Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier: gdT5IUefM21JW1++FlUo20w1cDKXvLAFF+LMFU2UG24=
Subject key identifier: AB:97:3D:D4:1B:82:C3:85:A9:B8:26:4A:5C:92:78:A7:C9:2F:F9:AD
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 01A13D816908797145818228FEF4CB6F998F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 03:00:53 +0000
Manifest this update: Thu 15 Oct 2026 03:00:53 +0000
Manifest next update: Fri 16 Oct 2026 03:00:53 +0000
Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: oWK+M7Cgc8QFXksLHUnzeaotQCeO7i5Dy3DlgynWzGk=)
2: WRypO8-yDgb6NJZCCYorwXfwXbM.roa (hash: 4tIQDxaiySk1n1Tes8D8u/dP8eWmOAzkRZI8pT57S7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:69:08:79:71:45:81:82:28:fe:f4:cb:6f:99:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Oct 15 03:00:53 2026 GMT
Not After : Oct 16 03:00:53 2026 GMT
Subject: CN=ab973dd41b82c385a9b8264a5c9278a7c92ff9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:33:82:89:4c:60:cd:b2:ba:7e:d0:bf:40:
76:ce:74:d8:bf:36:6c:73:95:48:76:e0:4a:8e:c7:
37:7a:fd:81:b7:d8:86:41:d0:41:15:db:a0:49:a8:
d7:bb:72:b9:59:14:39:61:b2:fa:99:0a:bd:4f:83:
32:cb:7f:ac:34:3b:17:cb:b7:37:b4:be:d3:b7:de:
d3:8b:09:99:e9:5a:58:39:b2:84:8a:a5:f5:06:b2:
88:52:d1:f9:e4:c8:55:cf:30:3f:ce:db:ff:94:5d:
ba:82:d5:2f:ae:e9:4e:8f:24:ba:46:9a:52:39:20:
1a:01:d2:8e:03:41:f5:f9:9d:46:52:04:a9:f4:19:
5a:e0:31:b4:48:2c:c5:41:f7:36:4e:34:9a:59:e1:
63:7b:0d:df:d3:ef:b5:ee:99:96:12:9c:5e:df:1a:
97:67:96:ee:d6:c3:c1:70:4e:24:59:2f:72:f5:af:
15:d2:55:e8:56:47:32:19:30:1d:93:4a:da:08:5a:
ca:79:c0:36:88:40:d6:98:58:06:3f:0b:68:bb:47:
a1:7a:44:0c:6b:7b:2a:fc:e2:67:d8:70:ee:9d:e0:
5d:d2:84:7c:36:d5:4d:6f:2d:6a:0a:f4:ef:23:e9:
ae:9f:7f:b6:4d:a2:9a:cc:08:75:02:ae:5f:18:cc:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:97:3D:D4:1B:82:C3:85:A9:B8:26:4A:5C:92:78:A7:C9:2F:F9:AD
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:30:ad:91:06:d1:53:27:fd:bc:9c:5f:8e:14:d7:c9:c4:b8:
9d:bf:ed:8d:df:c5:85:21:74:34:ed:21:76:37:25:43:df:da:
cf:0f:3d:be:25:79:dd:54:f9:37:45:51:94:98:77:3f:50:f6:
df:00:d8:c3:85:52:39:51:8a:e4:5a:17:43:20:39:3b:77:a4:
02:28:3f:41:4b:99:d3:1e:ce:c3:21:f5:70:ba:0d:32:f8:b4:
48:44:f0:fc:d7:bf:2b:8c:eb:c0:27:e5:90:c7:e8:76:71:d8:
24:8e:1a:22:f2:e5:27:5a:c3:74:3f:90:36:25:e0:4a:8b:8c:
51:bb:3e:18:59:33:60:65:6e:9a:49:2e:f5:f3:98:72:21:19:
94:90:b8:1e:23:2c:20:20:b8:f8:d5:41:1f:73:a4:d7:8a:52:
c2:46:b8:01:56:f7:e6:fb:9b:90:d7:e6:c7:d2:14:81:79:6b:
c2:e3:81:a2:53:6c:b6:6c:48:d1:54:9c:8c:54:4c:79:88:05:
52:cd:3d:79:27:b1:84:84:7a:55:ac:8f:ae:cc:74:99:b3:6a:
60:8a:3b:24:60:9f:2e:14:57:47:6f:48:5e:75:c8:0d:bf:ea:
00:55:40:d4:99:d0:61:5c:e1:20:46:a8:cb:7d:be:93:24:c5:
53:0d:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:20:55 2026 by rpki-client