Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: F86h99s9V7L4wLCyx4YTIa8q6hKmpdZJpHAZXxMFFfo=
Subject key identifier: 4E:F9:20:68:0C:05:37:14:2E:61:3C:43:EB:B6:04:3B:44:D5:67:11
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 01A12654A190B32AD464668F09CC9B6A24D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 1192
Signing time: Sat 10 Oct 2026 15:00:42 +0000
Manifest this update: Sat 10 Oct 2026 15:00:42 +0000
Manifest next update: Sun 11 Oct 2026 15:00:42 +0000
Files and hashes: 1: 2eOqwL7Kbl8aY4yyqMUTnuknEyg.roa (hash: g3l/pQ8bKzlI59bc9cKaMmbQjpAlrb7wUDlMU3u8d+k=)
2: 7o87e6t6rCHZCTctqNbeIGrB924.asa (hash: gPHZRrAJDyxpEWcymQSdvWZAGGUKmIVDKFbHH3RVcGE=)
3: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: ee8r3isMUZtCmLqSubL1XU31e9cPQNMY1GnWqCHEtr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:54:a1:90:b3:2a:d4:64:66:8f:09:cc:9b:6a:24:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Oct 10 15:00:42 2026 GMT
Not After : Oct 11 15:00:42 2026 GMT
Subject: CN=4ef920680c0537142e613c43ebb6043b44d56711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:06:ef:5d:4d:9a:3e:08:93:89:03:ff:53:
06:a2:08:b9:8b:c5:e6:67:84:86:4d:77:37:43:3d:
03:2b:cb:e4:b9:92:b8:4a:56:02:e5:ba:70:08:14:
51:70:8f:23:9c:cb:7d:64:4d:96:26:54:78:cc:c3:
93:1b:73:b2:66:e8:46:5a:1f:4c:ba:0e:cd:70:13:
ab:4b:f4:bd:05:e4:ec:0a:db:f3:0d:dc:6d:00:90:
1b:72:19:01:bd:b6:da:44:4e:23:cc:f5:53:7b:04:
ef:d5:5b:77:78:97:9d:23:df:9c:6b:fd:c6:3a:b4:
cf:0d:d2:bf:32:53:fd:d0:fc:58:16:c5:4d:3a:13:
7f:87:c0:3e:13:11:df:fe:67:88:21:d0:e9:db:ea:
5e:92:98:7e:8e:50:a1:19:43:5e:8c:27:9a:32:7f:
b0:f3:d4:f9:c9:a6:fe:83:1a:cc:eb:e6:9d:91:54:
68:4e:53:cf:77:2d:38:3d:d4:00:16:57:d3:2e:ee:
ad:0d:ef:25:b4:69:e6:54:5b:44:8b:ab:00:47:3a:
66:57:77:a5:ad:11:13:a3:aa:ac:85:90:60:00:a3:
58:fc:1b:05:76:c1:3c:44:07:97:24:6f:9b:a1:da:
36:ee:d6:e4:44:24:e0:01:3a:ba:84:d3:27:bb:54:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F9:20:68:0C:05:37:14:2E:61:3C:43:EB:B6:04:3B:44:D5:67:11
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bf:63:d2:33:97:b4:19:ba:55:f7:47:77:28:67:14:2a:e3:
bc:df:2f:f9:17:54:f5:44:32:ba:fe:7c:53:9f:12:79:94:31:
d2:26:26:c0:bb:bc:26:5e:ca:29:f6:31:bc:1c:53:c3:af:25:
a4:37:f0:c7:02:b5:28:41:51:07:e7:6d:63:f1:c3:15:53:dd:
58:55:a4:ed:bb:87:33:1c:14:3a:2d:c4:b2:d5:f4:6c:dd:e0:
60:ce:c7:61:89:8b:47:ac:12:ef:ce:eb:43:29:50:e2:8b:04:
c1:81:af:aa:48:fb:d3:c7:b7:35:d1:a2:77:a3:09:c7:2b:cc:
04:7c:ff:ff:b3:55:ea:50:e0:b0:64:b1:e2:b1:a9:13:21:41:
0c:cd:cb:89:d9:b5:69:06:e7:4b:c0:9e:2e:5c:79:62:94:ca:
b7:93:63:8d:0f:d7:f1:b1:40:bf:7a:50:7e:18:56:db:0b:a5:
b4:97:f8:24:f4:d6:da:86:77:27:f4:87:0e:d9:62:3c:42:09:
f9:d9:66:a0:28:11:84:19:90:b9:e8:04:87:98:97:f4:eb:3e:
0c:50:20:46:4a:48:87:03:4a:f6:01:4e:18:6a:11:39:a6:46:
af:05:6d:08:ea:7f:fa:68:5b:14:17:86:ea:24:87:f1:66:cd:
cc:3b:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:43:36 2026 by rpki-client