Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: A9ZF/cIDn8sN9/u+TJZOBXFXemlGRt+YpQBcTWj4wZw=
Subject key identifier: F0:D4:1E:13:70:3C:8C:91:21:12:D8:17:C4:74:1F:93:7A:F9:DB:4F
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019CAC7E157005DA3D79FCA2ABBCEDB7BBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 086E
Signing time: Mon 02 Mar 2026 03:01:10 +0000
Manifest this update: Mon 02 Mar 2026 03:01:10 +0000
Manifest next update: Tue 03 Mar 2026 03:01:10 +0000
Files and hashes: 1: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (hash: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ=)
2: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: d9hv8460u9ZFCKz06AJJg3qdlcVTTTws9mMGzBKpqXU=)
3: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (hash: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:15:70:05:da:3d:79:fc:a2:ab:bc:ed:b7:bb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Mar 2 03:01:10 2026 GMT
Not After : Mar 3 03:01:10 2026 GMT
Subject: CN=f0d41e13703c8c912112d817c4741f937af9db4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:72:0a:bb:bb:19:ed:f0:c4:ea:2f:f0:6f:
e6:ed:b7:53:ea:75:15:fc:80:c2:12:f7:ef:a0:35:
a8:90:8f:e3:5c:3d:b0:d2:24:54:0a:49:89:29:9b:
0f:7c:06:f2:6a:fb:76:64:06:42:d4:10:58:39:0e:
f5:32:64:13:ec:9a:df:3a:6a:af:40:82:02:93:a9:
3e:99:c3:b3:9e:7f:c4:aa:e5:f2:0a:b3:3a:fe:e2:
91:14:45:cc:b9:6b:b6:37:48:21:e3:10:d1:41:f9:
3c:e7:82:ba:9a:d9:62:ba:10:c8:f9:7f:20:de:2a:
4a:ac:d3:ec:55:91:11:74:8f:82:59:ce:a1:77:2d:
1f:ec:d1:d3:61:eb:a1:35:7b:2c:7c:ed:a7:e2:ec:
cc:63:21:39:9b:1a:e4:41:39:18:91:51:16:d8:49:
ac:61:e6:1e:8e:73:59:be:74:aa:b8:b1:13:1d:88:
50:97:20:53:9e:01:21:e3:cc:08:62:17:b5:b1:eb:
08:77:48:1e:01:25:ba:f3:43:eb:b3:a8:ae:38:df:
06:63:46:fa:4c:b0:06:36:3f:36:22:c9:6c:eb:48:
c4:17:3b:06:54:07:3f:33:de:67:82:d8:9c:5f:e6:
ba:8c:20:8b:ed:97:c3:3b:fe:79:27:36:73:b5:6a:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:1E:13:70:3C:8C:91:21:12:D8:17:C4:74:1F:93:7A:F9:DB:4F
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:28:84:43:60:13:10:f8:2f:92:ce:0a:6e:31:b5:36:81:aa:
3e:8e:a4:a5:23:39:de:f1:e2:f2:8b:d2:41:68:6e:e7:8e:4d:
2c:ac:19:f8:26:82:7a:18:b0:d5:e1:e5:5a:ca:9d:6e:fd:8a:
af:a9:6f:4f:1a:c6:c6:f7:ce:ee:45:7c:8b:0e:31:07:40:c6:
29:12:09:cc:ed:8c:24:a1:2a:16:d3:a4:f9:a8:24:55:f9:ab:
5d:18:5c:ec:93:3e:a0:dc:9b:13:c0:e9:66:d1:63:e4:54:cd:
f4:56:d5:01:63:8d:5f:6d:d6:80:5b:ba:00:47:9c:63:80:d4:
03:e6:e5:69:55:81:d0:8a:69:f7:7d:76:df:0b:83:86:cb:23:
a5:b4:34:46:a9:24:26:57:8b:48:45:21:64:bd:be:dc:22:17:
b5:15:54:eb:f7:65:ac:a5:51:e9:e7:87:48:51:df:39:a8:c3:
15:75:0a:fe:5b:fb:36:d1:6d:28:56:53:b6:ed:da:cc:fa:81:
64:63:a1:e2:1b:b9:d4:51:54:40:e4:e8:ce:7f:56:fa:b2:49:
64:d9:06:86:99:99:a5:c8:52:57:e1:3c:8f:45:ab:e6:d7:d3:
a1:25:3b:b7:06:fa:74:54:c5:c2:a1:96:8e:4e:85:9b:32:e6:
b9:c9:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:09 2026 by rpki-client