Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: PGhW38E9+pW7gEDYTO1fB0u3uVQ3QYfYjtPUku1cFKo=
Subject key identifier: 87:45:B8:B6:0C:78:AA:F6:18:38:9A:EE:BD:56:93:9A:86:7B:9F:BE
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 01A1A3A4709C09459C062933E523B2D4485A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 0504
Signing time: Tue 03 Nov 2026 23:00:25 +0000
Manifest this update: Tue 03 Nov 2026 23:00:25 +0000
Manifest next update: Wed 04 Nov 2026 23:00:25 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: iCyW/kGCe7z+18oC7X/QPwBIqs6UIh8tcNT5K61Ra2w=)
2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:a4:70:9c:09:45:9c:06:29:33:e5:23:b2:d4:48:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Nov 3 23:00:25 2026 GMT
Not After : Nov 4 23:00:25 2026 GMT
Subject: CN=8745b8b60c78aaf618389aeebd56939a867b9fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:d4:44:fa:54:f2:d6:33:2d:67:64:20:fd:
ec:56:8d:6e:34:14:db:85:da:86:07:9a:0a:7e:24:
58:1e:a6:a4:6d:d2:60:cf:98:cb:6b:af:42:77:a2:
d2:c9:14:5f:4b:f3:75:fb:1e:0e:a8:2c:96:4e:52:
30:19:bb:3a:ba:3d:a1:47:14:f9:aa:de:dd:fc:be:
23:1f:83:1d:09:63:46:8b:24:1a:11:84:12:07:39:
9a:3b:31:32:9a:a6:24:19:de:c9:26:dc:4c:22:55:
01:bd:c6:48:3e:c8:a7:f8:e8:c5:f4:25:63:7f:c5:
37:40:98:ba:39:fe:50:78:65:e2:34:d7:53:ba:5e:
11:67:a4:5e:f1:0f:5b:20:4f:0e:6d:31:fd:54:ca:
b5:3e:9b:07:bd:5c:2e:ef:67:21:8c:21:49:a7:70:
17:10:5c:d9:91:9d:d9:47:78:2d:79:0a:9f:47:13:
a4:b4:7f:a3:63:33:c7:76:43:d6:6e:f6:e1:5f:7c:
6d:e8:d1:e7:c9:84:28:90:e2:08:6e:91:ef:fc:9d:
d3:76:35:88:81:07:41:4f:67:e8:bc:6f:f5:1d:3b:
42:05:b1:7e:a0:f9:ef:b7:e2:de:38:01:85:ba:e6:
11:8b:7a:76:42:cd:8f:08:e7:e2:4d:60:bb:9b:42:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:45:B8:B6:0C:78:AA:F6:18:38:9A:EE:BD:56:93:9A:86:7B:9F:BE
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c7:a6:0d:18:ee:4e:3f:21:03:a4:56:b6:da:3e:14:d3:dd:
d2:3a:bf:3c:b5:68:d8:d3:1a:2a:83:f3:54:ec:58:2f:a0:da:
3c:5c:8a:1d:8a:e5:b6:db:41:e8:78:ac:2e:d1:84:cd:27:69:
1c:ad:23:88:fb:f9:7f:07:13:a4:bc:54:38:c9:97:d2:c8:8a:
f8:2e:c0:fe:25:ad:4b:79:4c:90:69:71:83:e6:7e:94:06:d6:
36:33:a0:f9:92:13:cd:67:91:e0:d1:d2:49:63:ae:a4:6f:4d:
8f:7d:80:b6:18:17:bf:c6:5c:13:cb:b1:62:9f:cd:3c:17:7c:
ef:c2:09:2a:e5:15:02:7d:48:2a:d0:be:56:ae:74:3c:fd:1e:
b7:7b:e7:9c:81:6f:ce:18:65:ae:14:e6:fb:a8:0e:7c:67:49:
d5:f3:04:bd:cf:ba:2b:55:a6:19:7a:e7:e9:02:89:ec:b9:32:
28:95:1f:af:57:20:db:4a:e0:87:44:1c:66:32:0d:b4:73:68:
08:17:88:a1:d9:6b:07:f7:df:2d:ec:64:86:79:0a:77:ac:50:
5d:8b:f5:76:c2:fe:11:79:75:80:1e:b4:d2:bf:fa:a5:9d:d3:
6e:68:2e:ae:84:98:ca:6a:b3:c7:ab:15:a7:e6:0e:dd:ab:d1:
b7:2e:9d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:15:57 2026 by rpki-client