Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: jsIylxS95yB85ePQU1lWwZ+oZtxyv8SP5srJxwD1qQo=
Subject key identifier: D9:B5:37:7D:B7:7E:43:39:E8:B0:57:A7:CD:70:A6:A5:A5:E0:D4:FB
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 01A12955FC79E0A3ABD4558423E588B30912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 089B
Signing time: Sun 11 Oct 2026 05:01:03 +0000
Manifest this update: Sun 11 Oct 2026 05:01:03 +0000
Manifest next update: Mon 12 Oct 2026 05:01:03 +0000
Files and hashes: 1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: z4hfmeZ3zdKuNYpnV0PpWPuCO3z9dutLU33t1MjXjJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:fc:79:e0:a3:ab:d4:55:84:23:e5:88:b3:09:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Oct 11 05:01:03 2026 GMT
Not After : Oct 12 05:01:03 2026 GMT
Subject: CN=d9b5377db77e4339e8b057a7cd70a6a5a5e0d4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:3b:6a:2a:4c:1b:7b:10:17:d1:1f:3b:33:
cf:d5:1d:fd:58:f0:ba:d6:2b:b8:8d:7d:80:b5:bc:
f0:16:06:8f:6d:9f:13:29:dc:ac:46:32:e6:9e:42:
48:80:e2:b6:b7:b5:d1:34:42:05:48:ec:3b:89:43:
87:8b:25:db:c9:18:d7:4f:0a:37:cf:96:f9:93:37:
24:d7:a3:ee:7a:9f:26:eb:08:a5:bd:fc:c4:12:b0:
6e:47:36:87:5e:c8:c1:8d:e1:ba:a7:c7:f6:73:2f:
ee:a0:ba:e5:49:a7:08:3e:80:91:33:d4:35:b2:51:
51:61:97:a1:11:de:5e:ae:18:3b:c8:23:63:5b:8e:
ba:69:95:cf:ea:bb:15:69:92:b2:ed:d0:68:1e:cc:
0f:8c:90:53:45:a4:59:b8:7a:a0:f5:d8:ab:74:40:
c1:ca:6d:d7:4e:5a:b3:7f:c2:6c:f7:41:fe:01:f1:
34:89:1b:42:62:5e:d6:1a:ca:ec:88:7c:04:d7:c1:
7a:4d:7c:c2:75:ea:30:89:f3:1f:af:90:65:d4:9b:
c0:26:fa:6c:c2:75:cc:2f:e8:9c:42:4f:74:b8:e3:
36:35:c6:ee:53:aa:a7:45:a5:27:7a:60:2c:68:8c:
ee:f5:08:bc:e6:19:28:80:96:db:2a:3f:1e:c5:db:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:37:7D:B7:7E:43:39:E8:B0:57:A7:CD:70:A6:A5:A5:E0:D4:FB
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ed:39:8d:51:03:21:2c:67:a0:8e:cc:88:96:f1:90:24:93:
00:f8:f1:26:29:67:a2:f9:d6:22:d9:a8:53:3b:f5:8b:b1:7e:
6f:bf:2e:b3:e5:67:9f:2a:82:64:73:4d:be:3d:5f:0b:af:ce:
55:d7:f6:ad:f9:df:95:40:98:fe:e5:9c:0b:14:21:18:3b:78:
c7:80:34:57:3e:83:1e:d6:89:98:d5:9e:f1:6c:1a:1b:cc:36:
51:36:6a:0f:31:22:2e:91:b1:a3:3b:be:27:5d:c1:88:29:6c:
fb:bd:4b:6e:8c:b1:e7:97:71:11:be:72:49:94:71:cf:77:7c:
bf:e9:bf:56:a7:25:03:10:2b:a3:66:49:f2:12:e1:df:09:32:
72:c2:92:e9:6d:61:47:5a:63:1a:c1:36:c4:a9:b1:09:68:54:
dc:3b:17:12:2e:dc:cf:c4:d0:b1:76:69:82:bb:2b:59:08:89:
b9:05:2a:36:1b:54:71:55:f6:38:bb:25:93:c3:b8:04:c6:62:
6d:75:4f:42:76:8a:d5:2f:15:75:fd:cf:52:9d:5d:77:2f:ae:
81:4b:23:36:bb:f7:35:68:81:d8:25:90:ac:27:c4:56:f1:20:
c1:7a:1b:fb:d1:22:03:8c:8e:14:c4:1b:1e:10:84:5d:b3:ef:
8a:1d:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:17:24 2026 by rpki-client