Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: czdqSBq2jDtLD0U9R/d9ZgnbhXLIwHT63yd1O3KSHLI=
Subject key identifier: 45:09:75:AB:F4:69:01:13:C5:0D:17:C3:ED:B9:0C:76:20:55:7D:97
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 01A1382417403E67E284D82C728DF5342192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 02:00:51 +0000
Manifest this update: Wed 14 Oct 2026 02:00:51 +0000
Manifest next update: Thu 15 Oct 2026 02:00:51 +0000
Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: oDxtzGmG8PtzRfvqP1t0QEjYunVQpgLNrtC+NRNuvyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:24:17:40:3e:67:e2:84:d8:2c:72:8d:f5:34:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Oct 14 02:00:51 2026 GMT
Not After : Oct 15 02:00:51 2026 GMT
Subject: CN=450975abf4690113c50d17c3edb90c7620557d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:1e:83:cd:7f:ce:8d:11:95:aa:51:f3:2b:
2a:82:ea:84:80:03:51:b6:ae:9c:08:d4:8a:90:dc:
ed:1c:99:5e:87:fd:4c:01:9c:bf:19:a2:3a:d6:92:
fe:ee:73:81:ea:a1:fb:04:43:99:f1:0c:df:5f:ab:
85:0f:ce:ed:23:61:8b:d1:0b:a9:af:76:ed:2e:e1:
7a:c4:7b:a9:39:1c:d1:26:25:eb:96:c3:bd:f2:7b:
b5:f6:ac:ce:81:d9:a6:c8:a0:d5:17:41:a0:2b:9a:
9b:4a:39:d3:a2:44:aa:93:c0:23:26:1a:aa:75:e8:
90:8b:52:7f:04:67:bb:f3:0f:06:1c:c2:18:58:38:
4b:df:b7:15:d3:22:48:2e:78:fd:4e:d5:f2:4a:8f:
32:d3:ab:44:e4:a3:54:5c:50:e1:94:97:48:22:94:
3f:84:a5:aa:9f:8f:c6:4c:da:ad:7b:5a:83:2b:5d:
89:86:45:b7:c0:88:a7:38:c5:1b:db:c6:97:b4:8c:
f7:da:1c:75:9a:68:08:1c:9d:62:ad:d9:69:06:ad:
fa:bb:59:cd:6b:e1:9f:a3:10:08:24:9f:b9:50:14:
2d:6c:e9:a2:99:73:3f:f6:31:30:42:e0:08:5d:ca:
1d:41:23:d8:a6:dc:0e:f3:ba:da:a1:ce:91:ab:8b:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:09:75:AB:F4:69:01:13:C5:0D:17:C3:ED:B9:0C:76:20:55:7D:97
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:db:0d:7c:c0:67:08:8a:17:7c:91:ea:c0:f7:e9:6b:3d:
dc:54:f3:21:78:6f:8c:2f:ea:70:9f:17:4f:f3:14:56:3c:0e:
ea:e7:14:c1:4c:63:17:f6:12:24:59:b6:7c:de:1d:f8:0b:6f:
9f:21:35:5f:96:d8:a9:a2:0d:ea:3d:84:d0:dc:5d:20:49:72:
69:a6:6b:25:5f:3c:7b:f7:f5:a3:84:55:a3:41:42:e8:b6:7e:
29:69:cc:6c:df:aa:ec:2f:86:70:e8:ae:03:13:16:72:ee:f7:
d4:c7:29:93:af:bc:1f:75:79:a2:b8:de:45:0e:5c:a2:f1:03:
3e:5b:1d:4a:d3:84:7d:a3:d8:98:19:d6:14:87:7a:7e:6a:46:
80:3c:8f:47:1d:cf:4c:ea:dc:d0:12:c5:41:f1:75:c3:ff:89:
0b:18:40:73:10:9a:ca:22:b5:83:18:8b:58:06:81:3d:c4:5a:
d2:f4:e2:b4:78:75:57:4c:d5:eb:9f:f8:da:65:3e:11:2c:8e:
6b:51:4b:1e:17:e6:65:81:8a:10:64:ac:31:bf:29:00:49:47:
09:16:3a:23:a3:1a:a9:43:58:3a:bb:5f:33:ae:9f:08:8e:1c:
01:68:78:77:8c:de:b5:ca:cf:a7:e4:1a:ed:c0:03:f7:51:1b:
c2:de:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:41:37 2026 by rpki-client