Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: vEmBTGXQWTU5RQF0qmklBIpWOT1eDQ4AqIAzIyNKKW8=
Subject key identifier: 5C:C8:4A:D5:AE:D2:F9:1A:EC:57:26:8A:9E:30:63:C1:D9:76:88:08
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 01A13DB8B1EA75D074881281F2639AAF534D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 1154
Signing time: Thu 15 Oct 2026 04:01:16 +0000
Manifest this update: Thu 15 Oct 2026 04:01:16 +0000
Manifest next update: Fri 16 Oct 2026 04:01:16 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: 7mPGwR+1TzESa1RBFvgMcEaT1gO0uk3JvI9sJJw2IZg=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:b1:ea:75:d0:74:88:12:81:f2:63:9a:af:53:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Oct 15 04:01:16 2026 GMT
Not After : Oct 16 04:01:16 2026 GMT
Subject: CN=5cc84ad5aed2f91aec57268a9e3063c1d9768808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:c3:0d:0d:8f:5d:bc:48:ee:4d:70:16:d2:
e8:79:d8:6d:34:3f:e2:64:df:29:41:a4:54:63:e5:
7d:ad:33:7d:89:bc:77:58:3e:aa:86:84:a8:4b:6c:
88:6b:da:c5:6c:67:75:eb:24:bd:b8:58:83:77:46:
0d:86:52:92:a9:85:da:f0:be:88:1c:d6:b8:ab:0f:
59:28:5e:c1:63:2a:2c:d3:36:af:03:53:1c:b6:c3:
5f:b5:7f:d0:85:6a:e5:4e:2d:69:d7:a6:2e:0d:df:
9f:2f:13:46:40:1c:63:a4:6c:6c:d1:47:51:8f:9b:
4b:3c:5d:a7:49:2e:6b:98:24:93:69:3f:a9:b5:a0:
34:c1:84:14:b8:b5:e9:f3:76:d9:e2:84:4e:1b:d4:
9f:ea:80:51:aa:51:c9:71:30:8f:c1:d8:67:57:cc:
51:31:5f:8f:67:b7:3f:88:07:99:c0:af:ef:38:da:
e1:cc:26:c8:69:c5:2a:80:01:bb:4d:df:55:b7:8f:
c1:78:cd:d4:14:41:2a:71:88:7e:0d:97:cf:46:be:
e8:10:9b:36:08:ec:0a:e8:bf:b8:c1:d7:1b:21:e8:
88:f9:7b:dd:c2:ee:be:fe:6d:fb:6e:7c:a8:3a:ad:
c2:76:62:a8:20:c0:9f:f3:60:ab:4c:44:fd:e1:39:
86:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C8:4A:D5:AE:D2:F9:1A:EC:57:26:8A:9E:30:63:C1:D9:76:88:08
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9f:d8:8c:fc:5e:b1:1c:ed:e9:65:d4:0b:7b:31:7e:65:7c:
e1:d1:8d:be:56:c7:e7:7b:7b:1b:5f:19:b9:be:d7:5c:cb:fb:
df:ad:70:cf:70:f1:d5:3a:70:2f:0d:35:c6:c9:bc:22:b6:bd:
00:cb:9d:0d:28:38:ec:21:01:64:0f:ea:af:84:4e:da:ea:34:
47:7e:e2:4c:e7:18:50:e3:3d:40:49:3b:22:90:47:84:7c:8d:
c1:a2:2f:5e:43:2a:37:85:26:07:06:ac:04:f3:7c:3a:d1:39:
55:47:58:f2:c9:3f:72:9f:79:13:18:fb:48:66:1e:e2:44:0e:
75:a1:b7:f3:40:d6:1e:bc:99:17:cc:b5:07:bc:ee:7a:f8:b8:
f8:bb:a3:77:62:f2:d6:1a:84:30:b7:a6:ba:9b:45:47:2f:57:
29:01:50:f1:02:81:a4:c8:c3:44:19:df:57:4d:3a:72:83:60:
dc:47:98:59:8c:9e:97:6d:9f:dc:7f:69:a6:bb:1d:8c:2e:d6:
e0:b4:e9:d9:42:b1:86:54:6e:66:f4:de:b8:0a:e7:d7:94:5c:
91:2a:fc:fd:1f:4e:8b:e3:1c:20:75:27:76:96:fc:c2:e1:b5:
fb:fb:b3:07:d9:35:1b:c7:ee:55:25:db:03:3a:a6:2f:b3:59:
ab:ab:f2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:14:15 2026 by rpki-client