Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: VC1tT7bAL5QVmzyCiDS3Np9nbVhMJ6hlRxpK04Gb8Xk=
Subject key identifier: BD:96:73:37:04:11:51:31:E7:FF:7B:49:FC:42:F9:33:6A:04:A5:40
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 01A13ECBBFA9E5C3D6376BD18B699E16B9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 1369
Signing time: Thu 15 Oct 2026 09:01:42 +0000
Manifest this update: Thu 15 Oct 2026 09:01:42 +0000
Manifest next update: Fri 16 Oct 2026 09:01:42 +0000
Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=)
2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: PuYbnwigXybnRxuNAKezXws5lpFNDkx4AvpeZLfWx44=)
3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:bf:a9:e5:c3:d6:37:6b:d1:8b:69:9e:16:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Oct 15 09:01:42 2026 GMT
Not After : Oct 16 09:01:42 2026 GMT
Subject: CN=bd96733704115131e7ff7b49fc42f9336a04a540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:89:d1:5a:ef:91:f1:73:4b:e4:c2:fd:a1:
be:16:dd:a8:28:5c:7d:8d:12:3f:55:44:6f:1c:d7:
6c:2f:b4:69:15:6b:0f:7d:83:32:06:3b:9c:28:d4:
4b:9c:d4:d6:3d:7e:49:cd:aa:8a:7d:bc:c1:29:03:
45:3e:e0:e5:1a:0d:9f:bb:0b:6a:b9:7d:fb:33:b1:
0f:1f:cd:e0:d2:14:94:99:e6:0f:97:8e:a8:f9:7d:
57:62:01:8f:33:9e:71:4f:fd:a3:61:22:50:de:6a:
e5:cb:9f:a8:df:54:60:3a:74:0a:27:5f:f6:98:0a:
07:1f:f7:f8:0d:aa:34:bb:f3:c6:ec:27:fb:30:57:
bd:7a:c5:17:fd:ae:90:c2:1b:ed:28:a6:f2:a8:e4:
26:92:bd:ab:04:f2:65:6e:fe:09:b3:5a:b5:40:66:
c3:ed:72:9d:c1:31:16:44:79:32:89:10:08:fa:f1:
b2:e1:e9:8c:3d:d5:8f:ca:f0:24:63:a4:8d:5e:f8:
a4:5b:0a:39:78:0b:84:6e:ba:d4:a4:a8:0a:a1:e5:
ed:41:3f:32:eb:f1:1a:5d:3a:73:81:8b:6a:4f:fe:
4d:24:7c:23:12:8d:f3:86:14:50:5d:2d:b3:3d:bb:
8a:de:47:d8:ab:c5:d8:a1:51:8c:42:bd:47:d6:f1:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:96:73:37:04:11:51:31:E7:FF:7B:49:FC:42:F9:33:6A:04:A5:40
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a4:22:1c:56:51:0d:2a:a2:a0:01:6b:14:89:ac:bc:32:cc:
6d:c2:52:e8:da:ce:18:00:9c:c6:a8:88:54:23:06:8c:2f:ab:
28:77:0e:4f:29:83:5e:e8:77:a5:57:9e:bc:28:46:83:d8:c2:
aa:10:e8:48:01:37:3d:89:16:c6:fa:84:48:96:c5:90:aa:31:
05:be:c1:4f:cd:bf:b8:9d:38:28:5f:05:4b:53:75:3c:2e:cb:
b8:02:65:29:f6:3d:97:9c:6d:1f:12:2f:ef:f2:9f:88:c6:fa:
79:87:52:de:64:37:d9:ad:8f:7c:25:12:c6:81:ce:1b:15:ad:
82:53:21:31:49:50:78:dd:0c:bb:e7:8e:8b:67:f0:cd:e8:a5:
7a:8d:98:bc:b7:65:05:84:68:64:f7:ff:91:36:a1:3f:26:cb:
b3:58:e0:7a:31:33:90:32:e1:4e:fa:0e:e5:62:97:80:c0:6e:
b3:ab:e0:a1:ef:5d:00:b0:04:f3:44:02:ac:cf:3f:98:40:cd:
7b:08:11:b8:d4:93:df:6e:45:dd:b2:ac:c2:2f:4a:82:83:10:
ae:3d:35:81:55:07:55:9a:70:d7:27:db:50:b1:f4:c6:34:5e:
e7:fc:72:cc:96:f2:00:0a:d0:c7:8a:49:fb:98:10:84:3d:f2:
03:57:1a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:20 2026 by rpki-client