Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: qHkR2swPs1mF8qQQFhK7w/r51UdB754Rbl86Qm9h3bo=
Subject key identifier: F1:53:21:13:1E:80:0A:CC:27:87:AC:B0:C5:05:F3:C8:BE:DE:EA:23
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 01A13DEF33EFCB4B601B2F2DF96AED296310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 139E
Signing time: Thu 15 Oct 2026 05:00:48 +0000
Manifest this update: Thu 15 Oct 2026 05:00:48 +0000
Manifest next update: Fri 16 Oct 2026 05:00:48 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: j1CM3bwIj4vWwOpT7fI2oJHUuLBv4ODUnA/FvGnf65M=)
2: AX2facRajAYTbLHEv2SE-8tACkk.roa (hash: 9A3CFsiIWM3oeDGZNKBGtXDQWoPfKxnYhCoNC50/Ns4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:33:ef:cb:4b:60:1b:2f:2d:f9:6a:ed:29:63:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Oct 15 05:00:48 2026 GMT
Not After : Oct 16 05:00:48 2026 GMT
Subject: CN=f15321131e800acc2787acb0c505f3c8bedeea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:cb:2d:99:87:d2:fc:33:02:d6:0e:e1:4a:
9a:54:eb:b3:cd:bc:ca:07:cf:ca:e7:cb:99:2d:b4:
37:96:73:ce:13:bc:50:ab:9f:94:17:d5:b1:20:46:
2f:ec:b8:01:ae:5d:08:55:32:81:da:96:1a:39:25:
92:38:56:ed:c7:04:f2:43:eb:5c:03:e3:1f:cd:f3:
aa:56:dc:3d:95:ce:b1:c7:76:c1:25:e2:ee:7e:5c:
2d:c6:af:22:dc:95:1a:3d:a8:6e:31:54:b9:e4:19:
26:11:92:40:c7:bc:69:cb:68:47:53:0c:ae:c8:ad:
3f:90:44:05:b0:a4:9b:08:08:b0:73:77:5e:62:f8:
a3:c9:3d:16:38:8b:d8:ca:4b:d7:80:60:d4:9a:74:
03:95:55:3c:80:f9:b2:21:e4:7e:63:71:e7:00:70:
a8:4a:c0:97:36:46:a5:fc:9f:f5:ff:e8:e8:2d:12:
bf:27:2d:10:26:e6:d5:40:3f:91:f0:54:ec:61:3d:
83:61:32:4d:df:a6:fa:68:3f:db:d1:bd:b1:9b:df:
ce:71:45:20:3c:a7:a2:e2:b8:de:cc:ae:57:e0:84:
a1:9a:c3:aa:68:e5:d2:40:cd:14:e9:99:36:75:42:
6e:e3:f8:af:f1:c1:b3:7b:c0:bd:c9:7e:46:b0:de:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:21:13:1E:80:0A:CC:27:87:AC:B0:C5:05:F3:C8:BE:DE:EA:23
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:02:46:d4:4e:59:f8:a1:69:f3:7c:e1:b9:ab:eb:a8:1b:51:
f4:40:4d:f3:7a:da:d3:82:34:76:85:d3:e8:1e:08:15:61:d5:
13:ae:d4:ef:bd:f9:b5:6d:7c:d3:de:39:aa:36:64:bd:62:79:
bc:ac:63:68:3b:29:c4:19:f8:15:09:43:1f:2e:80:9e:1b:35:
cc:7b:df:f5:7a:06:0b:58:8d:3f:f0:d7:51:57:6d:13:3b:a2:
1d:64:e8:51:6f:80:c5:e5:af:e2:3f:a5:b8:a7:6b:b7:d0:3c:
d6:a1:3f:64:a2:3d:33:d0:66:50:7f:d1:70:f3:6b:cf:65:70:
6c:8f:64:44:3e:e3:56:25:f9:2c:08:37:35:f4:90:71:b1:fd:
a6:c5:a7:36:26:35:bc:37:cd:13:45:2c:72:29:77:44:7e:47:
47:a9:77:c3:d0:48:ae:3d:01:5e:38:87:ad:07:9e:76:66:1d:
90:d4:4a:1c:75:07:35:d0:37:9a:24:f2:e7:c9:cf:88:c0:7e:
7d:f3:75:09:32:06:65:1b:b1:19:77:f8:54:5b:71:c5:dd:98:
e8:a7:1d:5e:1d:6b:1b:6e:f5:62:5d:d3:f4:22:02:1a:12:7d:
7a:98:90:98:30:f9:65:d3:b0:56:ad:5d:b8:c5:ca:13:17:67:
35:6e:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:13 2026 by rpki-client