Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier: crrhSEAVBLrty9/yCdj51SALXLQQHu5DmFVbUBcHKf4=
Subject key identifier: 5D:E9:71:F9:1E:43:B9:47:53:71:59:6F:2F:91:16:0C:FD:8F:E6:14
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 01A13F029BCC90593587B8DD510DAF090C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number: 0D63
Signing time: Thu 15 Oct 2026 10:01:37 +0000
Manifest this update: Thu 15 Oct 2026 10:01:37 +0000
Manifest next update: Fri 16 Oct 2026 10:01:37 +0000
Files and hashes: 1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: NrBHLR3+UeRhyLFGxiwUqWLdxwM89+Vu9g8T6qThqBc=)
2: hOCqHr0-rwjOn6wU8z8C-ggKXAo.roa (hash: aczilg5expuAqkln7fFu+xj4eV4HRQvyQA+wDQF1/60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:9b:cc:90:59:35:87:b8:dd:51:0d:af:09:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Oct 15 10:01:37 2026 GMT
Not After : Oct 16 10:01:37 2026 GMT
Subject: CN=5de971f91e43b9475371596f2f91160cfd8fe614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:7c:71:d9:0d:58:3e:91:94:09:1e:67:89:
32:68:87:cc:c1:c8:7b:96:1a:be:86:bc:80:a3:6b:
d8:39:80:af:37:30:82:b7:66:09:25:33:73:7f:4d:
a0:eb:39:49:80:2f:10:d3:34:ac:5b:c2:5b:ad:62:
f5:eb:23:5c:52:81:c6:4e:89:eb:7b:f4:9d:00:bf:
5a:d5:9a:20:5b:de:41:47:f0:da:7f:7d:ff:c7:21:
8c:f3:c2:4a:43:e0:93:c9:ca:a9:39:35:7b:40:94:
fd:e9:73:a0:bb:6e:cc:9d:87:50:1d:6f:d0:00:f5:
13:e7:ac:f9:05:e1:a0:32:19:9f:64:67:33:cd:53:
f0:32:15:aa:b3:4f:1a:8e:42:7c:a8:f6:b3:c1:96:
f4:16:06:ac:45:78:a2:d1:03:52:09:bc:fe:24:a7:
aa:6a:9b:c6:2c:4d:0c:05:86:9a:e9:d9:a9:5c:5e:
2a:84:aa:8a:77:8f:66:e8:fa:49:3b:06:21:9b:63:
cc:47:34:14:c0:6f:d0:f3:3c:cb:df:fd:c7:9e:45:
aa:dd:f1:bd:d1:72:fd:cb:a7:56:cb:6b:dc:81:e1:
60:b1:43:c4:e7:a7:75:b7:c6:6a:27:02:75:bf:6e:
55:b0:7b:1f:5e:60:5c:09:60:6e:f1:06:92:5d:76:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:71:F9:1E:43:B9:47:53:71:59:6F:2F:91:16:0C:FD:8F:E6:14
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:70:1e:de:dd:ae:60:8b:e5:54:f0:c9:1e:da:33:c9:ca:44:
91:b1:b9:0b:0b:e7:cd:3b:82:d6:b3:65:18:dc:0e:ed:7a:05:
05:13:15:66:31:fa:68:44:20:af:90:0c:6b:ca:0c:55:fc:dd:
b3:3a:e5:1d:7e:8f:ba:27:cb:ad:a3:e4:43:bf:94:b6:70:94:
34:ab:3a:5f:a3:bc:9c:2f:6c:e9:17:b6:da:99:a1:ac:a2:b3:
a9:f1:10:3f:d3:b7:59:d9:c4:7b:95:91:6c:1a:52:1b:60:86:
94:f4:4f:c8:fc:c6:7a:17:e1:34:8d:50:44:94:57:1c:78:78:
93:bf:94:e2:e3:4f:56:81:fc:10:64:64:4c:40:8b:31:f0:74:
79:84:af:3f:4f:db:bf:a5:d3:c5:6c:31:b3:4e:2a:16:5e:98:
96:1d:5c:db:af:e9:20:23:9a:9f:80:5f:c8:c2:0c:02:05:2a:
09:73:51:eb:bb:51:3a:c8:b2:24:ea:57:50:19:41:1d:e6:d9:
fe:a7:ab:06:59:50:8a:e6:dc:ca:d2:99:0b:a9:11:a9:27:d2:
de:27:5f:b1:79:30:36:54:43:67:9d:b0:fd:3b:d8:88:f4:81:
f7:ff:81:90:0a:a7:4d:f5:2b:c9:60:f4:f8:ec:da:fb:a2:7e:
46:86:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:20:53 2026 by rpki-client