Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: mnSrq0GRJrXNBvnsdbZehjaOmlkT+K320eROrf05scU=
Subject key identifier: 4F:F6:04:BE:6A:90:F8:1C:20:C1:01:A6:01:9A:77:7B:F8:1B:89:00
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 01A143BAE3D0D4808FDD4861A19700E387C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1AA9
Signing time: Fri 16 Oct 2026 08:01:23 +0000
Manifest this update: Fri 16 Oct 2026 08:01:23 +0000
Manifest next update: Sat 17 Oct 2026 08:01:23 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: zMSWqyq5ICSCNVxErFVhZy30Dtu3b5tPB2B/MYsQj10=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:ba:e3:d0:d4:80:8f:dd:48:61:a1:97:00:e3:87:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Oct 16 08:01:23 2026 GMT
Not After : Oct 17 08:01:23 2026 GMT
Subject: CN=4ff604be6a90f81c20c101a6019a777bf81b8900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:be:22:07:ec:bd:10:5a:9a:a7:52:b8:22:
f9:76:bb:d0:cc:8d:47:a5:a3:2d:b0:b7:be:d4:14:
84:41:d9:36:2c:6f:aa:35:01:eb:9c:20:ac:da:a3:
e3:f0:9c:84:b4:4c:25:ae:98:ef:6f:7d:e6:58:bb:
f0:55:a1:d4:12:fe:d0:96:8f:d3:20:ce:b2:26:cb:
59:15:4a:42:6d:5f:61:78:ab:cc:93:63:fb:14:21:
27:82:6a:31:a8:22:4d:bb:6a:fd:13:cd:09:87:e1:
e1:e7:44:bb:85:d5:fc:1c:fc:a9:95:eb:b6:1d:a5:
cd:3d:7b:26:91:ae:ce:f5:01:9f:fa:c6:20:5b:30:
5e:ac:09:96:50:41:3b:08:f5:83:2b:da:d2:ad:c4:
fb:37:77:ad:ab:95:2b:1b:dc:4a:fc:7d:59:7d:7f:
7e:ce:81:ac:ce:ef:7f:08:58:f5:3f:37:87:e5:de:
12:21:a8:18:34:73:df:26:db:81:56:5c:fb:3f:74:
4f:2c:51:bb:2e:c9:ae:ba:ef:e2:04:53:d3:9a:68:
81:47:dc:84:b9:04:70:6e:d6:05:24:0d:e4:52:6f:
2b:53:15:70:1c:d5:0f:9a:6d:d7:34:ce:7d:df:eb:
7e:26:63:02:dc:e6:ac:2e:69:49:3e:cd:09:18:5e:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:04:BE:6A:90:F8:1C:20:C1:01:A6:01:9A:77:7B:F8:1B:89:00
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9f:94:7c:e9:09:48:82:23:f6:fd:91:85:58:49:13:8f:bf:
d3:5e:b5:4e:4d:94:4d:17:b9:86:29:80:01:62:a8:b1:f4:74:
4f:c7:f0:a6:01:17:22:7d:76:9b:0c:13:4b:87:e7:1a:f6:34:
24:a9:59:fe:20:c0:2a:4c:4d:15:03:5b:63:e9:86:37:24:28:
e3:0c:c5:7e:c7:6b:0a:0a:3b:44:bb:83:01:64:9b:d2:3a:00:
4c:f8:0e:28:e3:c0:5d:52:5c:65:3d:dc:eb:bb:e4:09:3d:3d:
26:93:97:2e:4f:f3:96:20:4e:a9:29:ad:13:09:62:29:cc:2a:
f3:e5:1e:55:e0:72:c7:56:2f:b5:01:1f:93:1b:48:c0:aa:77:
82:06:53:0f:d2:7b:9a:36:6d:3e:d5:46:5c:ef:a2:5b:e7:e6:
ac:89:4b:05:b8:67:fe:0b:bf:f5:0d:fb:91:6f:13:45:ce:34:
20:ff:8d:10:54:09:ad:3e:91:d6:eb:fd:1b:2b:d0:00:c4:4d:
4f:06:28:5f:2d:f0:ce:e7:57:72:04:8e:b3:0c:3b:1c:bc:44:
55:60:8d:47:a2:0d:32:e6:0c:98:03:61:ba:ee:86:1b:11:77:
00:fe:61:c9:7c:5a:ef:3d:8d:03:d4:c8:df:60:6a:bb:19:e8:
4f:ab:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 18:19:36 2026 by rpki-client