Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: M4celhUsSNgrOAPgFdxl9JQ3TXs3v0MgSF+oCZDg61s=
Subject key identifier: 04:B0:D7:E2:61:50:BA:DE:EC:DA:3D:EA:75:09:8A:8F:82:54:76:0C
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 01A12542C188D66F8A877A0367A98018BBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 1A41
Signing time: Sat 10 Oct 2026 10:01:34 +0000
Manifest this update: Sat 10 Oct 2026 10:01:34 +0000
Manifest next update: Sun 11 Oct 2026 10:01:34 +0000
Files and hashes: 1: 6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa (hash: 7Tyj4JshIbYP3V9AawiQ2X+dktavULDW7Khh9vcmSus=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: 1JqF2+XInGGM5h1CKetQjRuei4sEOlGOJwjSSM1i+Zs=)
3: zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa (hash: GqW80/tMAbtkCDtDVmCwRVj7WYcfpvr4HUTuVqPBK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:c1:88:d6:6f:8a:87:7a:03:67:a9:80:18:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Oct 10 10:01:34 2026 GMT
Not After : Oct 11 10:01:34 2026 GMT
Subject: CN=04b0d7e26150badeecda3dea75098a8f8254760c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:d7:db:57:ea:f4:56:d7:ce:56:a5:ac:ea:
5e:22:69:6f:a1:23:59:48:6e:3d:17:ad:d5:c8:91:
67:5a:dc:85:60:fb:51:ed:e0:24:6f:2f:65:81:19:
12:e7:3d:59:57:c8:72:85:a5:9f:52:bf:40:83:07:
64:c6:8e:79:9f:30:de:41:aa:e7:d6:06:a9:eb:c9:
8a:9c:a9:66:d8:b6:b1:5c:9c:5f:8e:05:51:cf:58:
b5:e0:45:07:93:f1:ad:d3:ce:2f:0d:6f:86:b8:31:
e7:46:a7:d2:c4:fa:dc:48:88:a3:0e:9e:68:69:88:
fa:b3:d4:cd:73:d6:3d:a9:20:de:70:dd:cf:7d:14:
40:3f:52:30:bf:0b:89:d1:e2:b8:30:b8:87:05:7a:
0d:1f:ac:46:0e:be:1c:41:e8:f1:89:f3:e2:93:6e:
f5:d1:b0:35:11:4e:66:dc:1f:84:3f:e7:aa:24:0e:
2c:1c:13:43:bf:86:c9:29:22:4e:ba:7e:72:59:5d:
58:20:e2:93:b9:26:db:35:ed:29:8d:9b:44:d6:3d:
ee:a8:e2:58:7a:e7:44:fc:e5:6b:b0:7d:11:7a:ec:
fa:78:eb:3b:06:43:75:8f:d1:c1:2f:34:94:57:4f:
2b:bb:82:11:f2:0a:5a:30:51:33:4e:b3:b7:11:29:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:D7:E2:61:50:BA:DE:EC:DA:3D:EA:75:09:8A:8F:82:54:76:0C
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:26:dc:ba:26:b6:8d:4f:b2:01:02:d1:35:91:b8:4a:6a:ea:
78:25:70:55:96:20:1b:5f:84:b3:ef:ad:b6:ca:c1:52:0c:8f:
ef:0e:31:30:1b:c1:2d:c7:88:24:7e:62:2a:ad:83:0d:63:a6:
71:89:1e:57:34:05:b9:8a:ed:10:13:e4:9c:ea:a6:00:83:40:
b1:62:41:27:26:85:d5:ae:7f:e5:27:f5:15:95:82:d2:da:bb:
52:1c:b0:b9:41:2f:a1:91:0c:ed:76:59:29:9e:36:0b:0b:bd:
67:7d:15:b8:33:20:8d:62:ce:b5:97:2b:56:66:8d:22:fa:6f:
27:ad:ab:70:d2:bd:28:5e:1a:bc:28:76:9c:46:97:ff:7c:b6:
4b:41:08:1c:36:e7:83:53:39:60:43:94:fc:ea:3d:68:75:35:
bf:fe:39:65:a0:45:80:a8:53:a5:9a:88:d5:b3:7b:82:c8:27:
50:7d:b3:ce:34:4e:e4:6d:7f:8d:5c:24:46:7a:5c:8d:4f:12:
f5:f9:6a:d2:ca:b7:81:d2:b7:c7:e7:a9:c0:27:b9:a5:13:f1:
90:7c:e4:8c:df:f7:4c:64:31:13:10:89:ff:da:aa:8f:a2:f8:
62:5c:a2:bf:5a:07:14:5a:2e:3e:c9:e5:7e:53:90:e0:57:66:
50:7a:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:36:03 2026 by rpki-client