
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File: 74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier: CKLWb3rv+UR/YqAoat6jVPomBmCPUUcmPwgNH1YTIZk=
Subject key identifier: 97:00:32:CE:26:21:D2:8D:C7:4B:89:15:10:7C:25:CF:7B:F6:78:08
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial: 01A13CDC10739DA78891254F4D5215072740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number: 18B8
Signing time: Thu 15 Oct 2026 00:00:17 +0000
Manifest this update: Thu 15 Oct 2026 00:00:17 +0000
Manifest next update: Fri 16 Oct 2026 00:00:17 +0000
Files and hashes: 1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: mEuADUQkAC+U2clANt4Sn6m9jom4RjjGitX66FxsZzk=)
2: BcbpeOE1UIMLYcx9_xoYiBz5cII.roa (hash: C/EPAsh6T699gB8fYjC4QQRKH8QFpe67E9wrm8R7nkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:10:73:9d:a7:88:91:25:4f:4d:52:15:07:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Validity
Not Before: Oct 15 00:00:17 2026 GMT
Not After : Oct 16 00:00:17 2026 GMT
Subject: CN=970032ce2621d28dc74b8915107c25cf7bf67808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:dc:69:51:d7:68:09:4f:54:e4:7d:ff:4d:
54:15:fd:8f:39:f9:2b:4d:31:e9:2e:0b:19:c6:1e:
f5:2c:28:9e:a1:80:45:2d:a7:1d:7a:91:a2:08:ef:
ac:82:bd:ea:de:e0:4a:98:3c:dd:d9:61:0a:00:75:
ac:42:ce:5f:63:cd:a1:ee:b9:32:e3:8a:71:3e:b8:
8f:65:07:a9:84:87:45:c9:51:37:25:b8:1a:70:0e:
63:3a:ba:29:c1:d4:04:43:7c:c4:69:ea:bf:6c:1f:
76:c3:ac:31:64:9e:6b:1f:14:46:f8:d4:08:f0:e3:
e4:0d:82:bc:83:67:3c:70:e4:ea:86:36:b1:c3:68:
3a:04:3a:59:ac:b9:e7:ff:d3:cc:da:7d:03:49:21:
bc:f0:7d:a0:dd:46:6b:9d:91:2a:28:d3:62:50:2a:
b3:1d:7c:5d:7f:dc:2e:ad:fc:8b:ba:f9:bf:41:69:
fd:56:7d:7e:75:a7:9b:3a:64:1e:ed:fc:79:30:df:
fe:0a:74:c8:80:a5:c6:fe:06:9d:d3:e2:ee:1f:b3:
ea:45:69:6d:a3:0f:f3:66:f0:cd:d5:5f:b0:ee:67:
77:d1:9a:1e:81:1a:78:a2:e7:47:2b:a7:91:6f:33:
fe:ff:04:8f:81:38:f6:49:d8:b3:4d:8c:3c:1e:85:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:32:CE:26:21:D2:8D:C7:4B:89:15:10:7C:25:CF:7B:F6:78:08
X509v3 Authority Key Identifier:
keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:21:5f:ff:45:16:31:d8:c6:05:27:1e:ee:75:fc:07:7b:c5:
3a:05:05:82:a4:ef:2b:33:cc:c9:57:c3:42:ea:f8:fb:ab:a7:
42:f7:df:8e:b0:de:bd:38:d8:4a:cd:df:df:ae:d6:4e:7d:a6:
54:1a:65:e2:f7:52:26:e6:eb:99:45:8d:36:53:17:81:cd:44:
3c:73:5b:be:05:70:0f:2e:b3:3d:9a:0b:5e:82:7a:74:d4:01:
25:ce:98:58:89:a3:c3:66:e7:a1:5f:7e:32:9f:97:ab:c9:bb:
cf:8f:22:0d:12:9f:45:92:a6:98:7c:01:a2:c1:ee:31:e6:2b:
da:97:a8:de:9f:36:7c:96:c5:55:0f:ea:76:e3:2a:63:c0:7a:
8f:02:13:b8:68:c3:f1:60:c4:51:1a:60:ac:73:72:2c:1f:4e:
d9:02:92:9c:0f:4b:35:c5:5f:da:21:43:46:1e:ac:f1:78:7d:
f7:7a:b1:9f:fc:23:8f:2a:ed:4f:1b:c3:4b:83:6b:91:c4:c0:
4f:52:56:03:8d:73:93:14:2c:e3:22:f9:d2:fd:bf:f0:27:81:
ca:26:5c:b0:ee:20:e9:2c:38:06:d6:db:b5:cb:db:09:04:30:
51:aa:17:fa:d8:72:2f:d0:bb:db:f8:00:ae:88:c7:cd:71:55:
5a:b7:54:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:02 2026 by rpki-client