Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: pQTN3N2iKKlBnf4XACvWPAWcOb5fXVkUO5wAiTMMVto=
Subject key identifier: C6:3C:67:14:D5:9A:D3:AF:DD:6F:56:85:C2:3A:F1:F0:00:F8:C7:2B
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 01A138FFF1401DFDA806E6725F727D1732E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 09C8
Signing time: Wed 14 Oct 2026 06:00:59 +0000
Manifest this update: Wed 14 Oct 2026 06:00:59 +0000
Manifest next update: Thu 15 Oct 2026 06:00:59 +0000
Files and hashes: 1: 22Qs5ZZUH-o_UxeMTTaGlozw9ck.roa (hash: dzmFhhN9JFvpfi1wur97KqUtYf7OFbub2fPBQrwEANI=)
2: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: v+eBsnDDs5YRKMsXu4nV8EERdCDi2KuGhCA4FSC2sR8=)
3: OOmJ-RkbduxK-k7822kHHTnwfho.roa (hash: Zhhmx3+Bddmr+hDQFTAMK3LPfl5DC3igpcEZIPBCFZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:f1:40:1d:fd:a8:06:e6:72:5f:72:7d:17:32:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Oct 14 06:00:59 2026 GMT
Not After : Oct 15 06:00:59 2026 GMT
Subject: CN=c63c6714d59ad3afdd6f5685c23af1f000f8c72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:92:0b:35:24:86:e5:32:ed:ab:a5:85:83:d5:
4d:0a:90:d1:f0:bb:17:b4:52:28:04:09:24:62:cd:
c2:e4:55:4e:75:91:39:f0:5d:30:73:cb:53:8d:53:
c7:d7:92:4a:0c:77:89:fc:c0:f2:08:d5:05:aa:56:
47:37:f3:0d:5a:0d:c6:12:20:f0:b2:2b:88:71:af:
4c:0a:3c:a8:39:7b:40:b2:6f:00:4d:53:20:6b:02:
d4:4b:17:ba:72:95:18:16:c4:70:c3:4d:e0:c0:de:
ca:8e:d0:a4:75:8e:2f:77:e5:cc:71:44:6b:d1:a3:
41:a6:21:4c:65:67:82:0d:f4:39:ac:20:36:03:1e:
b8:e8:ca:de:9b:14:1d:96:16:35:09:72:7a:59:2e:
ec:c1:35:b9:88:43:2d:e6:65:ec:0b:d9:0d:c5:80:
28:20:3a:de:9d:4a:3a:61:0b:3d:e0:64:7a:8b:5d:
70:92:62:3b:31:af:2c:d0:19:df:c1:af:63:2b:53:
7d:af:b6:83:52:1d:43:bd:71:0e:21:5f:d0:96:05:
63:d5:90:d4:34:65:5a:68:6e:3e:1f:e9:17:aa:66:
c1:59:3d:aa:62:81:56:f1:0a:85:60:b1:ca:c0:37:
5b:3a:9f:a0:59:8d:93:b5:ed:e2:a0:06:51:c9:ad:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3C:67:14:D5:9A:D3:AF:DD:6F:56:85:C2:3A:F1:F0:00:F8:C7:2B
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9d:bc:5b:ea:49:3b:5b:e2:a2:7c:e9:65:7f:96:83:97:8a:
85:a1:f2:29:af:86:9a:0b:d2:f6:3b:a8:22:e0:d3:f7:e7:f5:
03:a1:20:d5:ae:50:49:98:a0:37:c6:58:72:f2:a5:36:48:2c:
a4:d8:c7:1b:e1:30:2b:d4:33:23:12:d5:71:01:e4:ba:57:54:
f1:13:46:09:5c:b7:a5:46:a5:35:12:6f:b3:93:6f:3e:06:08:
d9:1a:19:d3:5e:4d:e6:ef:cf:eb:5f:58:a7:ce:81:9a:eb:0c:
b4:e8:2b:17:bf:0b:0c:9b:1f:82:80:f6:76:f7:17:55:52:ef:
57:2e:c6:d7:e2:14:ac:65:1e:7a:3f:35:c8:b2:b5:a1:52:bc:
be:a3:85:f7:2f:38:30:22:6d:a2:71:e7:ab:70:f1:fd:87:77:
54:6c:5d:b4:ec:2d:89:47:14:2b:85:b7:a0:bb:19:19:37:8d:
cd:49:03:b1:ec:5b:1f:e8:54:f2:40:e9:8a:27:d5:7c:72:ca:
c6:c4:ae:26:f1:7d:a7:16:d9:3d:88:c4:95:6d:fb:46:62:f4:
46:2e:89:be:4c:17:2a:ed:bd:17:74:ec:2c:80:30:49:60:64:
ed:f8:0b:23:97:ab:95:b0:6c:66:5d:10:cd:ed:e9:85:25:fb:
17:9e:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:37:41 2026 by rpki-client