Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: xDB5bt/ImnDSHO3bIZh23BxjIYoAHdPz+StPusonhZc=
Subject key identifier: B8:17:59:49:84:0B:75:9D:6B:3B:B9:8E:DD:DC:39:24:CD:75:91:17
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 01A10700F66BDE87F2252A532A87B707DA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 171D
Signing time: Sun 04 Oct 2026 13:01:05 +0000
Manifest this update: Sun 04 Oct 2026 13:01:05 +0000
Manifest next update: Mon 05 Oct 2026 13:01:05 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: mn9mpHyOy8tf2bIWBwNs1V6wO2CjvQoigXTXk1RqpWs=)
2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:f6:6b:de:87:f2:25:2a:53:2a:87:b7:07:da:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Oct 4 13:01:05 2026 GMT
Not After : Oct 5 13:01:05 2026 GMT
Subject: CN=b8175949840b759d6b3bb98edddc3924cd759117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:e9:5b:0c:1c:2d:49:31:ed:c0:76:ee:fb:
18:d3:aa:65:98:00:10:4d:ec:d5:34:99:39:34:a2:
bb:55:6c:60:66:0e:8f:24:f6:58:16:cd:65:77:45:
66:f2:3e:45:2f:7f:cf:08:03:40:f5:18:c2:aa:7c:
4e:80:29:a3:73:fd:ee:52:11:f1:9d:14:4b:24:ee:
67:a7:f7:ab:46:bd:5d:cd:54:5e:6c:e3:b6:bc:34:
e2:32:44:e5:46:f1:d4:96:6a:51:1a:04:34:0e:da:
dd:c5:99:70:70:cf:d4:33:81:4d:04:1e:f7:de:ea:
89:3e:01:e7:f2:1e:b9:4b:3f:21:e5:cb:be:33:17:
c6:01:01:d7:02:c3:d6:19:da:d8:d1:b0:f9:a5:0c:
31:e6:9e:1b:3b:0e:3c:c3:23:a8:e8:01:e0:ff:9a:
0c:2e:c0:50:37:be:95:33:81:68:21:18:f5:ce:08:
39:50:1b:18:e0:a2:2f:2b:ae:1a:d5:27:a4:92:76:
07:b3:36:73:38:75:63:41:cf:00:bc:19:77:e3:50:
a3:c6:6a:6c:ab:b8:ea:75:7f:86:0e:ff:a3:3e:06:
37:f6:5c:d7:7f:e6:d9:ca:dd:bb:0c:da:1d:88:61:
ad:6c:6a:e9:8b:88:a5:29:db:7b:21:6a:03:d1:b5:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:59:49:84:0B:75:9D:6B:3B:B9:8E:DD:DC:39:24:CD:75:91:17
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:37:9a:b2:24:38:ee:25:a9:d8:fd:0a:53:95:44:60:e1:79:
56:01:2e:ba:27:e5:be:3f:b5:77:7f:2b:72:29:89:fc:f2:e3:
82:af:ca:23:a6:39:96:de:42:f3:51:66:9b:77:f1:08:80:aa:
aa:28:74:45:7e:2e:16:75:8c:08:93:f2:9e:ea:a8:90:11:2c:
9f:a8:e4:73:1d:5a:db:0b:a3:6a:bd:ee:3f:74:01:df:54:e0:
d1:f8:fb:7f:36:26:ce:ba:99:e4:e3:99:db:4b:ec:ed:43:d9:
53:78:83:bb:05:a8:bf:d1:60:7d:90:eb:9b:4f:de:50:53:6e:
f0:29:88:be:ea:ee:a4:7f:ad:e0:75:3c:85:e8:22:34:74:db:
f5:80:dd:16:b2:b7:5d:0d:69:c0:ed:d3:a2:89:16:de:42:b8:
be:d4:65:91:ec:e7:cf:a9:ba:31:f9:ba:44:cf:bd:c4:35:dd:
ad:7b:e7:90:db:8b:1e:c2:0f:72:cb:95:51:97:df:1d:31:da:
06:c6:b4:ff:f5:5d:0d:a2:25:d5:a6:a0:16:82:88:ba:7f:f5:
6f:73:43:60:42:09:6b:9e:7f:81:97:5a:ef:53:a8:f0:05:fa:
26:9c:e1:c7:01:29:d6:f5:68:aa:f3:8c:87:97:c9:12:61:a6:
da:33:8c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:50:12 2026 by rpki-client