Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: k9TieiN5ZtNwsGZ4B9erCGUc/gojUp39Ljl69JoSmwg=
Subject key identifier: 61:C0:0D:8A:42:4D:42:B8:B0:CA:96:71:C6:F3:F4:FB:E0:E8:72:22
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 01A0CFA3DCF50427A0A82629314C7D6418F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 0661
Signing time: Wed 23 Sep 2026 19:00:17 +0000
Manifest this update: Wed 23 Sep 2026 19:00:17 +0000
Manifest next update: Thu 24 Sep 2026 19:00:17 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: vxA5tX7Qnq3m08HEKE9P643eM4uYu+6iaKTXIeP/Cno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:dc:f5:04:27:a0:a8:26:29:31:4c:7d:64:18:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Sep 23 19:00:17 2026 GMT
Not After : Sep 24 19:00:17 2026 GMT
Subject: CN=61c00d8a424d42b8b0ca9671c6f3f4fbe0e87222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:93:39:b1:28:08:ae:bd:5c:49:aa:22:00:
3a:7c:04:17:04:5b:87:c5:4b:92:f4:a8:81:5b:69:
63:9e:ff:05:f8:df:44:4e:37:aa:2c:c4:de:b4:d0:
f6:c6:59:9d:57:fa:08:5f:c6:2d:25:6f:3e:0d:84:
cc:60:09:b8:1e:c3:f7:8a:d0:47:9b:e5:36:0c:e9:
e3:17:ce:4c:7d:b3:0d:98:29:db:40:78:02:ed:6b:
35:2e:dc:02:83:9f:fa:90:ad:b4:52:e6:83:99:21:
34:0c:ef:b0:89:4b:9f:bb:7c:d2:bb:d8:d8:ca:62:
2a:cf:87:ec:03:45:fa:4e:f7:7d:b2:54:15:59:22:
58:37:9c:df:e4:a6:e3:2c:8c:60:fc:d6:fb:f8:2a:
fd:a2:78:de:45:35:aa:0c:95:5c:39:fb:c1:e3:a8:
0a:89:ec:0e:40:d5:fd:fa:42:b1:bb:72:96:c7:2f:
ef:b3:98:d8:a5:ec:2f:84:30:29:bc:e4:62:00:ab:
ec:ab:63:c5:4f:d6:19:11:0a:c5:0d:2c:c7:9e:56:
46:1d:a1:86:bc:66:25:f9:a2:b4:ae:d2:f6:98:f0:
36:5a:14:69:22:2f:85:6d:c7:ef:2d:f3:bf:d2:05:
bc:4b:90:66:b6:b0:0b:15:a4:e2:40:db:46:e9:35:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C0:0D:8A:42:4D:42:B8:B0:CA:96:71:C6:F3:F4:FB:E0:E8:72:22
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:68:12:64:ab:38:0d:75:e2:d1:c6:f3:62:8c:e0:dd:4e:89:
d6:7a:c5:cd:8e:29:99:70:ee:15:42:b7:72:9a:b2:7f:37:b6:
cc:1e:be:4d:0f:91:43:d5:bb:fb:05:9e:e0:df:88:f2:c3:a3:
07:8d:53:f8:c5:7c:cf:42:9d:e1:ed:26:7c:7d:d8:25:ac:44:
7d:6b:e0:51:c1:45:45:ae:12:60:2b:db:e5:8e:fe:b9:34:2c:
3a:77:d8:ec:e7:ed:80:04:62:5d:94:c5:7e:bd:42:49:16:30:
d5:1d:06:d8:28:33:08:4a:64:ba:67:e2:b9:d3:d3:9b:8a:c4:
cf:cd:0b:83:c9:77:bd:f5:23:04:6c:a1:33:b6:e2:b2:6c:02:
46:b1:c1:2c:13:66:3f:80:37:fb:88:e8:8f:5b:4d:3a:57:99:
8d:41:f5:9c:8a:ad:0e:d2:7e:b9:54:f2:09:89:5c:52:df:b8:
58:ae:e1:85:cc:b0:2e:50:77:a2:31:f4:dd:87:f6:b1:d3:31:
01:8c:31:1c:c3:e9:99:dd:17:a9:51:84:b3:d7:27:d4:94:69:
eb:4d:ae:84:5c:11:bf:90:0a:2d:f8:d2:b0:d4:9d:53:7c:e5:
29:81:d3:d3:a3:17:71:02:67:92:34:bb:d0:a4:5a:d7:57:80:
4d:fa:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:20:49 2026 by rpki-client