Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: hKgYGBTte8IpwqeIWqTEo5KPV1OBJUtI1cjgsT6Z+Gk=
Subject key identifier: C1:C5:E1:3F:BC:60:AA:70:92:0A:1F:1D:95:FE:4F:BE:4A:17:46:0E
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 01A10F285B03486FEFA6EC5E64BFE00D83A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 131E
Signing time: Tue 06 Oct 2026 03:01:05 +0000
Manifest this update: Tue 06 Oct 2026 03:01:05 +0000
Manifest next update: Wed 07 Oct 2026 03:01:05 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: 8Q5eGEtek/10sotoOXKM09Gc4Eqt+GnIkusxyCBppmg=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:28:5b:03:48:6f:ef:a6:ec:5e:64:bf:e0:0d:83:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Oct 6 03:01:05 2026 GMT
Not After : Oct 7 03:01:05 2026 GMT
Subject: CN=c1c5e13fbc60aa70920a1f1d95fe4fbe4a17460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:40:d3:3e:62:ab:4b:f0:e5:97:75:ed:55:
fa:c7:a9:06:3f:19:fa:b7:17:e2:52:84:f6:ca:03:
8e:7c:1a:28:00:77:96:69:96:28:da:20:0a:13:2a:
7a:95:34:b6:97:b3:55:95:5c:63:30:e9:4a:95:df:
3d:9d:53:66:cb:54:00:b4:e0:50:e3:2c:5e:14:93:
a0:67:c3:01:2d:da:70:54:5a:36:eb:3a:f1:37:16:
27:6e:52:d6:14:5c:91:64:f5:48:37:21:ed:e5:f2:
25:12:02:0f:97:f3:2f:ef:c0:e1:f6:aa:f1:75:34:
fc:e5:af:3d:d7:66:a0:38:e8:89:32:78:2b:97:60:
33:91:44:44:22:e7:24:bc:4e:3f:56:39:83:5e:7c:
b9:4c:59:c0:b6:53:08:c8:d8:f0:ed:1d:74:a3:13:
0d:f3:c7:8e:d5:60:ae:3f:a3:90:b8:d2:8d:95:d0:
0b:44:54:25:2c:ad:85:14:55:89:29:e3:aa:fa:ac:
a9:da:d7:0f:b3:3f:52:10:a7:66:6d:0b:f7:23:20:
f4:c1:b2:5d:89:ff:69:9d:07:8c:77:fe:43:93:1b:
c8:d4:c8:dd:fd:a0:a8:e6:54:13:f0:da:c9:15:f4:
2d:ed:98:85:28:85:4f:38:32:1a:e5:30:d4:f1:bd:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:E1:3F:BC:60:AA:70:92:0A:1F:1D:95:FE:4F:BE:4A:17:46:0E
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7d:d4:4b:07:a8:ce:27:a9:e9:fc:63:9f:a8:f5:d8:29:78:
50:fd:8a:81:27:5e:ca:e5:81:a6:d1:6d:d8:cb:b1:0d:09:21:
53:e0:d2:10:e8:8c:d9:45:e8:16:a9:5e:53:f4:be:f0:3d:fb:
d7:81:d8:35:6b:5a:dc:44:fb:bd:49:cb:5b:15:f9:50:67:7d:
9b:d2:7d:af:d4:9a:63:5a:48:41:09:f2:ec:2d:58:f4:7d:b6:
bc:85:ca:af:b2:a4:ac:df:ca:2a:ff:6a:e6:08:20:ff:08:08:
8d:b4:42:33:f7:61:e1:af:89:4d:f8:a5:d2:4e:44:e5:99:24:
bd:bb:03:8f:e8:43:a9:5d:b8:83:98:80:af:f8:dc:72:b1:90:
8c:b4:4d:3d:f4:9f:2f:8d:94:91:2b:46:5d:60:5d:13:31:d1:
1e:c4:78:f1:cd:e9:6c:3a:b8:bf:70:df:7b:c1:fd:f4:7f:84:
3c:6c:25:6e:c7:7a:a9:3d:38:58:59:ae:4c:19:10:22:80:4e:
43:d5:4a:38:81:6c:ff:d7:ab:89:29:b2:d8:c3:44:09:d5:16:
d2:51:1a:e5:8b:9c:5b:07:d9:bd:bd:84:a5:9d:f8:e4:1d:54:
6f:bc:1d:ae:0b:d1:21:bb:47:b3:88:c2:81:c7:5f:cd:28:4b:
9d:8f:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:51 2026 by rpki-client