Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
File: 891MdxfPacsnmpvjhwzh1ViI6BI.mft (raw, json)
Hash identifier: iFoAXMsFRS06x/0KO2gwTJ9PEoT1GdiEPujA/6GDSGQ=
Subject key identifier: 8E:7F:77:4A:FF:5C:03:30:12:C0:A5:89:E2:B4:FB:67:B6:8F:29:0C
Authority key identifier: F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
Certificate issuer: /CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Certificate serial: 01A11B63CDCF64ADEE652F58F1972A84F4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
Manifest number: 010C
Signing time: Thu 08 Oct 2026 12:01:27 +0000
Manifest this update: Thu 08 Oct 2026 12:01:27 +0000
Manifest next update: Fri 09 Oct 2026 12:01:27 +0000
Files and hashes: 1: 891MdxfPacsnmpvjhwzh1ViI6BI.crl (hash: x/XxHKprnJ8V0Qc0Wlx3fpwgxm2nbaEk9x0+Fs0lqsY=)
2: DaMYvuVk4VxbeiY5886TRjR80-c.roa (hash: D4FeXaKBovPda7PA/y7sGSV1DU6UbX4cAmo6Backls8=)
3: lyXkg79P2FE1dqoSHDtkOfaKYYE.roa (hash: cbRt0iwVvDFLlG9nHuLjCQUjtgic0aVsU0+cAtoJ9AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:cd:cf:64:ad:ee:65:2f:58:f1:97:2a:84:f4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Validity
Not Before: Oct 8 12:01:27 2026 GMT
Not After : Oct 9 12:01:27 2026 GMT
Subject: CN=8e7f774aff5c033012c0a589e2b4fb67b68f290c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:0f:d3:f0:49:4f:c7:b8:f0:dc:24:b7:ba:
49:22:2a:b5:11:fe:c6:9c:53:d5:e0:39:23:ee:01:
d8:14:ba:1f:6b:6f:a4:42:e7:7f:6d:68:7e:47:c7:
da:9b:f7:18:3e:80:cc:84:b8:97:30:23:f9:a0:bf:
d6:63:f2:6f:0d:2e:f7:b3:6b:f4:78:20:6a:9d:49:
25:ee:fd:68:e6:72:3e:d5:75:07:e4:c9:ce:71:56:
e7:04:24:0a:72:a1:78:f9:96:f6:74:c8:29:4a:a6:
67:bd:0d:a2:f6:75:91:03:e1:a2:5a:17:68:28:31:
10:a1:28:62:e9:37:8a:22:15:47:bc:15:d8:02:76:
1c:db:73:1e:2a:9d:3a:a9:c6:9a:22:03:2c:6c:6d:
54:c1:a0:8b:ab:82:21:44:83:18:ec:49:e9:72:25:
df:38:95:45:65:80:07:b6:f4:54:d0:b3:e5:9d:36:
71:b0:b3:6a:71:a2:2f:a9:5f:d4:85:1e:26:45:bd:
7f:e2:5f:d9:89:e5:51:50:5c:82:99:89:5f:b8:ea:
64:56:35:c7:b8:aa:34:ea:f8:2f:1e:a5:af:79:5d:
21:07:fc:91:80:a8:a3:e3:24:5c:6c:7e:ef:3c:f5:
0a:38:32:ad:0f:1a:fb:55:e3:55:6e:b5:95:b5:a8:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7F:77:4A:FF:5C:03:30:12:C0:A5:89:E2:B4:FB:67:B6:8F:29:0C
X509v3 Authority Key Identifier:
keyid:F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5d:10:69:27:fa:b3:a9:fb:af:81:01:91:2a:06:29:d2:f4:
2c:54:d3:08:33:5f:a3:60:c0:47:f9:25:f1:b2:6b:37:d0:7a:
dc:37:37:10:96:64:45:3b:08:cc:13:d5:51:25:bd:41:0d:9c:
eb:f9:3e:7c:17:a8:01:0b:54:de:0e:63:75:55:67:34:43:22:
18:c7:24:43:ee:c8:21:b8:80:d4:1f:b7:03:b5:08:4f:ff:ef:
4c:41:4c:e4:c8:21:52:cb:b8:51:fd:59:32:71:d4:6f:65:3e:
b4:fe:3d:c8:2c:67:60:6d:a4:7f:5c:8f:80:f6:2b:73:68:32:
69:e0:8b:b7:f4:c1:ca:81:99:5b:7c:cd:5f:56:f1:2c:28:7c:
33:f1:4b:ce:c8:84:04:9a:9b:64:7b:55:7d:3e:50:e0:a5:aa:
6b:c6:a4:e8:b7:8d:2e:23:43:9c:65:a9:9f:0e:b6:e3:56:d7:
c8:9e:1a:db:09:b5:0b:1c:7c:29:19:6d:14:e2:86:78:b8:71:
8f:86:69:66:73:67:75:cc:41:77:1d:d7:1c:51:a4:01:51:92:
1e:3a:13:57:34:99:94:f8:f3:3e:e5:dd:94:c8:92:c3:20:03:
52:13:57:31:2e:28:b8:6b:1c:c8:41:a5:ad:d4:db:5e:ea:28:
76:74:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:51:23 2026 by rpki-client