Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: Ankh0gikMXqtjJ5k9jfU2aHvkTz10agSV03Cv0fGcMA=
Subject key identifier: 41:69:B1:6C:89:D9:32:4A:51:E8:F4:84:45:AE:58:4E:D9:8B:0F:3E
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 01A0F8D7C17B5A13EB41BD1D14F8A176C819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 1A2A
Signing time: Thu 01 Oct 2026 19:01:24 +0000
Manifest this update: Thu 01 Oct 2026 19:01:24 +0000
Manifest next update: Fri 02 Oct 2026 19:01:24 +0000
Files and hashes: 1: 6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa (hash: 7Tyj4JshIbYP3V9AawiQ2X+dktavULDW7Khh9vcmSus=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: Qz8vSV+JexizGHmNwQ67DnmqrJkzcZrgi/O5Edmusfg=)
3: zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa (hash: GqW80/tMAbtkCDtDVmCwRVj7WYcfpvr4HUTuVqPBK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:d7:c1:7b:5a:13:eb:41:bd:1d:14:f8:a1:76:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Oct 1 19:01:24 2026 GMT
Not After : Oct 2 19:01:24 2026 GMT
Subject: CN=4169b16c89d9324a51e8f48445ae584ed98b0f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:6a:d1:12:6f:09:d4:3a:ec:f8:dd:33:98:
be:29:7e:58:50:82:64:01:cf:be:9c:d6:94:40:66:
8d:10:5b:eb:b8:fe:4e:38:7a:8c:32:5d:e6:fe:c0:
1e:f3:d1:3a:1c:97:4f:5b:8d:b4:69:25:7d:a6:f9:
d4:14:eb:db:1a:02:f2:f2:54:de:f8:67:18:b7:29:
6b:51:1d:4a:bb:51:a1:a5:39:78:b0:50:0b:dc:32:
13:30:84:1d:a6:94:6c:64:a3:a2:72:8f:35:1d:0e:
07:cd:af:d0:82:45:ea:42:b3:a9:2c:7a:70:91:1a:
11:93:bc:73:d8:72:d3:49:c2:99:86:c0:f5:5c:03:
0d:06:46:60:15:88:d0:75:d9:b5:7a:0b:92:88:0a:
f3:08:96:48:af:52:8f:3a:44:cc:e3:81:47:3a:44:
63:f5:96:c1:b6:1e:fa:98:8e:37:1a:53:85:d6:c5:
40:2d:61:1c:c7:18:9f:43:6c:6d:e3:f9:31:a3:92:
e0:9e:08:9d:a3:70:ef:64:90:30:d4:1b:6f:40:c4:
1e:64:1a:b8:d5:01:db:ff:ac:20:a5:ab:76:f5:91:
11:14:5a:39:e6:2a:ed:c2:0a:44:1e:d7:8a:e9:23:
81:3e:35:01:c8:9f:db:f6:44:d2:4d:84:b6:5c:05:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:B1:6C:89:D9:32:4A:51:E8:F4:84:45:AE:58:4E:D9:8B:0F:3E
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ca:ad:72:09:20:7d:d5:c6:8c:4f:dd:60:a0:5b:18:42:75:
98:ab:4f:5c:fc:42:f3:d5:5e:13:24:4c:90:31:d6:e0:59:90:
94:29:b6:2a:6f:ef:1a:b2:9e:ed:0d:00:85:b1:b4:a3:a7:eb:
b2:7c:33:32:93:b6:eb:1c:19:4a:1d:b6:19:e0:56:12:3a:81:
68:3a:83:ec:9f:37:1f:d9:16:a4:81:a6:14:ac:6a:90:42:69:
d2:36:4c:7f:03:4e:ae:05:a4:fe:8f:fa:31:8a:a1:83:37:21:
af:ee:b7:89:eb:3f:de:00:9c:5b:c7:5d:da:f1:e1:31:02:29:
eb:e7:1b:99:b4:28:a4:9e:ce:c8:d3:ce:f9:bc:a0:36:e9:46:
11:36:53:ad:4b:87:31:ec:da:0a:4a:5f:87:5e:6d:70:05:26:
7a:d8:2c:a2:7e:42:6c:42:61:21:76:99:97:d7:96:af:0b:78:
c2:1b:eb:c1:3c:05:cd:59:54:bb:e6:99:13:ba:89:a6:89:82:
6e:a5:f5:c2:31:a1:a9:a0:02:27:2b:76:38:04:fc:67:36:0a:
96:77:2d:84:ba:51:f8:da:3e:8c:39:0e:cc:e4:d9:dc:e3:ec:
8d:f7:1c:66:26:a4:53:ea:f3:38:4e:60:ef:2a:13:16:51:35:
15:66:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 01:27:23 2026 by rpki-client