: 38:0D:65:EE:14:5A:55:63:9A:A5:C1:78:0D:DD:7E:13:D8:81:E7:2B
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 01A13E25FAA9C55F8B774D0D43C8CC8C77A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 06:00:38 +0000
Manifest this update: Thu 15 Oct 2026 06:00:38 +0000
Manifest next update: Fri 16 Oct 2026 06:00:38 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: /tUsEsTUpt4H0bm+0q/zN8uOv6xQ2WEjt/SSxnvo9bg=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:fa:a9:c5:5f:8b:77:4d:0d:43:c8:cc:8c:77:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Oct 15 06:00:38 2026 GMT
Not After : Oct 16 06:00:38 2026 GMT
Subject: CN=380d65ee145a55639aa5c1780ddd7e13d881e72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:25:43:b9:fa:7a:0e:6b:2e:97:0d:38:50:
cd:d3:0a:61:1a:ab:42:c0:75:88:b4:85:8a:dc:75:
8b:2e:45:46:b3:aa:aa:e3:3e:f2:d4:b3:60:bf:9e:
dd:01:17:8c:f9:3d:d1:fb:4a:ee:a6:b6:8a:da:5c:
aa:94:bc:55:1f:7f:8f:8f:dc:4b:5c:2e:66:d0:99:
b0:8a:aa:77:0b:ae:61:f9:13:d3:61:37:72:07:c7:
6e:04:b5:2a:db:da:fa:58:4c:d6:d1:37:e5:fa:9f:
1c:bf:a0:ef:47:3d:62:c0:ee:af:3e:b3:c9:83:f3:
ee:0e:c1:21:85:ab:92:96:7d:8a:a7:25:c0:5e:f3:
9d:e2:47:4f:08:7d:7c:af:ab:b9:ed:91:0e:40:cc:
c4:58:a9:f8:5f:df:ea:a3:16:71:f9:f8:4b:09:7e:
ad:c8:ab:e3:54:f3:57:b5:7b:08:2d:74:13:b7:24:
c3:14:89:d5:3c:4e:d9:fa:d1:52:34:20:ff:7d:82:
a3:72:bc:3d:95:5e:07:d1:d3:6f:0c:e3:8e:f9:07:
9f:9e:c9:cd:6a:25:17:80:47:74:3d:cd:a5:67:4f:
8b:ba:df:a7:0b:b4:3d:b5:cc:36:d0:c5:80:45:ba:
a8:85:ba:26:c3:2a:1e:ae:76:9e:6c:f7:ac:1f:a3:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0D:65:EE:14:5A:55:63:9A:A5:C1:78:0D:DD:7E:13:D8:81:E7:2B
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:09:d0:33:1e:78:4a:14:38:f3:82:04:62:d6:ba:c0:78:26:
9c:0a:1f:55:70:86:26:cd:17:1c:b6:15:24:08:01:16:d0:d2:
8e:f4:0a:4e:59:f7:0e:30:cf:b8:b2:fc:38:ab:0a:f3:bb:32:
f1:69:65:e5:e3:9c:d9:23:84:16:43:f5:e9:36:4d:ef:7e:92:
75:e6:8d:14:2c:c8:30:8f:ab:2f:0a:48:a6:05:5a:98:c1:1d:
fa:c9:ef:27:44:fe:61:a8:38:8d:cc:01:bb:eb:01:67:43:bf:
40:c1:90:23:20:1a:1d:54:c2:32:6b:5e:1e:f3:0a:ef:e3:09:
f8:c8:e2:e5:d7:37:dd:7b:9b:ea:44:90:6a:b7:10:e7:0b:4b:
74:50:67:cf:5a:23:9c:82:3f:39:4c:3e:50:38:e5:3d:87:03:
f4:2e:06:fb:20:83:8d:77:09:d1:97:83:78:0d:44:7b:89:b0:
d4:f9:9d:07:2a:64:e6:22:be:0d:e4:69:25:b4:ee:cf:ba:76:
7b:75:0e:0f:fd:ad:cd:56:4e:04:e7:5c:78:43:6b:4b:32:4b:
48:12:65:ec:07:df:8e:0d:c0:96:34:68:4d:2d:81:8f:60:c4:
17:6b:a1:c2:88:34:fe:e6:c0:c3:78:45:89:34:58:60:ef:1a:
62:77:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:32:50 2026 by rpki-client