Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.mft
File: R268J5_JTlvEDyWBnoEzncKZoW8.mft (raw, json)
Hash identifier: Dl73zxojhrmN0knGBDxSvh0b5K0wThtIdaLPF7BCuF8=
Subject key identifier: A0:65:F3:0A:7A:A6:D6:18:65:58:69:44:0B:72:5C:55:1B:08:EA:57
Authority key identifier: 47:6E:BC:27:9F:C9:4E:5B:C4:0F:25:81:9E:81:33:9D:C2:99:A1:6F
Certificate issuer: /CN=476ebc279fc94e5bc40f25819e81339dc299a16f
Certificate serial: 01A1250B719AA0DB0081FE834EE8447A9F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R268J5_JTlvEDyWBnoEzncKZoW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.mft
Manifest number: 8D
Signing time: Sat 10 Oct 2026 09:01:09 +0000
Manifest this update: Sat 10 Oct 2026 09:01:09 +0000
Manifest next update: Sun 11 Oct 2026 09:01:09 +0000
Files and hashes: 1: CRn13FuDaI6rAxqYgUiIz_JOwUk.roa (hash: Gf7HUxn7ULBogsXM0Li+Og9PUfDZVpVYEZOMLo2oGVU=)
2: R268J5_JTlvEDyWBnoEzncKZoW8.crl (hash: v6+oBsBTzT2USsXN/4yuhgGUrgQIUG+VyMoJ4fwFttw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R268J5_JTlvEDyWBnoEzncKZoW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:71:9a:a0:db:00:81:fe:83:4e:e8:44:7a:9f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476ebc279fc94e5bc40f25819e81339dc299a16f
Validity
Not Before: Oct 10 09:01:09 2026 GMT
Not After : Oct 11 09:01:09 2026 GMT
Subject: CN=a065f30a7aa6d618655869440b725c551b08ea57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:e9:2d:b8:5c:68:59:29:50:44:12:da:77:
1e:fc:55:4d:06:81:f4:36:77:64:7d:f0:09:61:31:
c4:db:75:c5:79:72:ee:a1:49:ca:cb:75:c2:ab:28:
45:b3:9f:44:92:d0:1a:29:22:41:b8:7d:18:21:c0:
83:3c:0c:3b:bd:af:f8:5b:14:0d:fb:73:ea:c7:7e:
42:b0:17:bd:6d:23:44:bb:c3:37:05:76:14:c8:9f:
ec:6d:6a:af:45:12:87:6b:71:e3:36:45:33:15:8c:
a5:a6:c2:31:3c:d7:ce:0d:fe:49:75:f1:ac:b5:dd:
06:ce:af:c3:a2:88:3c:51:3d:21:4c:fe:0b:ea:2a:
63:df:64:21:72:6b:1a:b7:97:46:a8:e2:24:31:9c:
1e:90:43:70:c8:9b:82:03:2d:89:ec:8e:a7:27:8a:
87:b7:f3:89:2a:32:3d:a6:31:25:50:02:45:79:f7:
40:2b:29:59:d4:e2:ef:fe:d5:82:96:44:96:4b:fc:
6b:47:0f:68:66:6f:4e:2d:0c:3c:df:3b:42:8d:45:
d6:3b:7e:25:83:77:5c:26:a9:ea:6b:5e:e1:23:79:
02:08:fe:c2:93:4b:51:85:7f:89:ce:00:bc:9b:9d:
a3:8c:c5:43:58:3b:22:c7:ff:7f:31:70:78:4c:7a:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:F3:0A:7A:A6:D6:18:65:58:69:44:0B:72:5C:55:1B:08:EA:57
X509v3 Authority Key Identifier:
keyid:47:6E:BC:27:9F:C9:4E:5B:C4:0F:25:81:9E:81:33:9D:C2:99:A1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R268J5_JTlvEDyWBnoEzncKZoW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3a:12:7b:3b:4b:cf:4d:e3:f9:b1:df:a6:b4:6b:59:32:69:
37:d0:fa:04:e4:bb:08:78:15:92:86:2a:42:3e:e7:8e:09:fd:
c5:b0:f5:3f:50:92:5f:89:4e:7e:e1:03:2c:14:78:c1:ad:b9:
69:6c:59:f1:c9:68:ca:de:1c:04:56:2e:15:2f:28:cd:d6:2d:
31:83:ae:e7:b5:7e:89:aa:9f:69:fb:e9:c8:85:dd:72:eb:4f:
d0:0d:59:c3:2c:f2:e7:7b:6e:2d:60:7a:fb:78:2b:89:6d:0a:
32:b4:26:13:22:2a:f2:5a:84:7d:e9:37:89:37:c4:b1:fa:59:
57:5f:1d:ac:ab:a3:a2:99:8a:7d:3b:b2:01:25:10:a2:e1:e6:
e2:78:af:84:62:5a:df:d1:b1:c2:ee:d9:35:62:2e:de:16:60:
45:e3:65:3a:46:1b:97:2d:9f:26:58:07:df:c3:0a:86:b8:25:
cc:0b:53:89:f7:b8:40:95:7b:bd:6b:ab:41:c6:c5:71:b7:6f:
b8:7f:89:53:60:0e:d6:82:4c:b4:6f:f0:0c:51:d0:58:90:65:
48:d9:d9:e0:66:22:9a:b1:6d:dc:66:9a:d1:b8:ee:4d:47:9a:
f3:75:96:e5:80:a7:63:0d:87:eb:7c:f7:30:09:7e:9d:e3:65:
b0:64:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:53:35 2026 by rpki-client