Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: xkUdfa3qCpYy+M65MSB4e89Cm+9WLfnUTRBUdnzAmqg=
Subject key identifier: B7:99:11:3A:FB:D2:0A:72:EE:9A:47:00:C3:15:BE:6A:A5:B1:BA:0F
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 01A0CC35D4B5C7A8FDCF7AEFFC6F7CE2ACCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 03:01:14 +0000
Manifest this update: Wed 23 Sep 2026 03:01:14 +0000
Manifest next update: Thu 24 Sep 2026 03:01:14 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: GNmL1b/RTABcuLAh2uEb26MUI3l402Q4Pnb+dd8INvk=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:d4:b5:c7:a8:fd:cf:7a:ef:fc:6f:7c:e2:ac:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Sep 23 03:01:14 2026 GMT
Not After : Sep 24 03:01:14 2026 GMT
Subject: CN=b799113afbd20a72ee9a4700c315be6aa5b1ba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:00:5a:39:f1:2a:81:5f:00:86:71:bf:fe:
9c:b5:2a:85:61:84:1d:40:4b:0e:c2:fb:b4:c4:a1:
37:15:df:76:29:63:e3:4e:4c:92:9d:90:04:09:06:
8d:87:36:1f:b6:65:9a:73:05:2a:05:7c:4a:5b:08:
5c:56:3f:13:3e:0c:0a:5b:c8:d6:91:dc:56:79:5e:
7a:97:99:aa:9e:52:13:0c:60:21:67:07:f0:00:b5:
90:df:c1:2d:d6:8c:38:5a:15:17:37:43:d0:90:fe:
b1:f4:43:36:89:48:a3:c4:b3:68:ed:ce:80:3f:05:
83:be:8a:16:9c:00:53:9a:82:92:f4:c6:75:b2:4b:
e0:ef:65:88:d1:3f:d9:73:93:24:b7:8d:30:3e:48:
5c:c9:eb:73:39:e8:04:5a:cd:d6:21:24:be:fd:63:
9f:53:12:3b:c2:51:0b:5f:dc:58:32:52:bf:a8:07:
0c:bd:85:62:d4:c3:24:d6:cf:f7:53:32:45:b6:ce:
8d:7b:f8:4c:89:31:a5:14:13:c3:39:7f:ef:62:43:
46:36:b2:b4:9c:52:89:3e:c3:cf:43:28:e0:00:ad:
b9:c5:99:22:fd:10:ed:62:f7:90:a8:79:ce:83:9d:
89:2e:54:64:69:22:64:d3:80:d6:4a:67:81:e1:6b:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:11:3A:FB:D2:0A:72:EE:9A:47:00:C3:15:BE:6A:A5:B1:BA:0F
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3e:89:3e:ea:2e:a3:60:a0:47:4f:06:92:bb:08:0a:48:ad:
03:91:0b:ca:11:6e:2d:51:61:8e:5d:98:b0:33:b1:d3:92:c7:
de:03:5b:f4:de:5c:e0:66:c4:7b:54:ae:0a:c8:09:09:b7:05:
92:e7:d2:75:9f:3b:58:1f:b9:61:85:c5:6e:a2:3c:d8:6e:84:
76:34:3b:99:2b:76:81:db:85:45:c7:51:4c:e9:b9:24:c3:2f:
c6:53:68:42:9d:f7:51:80:61:0c:ec:fa:a3:64:04:d7:40:fc:
8b:65:04:33:72:e9:1b:f6:b0:df:15:0d:52:97:cc:c1:b5:7f:
c2:d6:5c:3c:f9:93:28:17:8f:5c:b0:59:8d:88:48:f2:71:62:
c6:7a:e9:2c:c5:77:75:62:a7:a3:51:ae:25:d6:ad:4a:d6:09:
57:91:c2:5b:44:69:50:08:cc:94:29:b4:da:71:e1:11:d1:c9:
7d:2c:aa:47:ce:7b:fd:b1:1f:9e:ca:2f:5a:79:2b:d7:b8:3a:
0e:d4:9b:c8:1d:fe:a4:84:32:6c:97:9e:b6:ee:87:cf:b2:f1:
c9:21:3e:51:17:cd:23:e7:4a:80:95:b5:e1:42:00:72:e8:11:
8b:cf:9a:7b:6e:23:7c:e5:09:62:d4:fe:a6:67:f0:2f:86:fa:
63:d7:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:20:54 2026 by rpki-client