Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier: DRJP9kD1Shi5dd2H9T8C8ldG3vI0qWF63pVLnSGtS24=
Subject key identifier: 9D:8C:64:4C:70:EB:BD:0D:2A:42:D5:87:64:22:72:70:32:EE:BB:98
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 01A17F618940D90F88F5F58643CB88A4245E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 22:01:00 +0000
Manifest this update: Tue 27 Oct 2026 22:01:00 +0000
Manifest next update: Wed 28 Oct 2026 22:01:00 +0000
Files and hashes: 1: 3gIp0do7jiNRekvTGYYcxp0N4KQ.asa (hash: NdEXhwinGvt8QXFqMCRPd1EsUHvL+9wNCdKJKLs61vs=)
2: 99lIgCZ8a0ei-5wRBXuee2SsGpY.roa (hash: 1ppSKjyGESECn+t5RQboX3iN+5A+rZBrqwtQSTJrj4A=)
3: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: jMQ5qR7SYSuer6FCp0hJu7n+YLKuA7NgBdVglbQwEms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:89:40:d9:0f:88:f5:f5:86:43:cb:88:a4:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Oct 27 22:01:00 2026 GMT
Not After : Oct 28 22:01:00 2026 GMT
Subject: CN=9d8c644c70ebbd0d2a42d5876422727032eebb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:5c:6c:20:ee:38:eb:d3:f5:fe:37:2f:df:
c3:bd:f0:47:69:98:a6:07:c6:08:d8:68:04:bd:d1:
ac:cd:f2:c6:db:62:e2:f9:87:36:31:c2:28:8e:8a:
47:8e:16:72:5f:34:07:65:f3:02:5c:59:c6:fd:a1:
eb:d4:e9:4e:d7:34:55:32:bd:d8:40:80:de:cb:29:
c1:58:5a:43:ad:bf:39:db:4e:bc:58:14:21:f3:51:
0b:70:d1:b2:ef:1b:f0:c3:31:27:e1:2a:c2:05:4e:
df:64:0b:0e:8d:84:b6:cd:26:77:97:92:a0:5d:0b:
51:78:53:1e:1e:5f:80:4d:48:e0:12:0d:9d:cb:ec:
41:bf:44:9a:82:8c:59:16:56:33:ce:d1:1d:9c:cb:
50:d6:d6:0d:da:d5:29:d7:49:12:7d:80:59:c9:d4:
98:b5:44:85:c1:97:26:90:0b:01:cf:3b:da:e7:70:
8a:bb:83:67:98:b1:a6:ee:01:b0:26:b7:89:ad:2d:
9d:7f:b9:8a:0e:8c:fa:39:64:ab:6f:3d:18:6a:38:
3c:60:03:57:d2:ed:f7:fe:5d:f1:a1:59:ed:00:6d:
a9:8c:e0:69:04:0e:8a:68:76:33:dc:3a:9b:06:47:
fc:49:27:6e:c0:3a:3a:54:a5:14:53:0c:95:d9:8b:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:64:4C:70:EB:BD:0D:2A:42:D5:87:64:22:72:70:32:EE:BB:98
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:49:b0:23:be:1a:3a:db:47:23:2d:44:7f:89:7d:2d:8a:d7:
16:1f:53:d5:ef:3d:42:7a:56:b4:13:26:b9:65:d6:29:2a:77:
f7:f8:31:55:04:5b:97:97:8b:4f:17:f0:74:16:47:8e:c4:79:
68:3b:b8:6b:f9:98:bd:d1:d6:45:ff:80:3a:de:33:29:0b:b7:
bf:ef:ef:ed:24:e4:6a:72:44:33:8a:1d:57:b3:9a:4c:60:eb:
7a:5a:49:49:7b:54:02:11:2b:fa:91:6f:38:9e:97:78:d2:56:
ef:78:6f:f2:e7:7a:b4:ba:79:97:69:3a:0d:25:54:24:63:79:
33:44:f0:25:8b:84:d3:d5:bc:b8:97:a2:09:99:21:6b:5d:a8:
1e:2f:cc:c2:f0:dc:96:b6:13:11:9d:71:fc:b2:2a:14:c4:f6:
97:e3:fa:ba:6b:20:e8:33:12:0d:7a:7a:07:91:6a:66:55:a8:
c3:9f:44:90:c9:f4:cd:26:09:27:94:9b:e9:cb:0b:c8:67:63:
b2:c2:f6:51:40:8d:58:ee:af:d7:c0:83:c6:67:50:0f:34:0b:
bd:d9:27:1c:56:3e:23:16:95:d7:73:4d:be:15:20:59:a9:a9:
ef:9e:ee:7a:65:2d:01:f0:ee:81:00:97:65:dc:73:f3:56:0d:
f0:80:13:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:21:32 2026 by rpki-client