Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: Wd/0GBan8b85/mHIvwr0wqB6ktvcYn4Eaep1DKZhtCg=
Subject key identifier: 9B:7E:EF:E4:E0:52:9B:94:3E:E3:D3:9A:A3:1F:9E:29:78:F5:7D:27
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 01A12C57145E79A7A0B0465B81954B03898E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0D28
Signing time: Sun 11 Oct 2026 19:01:06 +0000
Manifest this update: Sun 11 Oct 2026 19:01:06 +0000
Manifest next update: Mon 12 Oct 2026 19:01:06 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: 8TR/1OxvkepjK7MsEkvKiU4MvU0zg90KC4khl/FA2cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:14:5e:79:a7:a0:b0:46:5b:81:95:4b:03:89:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Oct 11 19:01:06 2026 GMT
Not After : Oct 12 19:01:06 2026 GMT
Subject: CN=9b7eefe4e0529b943ee3d39aa31f9e2978f57d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:f2:ac:b3:57:4a:e0:22:f1:2c:72:26:1e:
f0:db:2c:7b:1d:d4:3d:a2:04:71:53:6c:d5:f2:c0:
5e:7d:08:85:3c:f9:a3:c7:87:46:3a:0b:d6:cc:e9:
94:41:c4:c9:ae:78:a5:e1:a2:00:96:73:d8:c9:9a:
50:0a:f7:44:51:da:b1:d2:ab:df:05:4d:38:a9:b7:
37:48:f0:94:5f:ed:10:69:10:d9:58:96:70:34:68:
d2:6f:a0:25:7a:af:26:0a:0c:d0:29:bc:98:a5:28:
c8:b8:48:e6:35:56:72:2a:e4:c2:85:77:cf:fe:ff:
9f:01:3d:2b:66:d3:d1:66:3f:55:ac:10:3e:ff:79:
06:61:86:06:10:5f:d2:dc:6b:10:50:c3:88:54:18:
89:09:31:ed:1d:e9:f4:c0:1b:8d:8b:6f:b7:61:88:
38:c9:af:c4:9a:b4:19:83:2f:26:a5:95:3d:8a:be:
0e:b4:be:55:73:f4:43:b9:bf:ce:ab:cb:8b:21:66:
49:57:c1:83:71:c8:b6:c2:b4:19:b5:04:77:19:00:
6d:7f:ed:31:59:19:0d:f4:84:67:04:ca:d1:9a:34:
94:2d:09:6d:79:a8:91:70:f0:98:89:27:d3:8f:ab:
30:66:12:40:56:f3:cb:cf:0e:50:76:ec:0d:4e:f4:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:EF:E4:E0:52:9B:94:3E:E3:D3:9A:A3:1F:9E:29:78:F5:7D:27
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:40:1a:5a:ef:d0:9b:d2:56:02:d8:f0:fd:8d:85:da:db:aa:
46:0d:3e:3b:cb:39:f7:c7:3f:cd:f5:1e:c8:1d:d2:55:40:fb:
04:50:4f:05:8d:ec:76:88:d0:a7:fc:d2:e6:7f:8e:b6:15:da:
c6:3b:31:b5:27:21:a0:c2:19:4c:ec:24:80:c4:fa:1f:9d:38:
68:ee:22:53:a6:6b:03:9e:21:a2:cd:24:35:0e:47:e0:86:fd:
6f:c0:ca:ff:6e:ce:2d:81:f9:46:3d:22:14:b3:f9:90:67:cc:
b0:21:f8:0e:22:8f:01:3b:d3:17:b2:58:0f:98:f6:ff:74:cf:
d0:8b:20:0e:25:f6:b8:0c:27:d7:ec:d7:31:f4:ce:da:f5:0c:
a4:ec:58:08:7c:87:a2:50:85:a8:a1:ef:ca:26:3d:99:66:87:
ae:9a:36:d7:cc:33:99:d2:55:3e:88:f3:b0:95:11:fb:b2:45:
4b:8a:ec:3f:59:6c:0e:08:e7:15:1a:a6:8d:82:48:f7:81:47:
3b:8c:bf:21:26:0e:5a:2e:46:c0:48:d5:db:1c:ee:5e:56:32:
32:9d:82:70:7b:3e:05:38:33:f7:88:31:3c:f0:39:b7:96:0f:
b1:30:f5:1c:3f:d0:5d:7b:5c:2e:c1:5c:64:e7:0d:33:be:c8:
c3:3e:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:28:58 2026 by rpki-client