Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: T7wz1lZQ9x43Wzgqv4mr9i5NFIxH4GjYucN7BaZfiYw=
Subject key identifier: 3E:26:26:F2:25:4B:44:F7:87:9D:4F:26:B9:E2:4F:39:97:2B:19:20
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 01A11974F073B604599A69A293086C8172DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1A91
Signing time: Thu 08 Oct 2026 03:00:56 +0000
Manifest this update: Thu 08 Oct 2026 03:00:56 +0000
Manifest next update: Fri 09 Oct 2026 03:00:56 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: 0jsFEdvB7xE/oLuWz0uc73y1a01u4N9BeEVxXnCLKMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:f0:73:b6:04:59:9a:69:a2:93:08:6c:81:72:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Oct 8 03:00:56 2026 GMT
Not After : Oct 9 03:00:56 2026 GMT
Subject: CN=3e2626f2254b44f7879d4f26b9e24f39972b1920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:6d:ee:89:25:7b:32:99:2c:7a:31:99:74:
77:a8:9a:6f:30:e4:4d:47:32:78:18:8d:8b:14:41:
4a:21:4e:28:25:b0:b7:96:a3:ac:1a:a4:d8:b1:3c:
19:63:3d:6e:92:70:c5:7e:03:c1:7d:dd:08:42:a6:
9f:82:36:fe:18:2f:eb:2a:06:06:46:e1:7b:2d:06:
55:02:66:1c:9b:55:33:34:3b:85:40:7a:9d:ce:0f:
62:e2:ac:58:e2:77:53:60:8c:e1:e9:2a:29:54:1b:
a0:c0:ec:62:4c:94:63:af:68:82:8e:4b:3d:55:87:
36:10:6e:d1:2d:5d:dc:a1:0e:03:b5:a0:ff:1f:3c:
0c:6d:c4:63:42:05:5d:83:37:ac:7a:7d:8f:ce:1d:
5f:36:f6:35:08:71:e5:2c:8e:f8:c7:f5:13:a4:a8:
18:ba:12:18:e8:a4:d1:37:29:3b:ff:cb:fb:85:75:
86:fb:32:ec:8d:21:05:21:93:b2:3b:84:5e:36:e6:
52:f5:43:70:e8:86:66:14:ca:70:1f:99:5a:ac:bc:
e9:85:1d:a9:be:06:8f:ff:d8:6f:34:b5:c5:7f:a8:
4f:34:5a:fe:3c:cc:ef:1d:09:09:cd:81:12:52:c1:
ec:94:b7:6f:d3:fb:7c:17:f4:e6:4f:b0:9e:73:43:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:26:26:F2:25:4B:44:F7:87:9D:4F:26:B9:E2:4F:39:97:2B:19:20
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3e:a2:6d:73:2a:9d:27:23:2c:25:5c:5b:93:54:01:a9:bb:
e2:c3:f6:6a:0e:05:b9:ee:16:3b:af:4f:ee:5f:dc:a1:6f:14:
30:1a:30:df:71:27:42:af:0c:96:ab:16:57:73:79:5d:03:56:
85:50:77:fd:8a:83:0f:d5:11:f8:65:a0:82:d5:b2:ff:2f:96:
5b:75:eb:f2:e9:38:34:56:39:37:c5:12:70:81:36:e7:55:28:
a4:d1:6e:08:84:b3:71:51:c6:b7:cf:d4:28:2b:ce:aa:c9:a2:
cd:06:0c:a0:55:4e:67:57:4e:b3:cb:74:84:b0:d6:91:2d:a8:
43:d0:87:f0:c9:7d:86:2e:1a:20:54:cf:ee:ae:8c:18:23:ac:
c0:8a:cc:9b:b0:34:fb:c7:ae:73:c5:87:55:cb:10:d5:d6:d7:
85:52:68:58:88:07:46:00:07:6d:2a:0a:54:17:0c:ad:dd:19:
03:e7:e5:17:66:6b:80:9f:99:25:0c:e5:e7:b4:f4:13:f9:78:
88:55:62:4d:9f:b5:03:79:d0:91:77:6b:0f:d6:3a:a0:08:ac:
43:3d:6e:67:51:6c:a8:d8:09:a4:05:69:7b:50:95:ff:a3:60:
97:7c:5c:c6:66:37:67:d8:d4:59:be:cd:02:4f:6d:44:24:66:
0f:69:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:56:12 2026 by rpki-client