Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
File: _IyX0Rd0KPYd6quRynz7tVJinsA.mft (raw, json)
Hash identifier: JInWmu92QpDa9TPs7MdGfzIRBb8eqSoVUbJhcwnnwYc=
Subject key identifier: 13:0D:9E:4D:85:8D:81:B7:A5:AA:CE:F0:57:C3:22:D0:B8:3D:D5:2A
Authority key identifier: FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0
Certificate issuer: /CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
Certificate serial: 01A1A9DE8C27BFA95B95F229DE7E9215DB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
Manifest number: A8
Signing time: Thu 05 Nov 2026 04:01:36 +0000
Manifest this update: Thu 05 Nov 2026 04:01:36 +0000
Manifest next update: Fri 06 Nov 2026 04:01:36 +0000
Files and hashes: 1: 8Ap_012FHB3YIQ_qI3dHzapyZdM.roa (hash: v2JMYMqdVX4PC3s4OaU/PX8RTBvcYIkJXe98BzsKXXg=)
2: _IyX0Rd0KPYd6quRynz7tVJinsA.crl (hash: KQ6PX0xu1f7eYNYivYk4xKsR3wzbIvGlHYfhv7sALG0=)
3: dYZsMYvx6UOC74SZFX9pIGO-8rI.roa (hash: AFzOlgk6h/FkVe+IxqK2pr/izYjgng/FXpPK4Sd4d9Q=)
4: usdtxp56d-H9jkwksTZGQH0gfR4.roa (hash: 6i2VJQPUU7UbH7idZGq7+7s2CxmCIeaq/Aw5vstNan8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:de:8c:27:bf:a9:5b:95:f2:29:de:7e:92:15:db:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
Validity
Not Before: Nov 5 04:01:36 2026 GMT
Not After : Nov 6 04:01:36 2026 GMT
Subject: CN=130d9e4d858d81b7a5aacef057c322d0b83dd52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:17:b8:b6:64:f5:44:d4:3a:82:0c:a8:e7:
8e:13:80:32:0d:75:45:4a:c2:15:13:3a:11:e3:e2:
23:1d:47:e6:62:ea:24:f5:1c:f9:a4:13:89:31:c9:
c9:a2:d5:02:6b:60:9b:82:5b:97:56:96:d3:38:e9:
8a:10:34:12:66:42:fd:49:ae:58:3a:9c:99:a4:53:
ad:85:38:a4:68:aa:6e:4b:07:30:29:f8:3c:85:6c:
98:b1:44:83:da:70:9f:6a:7c:cc:85:d0:b4:f1:e6:
9b:e9:6b:9f:3d:ba:b7:e0:00:a0:35:93:ea:9c:39:
61:bd:be:1b:27:45:41:b0:f3:1a:7f:96:05:ad:c3:
42:1d:a7:58:f0:8d:b2:e6:fb:0d:9c:fd:9e:fc:fd:
db:e4:01:0d:96:94:56:c3:bf:3e:9d:ce:56:58:10:
60:09:8e:96:04:3b:bb:e3:d4:c1:72:c9:5f:ce:65:
8a:01:d2:8f:16:99:2d:2c:ca:90:69:30:5d:93:6e:
e1:13:6d:d7:76:5e:3c:ff:20:02:18:0c:c9:1f:9e:
03:c1:a0:fa:0d:5f:72:a7:cc:2a:50:a9:2e:e9:7e:
e8:b4:27:82:ab:cb:07:58:36:bb:b7:b1:05:59:33:
44:08:87:4a:1a:c8:82:b3:68:16:69:ca:b3:57:88:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0D:9E:4D:85:8D:81:B7:A5:AA:CE:F0:57:C3:22:D0:B8:3D:D5:2A
X509v3 Authority Key Identifier:
keyid:FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:18:06:a4:c7:d7:e9:6c:df:03:45:48:68:65:7c:05:05:33:
3d:ad:62:4d:73:5c:7d:00:c0:de:8f:f0:78:0e:23:13:36:f6:
52:ad:dc:db:5e:6e:08:48:0d:96:ac:1c:a1:f3:56:ba:37:f4:
b3:a8:31:d0:ec:76:af:e3:55:ef:41:fc:a1:1d:3b:34:f3:38:
d8:6c:f2:16:50:ad:1f:d4:e4:cb:86:81:f8:54:92:1e:dc:6a:
a7:33:c9:77:e0:82:3f:8d:1a:ad:cc:85:17:fb:16:a8:51:95:
20:37:08:a3:5b:9c:84:cc:78:b5:2b:09:08:77:5d:86:ea:3d:
2f:ff:41:5d:c3:8d:bd:17:61:9f:b8:3a:61:33:43:12:66:39:
07:f6:59:63:2e:74:52:88:e4:a3:90:48:cc:1c:68:ef:a9:a3:
8f:a6:13:c3:02:4b:68:cd:a4:1a:fc:92:a1:06:79:2c:05:b4:
d0:35:cb:32:4e:01:35:9d:c1:1b:47:ad:c2:fc:b7:5c:5a:ca:
53:8d:a4:f6:e9:5f:be:e9:fa:7a:34:50:cc:7f:3d:b2:ee:d7:
0d:fe:e1:e1:d2:6c:cd:8c:0e:ed:8d:b7:62:f5:41:ea:9f:56:
89:50:f5:3d:09:62:f9:b8:56:08:64:80:9a:86:d2:fb:c2:b1:
21:c2:d0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:09:09 2026 by rpki-client