Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: 3IIYHdovI37CtLT+bDs8/vvzBhmtN0W+aonUhWlQHmg=
Subject key identifier: 5D:15:47:F5:F2:44:76:9E:91:4E:8B:E0:EC:89:D5:C2:95:3C:6E:AE
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 01A16BDA65B5B7E27A211FBA69ACDC91AFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 07D0
Signing time: Sat 24 Oct 2026 03:00:37 +0000
Manifest this update: Sat 24 Oct 2026 03:00:37 +0000
Manifest next update: Sun 25 Oct 2026 03:00:37 +0000
Files and hashes: 1: NcnGkdErOmMk_0NOiHBMY1BqThA.roa (hash: PgvTT7EFBgrWeXVoNUr6zZBzW+dMw+OFLBnU00RhurU=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: h5bYraEGjLZIqKQYjNLCm7Q9KHYfG3vI6Z2ItUbgOKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:da:65:b5:b7:e2:7a:21:1f:ba:69:ac:dc:91:af:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Oct 24 03:00:37 2026 GMT
Not After : Oct 25 03:00:37 2026 GMT
Subject: CN=5d1547f5f244769e914e8be0ec89d5c2953c6eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:b1:d2:7c:f2:1a:10:15:e9:d5:44:60:20:
22:5b:78:15:f0:76:b5:54:4d:8a:a4:e1:cd:0d:d1:
cf:c8:a5:fa:1d:23:88:9b:f0:c9:fd:34:ba:08:9e:
eb:1b:07:4a:e5:58:67:04:36:80:dc:89:60:07:df:
6e:0d:b6:ac:47:cc:1d:24:bf:17:01:7a:5a:43:00:
8d:43:56:7d:b3:53:5f:9e:06:61:fa:98:f2:bf:db:
c0:0f:3d:25:81:62:ea:31:aa:d4:b5:3e:d4:bb:01:
39:df:11:5c:05:6c:e8:1a:4a:e5:15:e8:46:f1:99:
33:4e:25:38:f6:08:bf:df:c9:42:8c:d7:0d:8d:e7:
2e:ae:29:d2:78:ec:4f:5f:e1:41:82:84:8e:21:d2:
ed:81:1c:ac:30:2a:8e:29:89:ed:a2:a9:7c:ea:11:
2c:f6:fe:82:a5:26:c3:e3:07:10:a0:d7:00:7f:86:
07:19:b2:e3:fa:a4:25:ab:cc:02:a9:32:b3:1a:88:
df:ce:1a:a0:d1:a5:9d:c1:ca:b3:f6:0b:f2:69:3d:
88:6a:86:e6:79:43:bd:39:eb:97:a0:be:7c:96:4e:
33:fa:9b:33:af:12:69:a6:fa:5f:86:6c:16:d8:dc:
ce:35:b4:44:9a:dd:7b:83:b8:7f:57:10:39:08:2f:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:15:47:F5:F2:44:76:9E:91:4E:8B:E0:EC:89:D5:C2:95:3C:6E:AE
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:03:34:b8:a9:17:76:f1:af:ee:6d:f9:8e:0a:8d:cc:27:08:
ea:49:ea:7d:12:35:54:9b:cb:27:90:53:18:59:d1:74:55:4a:
a8:92:ab:41:06:5b:5b:38:6a:d1:23:1f:0f:59:e0:9e:34:15:
8f:29:0a:2a:bd:73:f9:1c:62:62:c7:63:1d:33:ce:43:93:75:
20:bb:b3:d0:3c:1a:ac:3b:1e:98:82:f3:2b:f6:09:4f:74:88:
7a:55:c3:0b:c5:9c:e2:7d:26:8c:da:6f:20:0a:a2:3c:c6:ac:
8e:0c:e3:f9:85:ed:62:0c:09:3d:5c:ff:38:b6:e1:db:f3:e3:
e8:61:5e:e2:73:02:4f:69:d0:79:26:17:b0:09:ea:f8:dc:e1:
7d:4c:32:93:66:a6:06:cb:d3:f4:83:8e:cd:3f:8c:01:9a:53:
59:db:c5:67:68:29:61:87:9d:f5:7e:d6:b1:5d:d6:00:f3:f5:
3c:d9:2a:5d:b1:df:62:0f:87:79:1f:e4:a0:3e:61:9f:f9:0d:
ef:36:2e:f1:fd:32:c7:3c:7b:ff:1b:7d:b0:0a:ec:f0:b0:ab:
c2:96:fd:18:fb:30:aa:7e:2b:88:83:64:22:9c:66:f7:13:b0:
63:ff:07:96:2c:20:49:61:4f:e0:5f:77:39:9e:dd:a3:5f:35:
69:64:55:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:38:27 2026 by rpki-client