Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: 8uHJiBd4LBjzHMTDnVweFA9n1d9mELkd9I99/lKAx5U=
Subject key identifier: 81:81:AF:6D:60:48:F3:9A:42:6A:84:E2:4A:BA:7B:31:5F:83:05:D6
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 01A176280C837EDBD891FA0DADFAC3C317E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 13CE
Signing time: Mon 26 Oct 2026 03:01:38 +0000
Manifest this update: Mon 26 Oct 2026 03:01:38 +0000
Manifest next update: Tue 27 Oct 2026 03:01:38 +0000
Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=)
2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=)
3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: WO6J0V4SPO7YKqYe+y4mWdVVBHhqKdk3XSO+zmp10gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:0c:83:7e:db:d8:91:fa:0d:ad:fa:c3:c3:17:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Oct 26 03:01:38 2026 GMT
Not After : Oct 27 03:01:38 2026 GMT
Subject: CN=8181af6d6048f39a426a84e24aba7b315f8305d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:a6:82:f1:be:8b:c6:5b:ad:5a:ea:b8:c8:
ec:7a:e6:07:74:9a:e7:60:9b:e1:9f:9d:bb:94:44:
44:4a:26:58:44:9d:e7:fb:89:40:89:b1:8d:95:cc:
1b:4a:5d:54:d1:27:e3:37:9a:ca:ed:13:6b:1c:04:
ea:96:1f:55:ad:b9:64:26:35:de:7f:65:a1:f8:3e:
4a:67:d7:88:34:a9:79:2d:07:58:43:2c:cd:a2:c7:
26:14:e5:0b:b6:27:12:bd:11:d4:92:49:52:0a:1d:
a5:f9:62:3e:97:80:61:3a:24:96:98:42:83:73:6a:
23:39:29:7f:9c:48:c3:47:79:fb:a1:34:99:e5:8d:
00:19:47:40:d4:77:c1:e3:38:09:a6:8b:26:85:72:
6a:91:b9:b5:23:6e:12:32:06:e2:95:07:e2:d5:89:
df:25:cf:b4:c1:c3:48:c0:47:8f:bf:34:30:0f:8b:
3e:e1:6b:a5:fa:9f:ac:13:6c:2a:fc:4c:19:6c:d3:
bc:6f:91:46:b5:04:c0:4f:3a:cb:cf:86:6c:74:2d:
74:ab:3b:ab:e9:3d:ef:82:61:32:19:09:7e:10:54:
02:97:66:d9:c8:d1:61:33:ac:97:b3:72:bf:a8:75:
e2:84:f6:59:26:ed:32:5b:4b:fe:52:cb:02:78:3b:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:81:AF:6D:60:48:F3:9A:42:6A:84:E2:4A:BA:7B:31:5F:83:05:D6
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:23:bd:2b:bd:c7:da:1d:df:fd:06:21:f3:15:51:66:30:f0:
41:a8:28:79:9e:a0:b9:65:30:3e:86:28:65:50:96:2d:39:2b:
db:e9:19:6e:cd:86:d8:c5:2e:2b:6c:8d:e6:9e:e7:cc:35:69:
72:18:7d:28:0a:93:7f:e5:ef:17:a1:63:2e:76:4c:dc:fa:3d:
b0:34:54:e8:d8:8d:b7:e2:5e:5e:32:09:45:15:53:94:87:ec:
84:ad:8a:98:96:0f:2b:8e:9c:bb:b6:f6:9a:5c:55:03:29:28:
eb:e4:d8:f8:e7:13:5c:41:d4:a2:f4:7a:a2:c0:3b:44:3a:f4:
ea:c4:da:11:17:93:ac:69:fb:77:13:cc:8e:01:b4:66:7e:8c:
84:50:e0:e9:1d:71:e5:c8:e0:3d:72:8a:32:03:bc:ff:56:bd:
dc:60:3e:93:c4:e6:9c:8a:87:97:63:5a:f9:45:4a:93:62:9e:
61:3e:49:99:e1:4c:69:57:33:ac:57:62:e8:63:4a:07:98:ad:
51:d8:75:42:93:11:99:8d:60:92:87:0e:0e:4a:18:11:ba:90:
f5:8f:3d:0f:e4:7b:b3:a3:35:d6:91:20:70:ab:63:2f:3e:dd:
31:6e:99:97:a8:34:42:95:41:3e:bc:db:6b:4e:2f:6e:d9:a6:
97:3e:13:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:12:38 2026 by rpki-client