Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: sUfSj2b1qcgZ1xJx43tfqB6DdDoloxkRjFMZlxkQFc0=
Subject key identifier: 76:F1:F3:70:8F:47:E1:50:D1:90:62:21:55:C7:E5:9D:F6:FE:39:7C
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 01A113054F30533DF990C026402F396B3EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 0884
Signing time: Tue 06 Oct 2026 21:01:17 +0000
Manifest this update: Tue 06 Oct 2026 21:01:17 +0000
Manifest next update: Wed 07 Oct 2026 21:01:17 +0000
Files and hashes: 1: QdViC720LUGk8rbETFc7icn6Tx4.roa (hash: wxpHqs3D6Qy6qVLUeFjXp0nQiZFcnT7PBeNSBBjzhuM=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: vGbEVEW/KRVtr53AiEd9ftGKYINGLAOnTHf9kDpJnZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:05:4f:30:53:3d:f9:90:c0:26:40:2f:39:6b:3e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Oct 6 21:01:17 2026 GMT
Not After : Oct 7 21:01:17 2026 GMT
Subject: CN=76f1f3708f47e150d190622155c7e59df6fe397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:4e:ac:01:3b:f3:41:83:ad:bb:56:64:d4:
16:a0:22:40:ed:d5:d2:79:70:95:bd:41:c3:9e:7d:
51:82:23:e7:6f:ad:b4:e6:71:a6:06:fd:01:99:49:
01:cb:6e:fa:3e:ef:63:de:07:08:3b:1e:5f:66:95:
03:62:6e:10:7d:cd:65:32:7c:af:59:49:1e:71:d2:
8b:7d:ba:6a:b3:b6:7f:7c:b6:c6:eb:59:19:17:d3:
f7:2d:a2:9c:7d:cb:38:5d:01:f9:90:fd:6e:7f:3f:
19:99:74:80:fc:6b:ed:f7:15:94:c4:4d:6b:d8:6c:
e5:f4:46:08:0f:5d:8d:e0:bc:9c:ea:0b:b4:38:92:
1d:29:f4:2d:11:8e:fd:9d:d8:78:99:69:40:9e:df:
b8:05:1c:1f:ee:59:4e:e6:ac:08:aa:4a:ef:92:ac:
92:57:f9:36:d0:9f:c0:e3:c3:e0:bb:7e:ad:3a:58:
3f:a4:04:de:09:62:fc:10:99:d8:3b:8a:5e:61:87:
b0:56:dd:7a:a2:91:9d:db:f0:4d:fa:37:8c:29:d7:
02:3d:04:05:19:45:c6:7d:ac:60:ce:b2:e4:ee:dd:
4b:9e:d9:19:fb:cc:39:85:79:42:a8:8a:ee:5d:b9:
5a:85:92:2f:16:50:ee:5e:d6:66:b3:89:e3:e9:ee:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F1:F3:70:8F:47:E1:50:D1:90:62:21:55:C7:E5:9D:F6:FE:39:7C
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:88:5f:39:75:29:25:9d:be:cf:60:9b:c5:19:dc:dc:92:2a:
18:7a:3f:ef:7c:17:c9:e1:d2:64:34:a4:c4:f1:b2:af:da:a6:
45:15:93:2f:2e:61:05:8e:43:49:07:f8:61:8c:e7:2f:6b:29:
f4:96:97:36:6d:bf:20:3f:e7:11:f2:fd:ed:98:33:32:61:82:
40:5e:0c:4a:11:24:11:cc:b1:3e:da:9d:58:04:c7:6b:3a:10:
b8:97:ea:2f:70:a7:6e:e9:05:60:df:40:1f:13:a7:41:72:8f:
f1:ad:10:29:a3:64:3f:c2:05:ff:5e:cd:0d:bf:48:2e:66:3c:
25:e4:66:e0:5b:8e:0d:f9:8f:69:60:11:5c:e0:00:44:eb:8e:
05:1f:33:e7:61:04:bb:75:16:32:ae:2c:69:2b:71:74:c1:a8:
c7:fc:6c:79:a3:8c:fa:27:a6:0a:56:38:a2:02:22:41:e6:b2:
21:90:f0:0f:5c:55:65:a9:70:f0:83:bc:bd:3a:d7:8c:6f:fa:
65:21:25:3b:4c:99:0e:3e:0b:39:74:1e:b5:20:c5:ac:35:1c:
02:62:8c:82:5b:85:6b:ba:cc:06:bf:3d:9a:72:1d:0f:af:54:
3b:ea:89:1c:e8:a7:c2:19:77:87:b4:74:1e:99:57:75:7c:b3:
7f:bc:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:27:14 2026 by rpki-client