
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: /Gkpo8gV9mdP1A4sDXmUl7/MVgjkX2FsDAhyN5No5b4=
Subject key identifier: 0A:93:05:52:67:89:2F:F8:8C:FB:8E:AF:4F:7A:08:F9:D2:E8:7E:26
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 01A151ACF7635ABA9EC6491B7FE8EA7415BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 01:00:52 +0000
Manifest this update: Mon 19 Oct 2026 01:00:52 +0000
Manifest next update: Tue 20 Oct 2026 01:00:52 +0000
Files and hashes: 1: LcqefA0kElh8JewV5kCSLGG-J5k.roa (hash: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: a1ayN9QC9BFucj4HxWGBauWXvtLRPawCjHBRL/IJyGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:ac:f7:63:5a:ba:9e:c6:49:1b:7f:e8:ea:74:15:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Oct 19 01:00:52 2026 GMT
Not After : Oct 20 01:00:52 2026 GMT
Subject: CN=0a93055267892ff88cfb8eaf4f7a08f9d2e87e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:6a:2e:4e:d8:5e:79:97:d1:43:e6:55:ba:
72:a4:cc:ce:d0:9b:63:39:30:98:ac:7c:df:76:01:
9d:b9:7f:f6:06:4f:d5:ab:81:35:6c:d8:9d:9d:8a:
65:7d:6e:e8:2d:33:cd:53:47:a9:51:d3:a4:77:2e:
9c:36:4f:32:8e:bf:8a:9f:a3:13:d9:b8:96:c2:be:
22:04:06:1e:ed:a9:42:86:e6:f1:f7:aa:88:e9:bf:
78:9f:4f:d7:96:93:a8:d3:00:9c:53:f5:7b:fc:57:
1a:cb:1f:38:b3:6b:f2:35:9c:7f:95:f4:f4:38:9d:
fb:29:2a:2a:77:c2:19:37:45:76:4f:0b:1d:61:e4:
b8:13:76:b5:1d:0f:c2:a6:de:cf:bc:cb:18:60:5e:
01:75:52:bf:a0:c8:91:1e:7a:65:2e:8b:c3:1b:50:
26:68:1c:87:00:55:38:4c:9a:df:da:c5:b2:f2:87:
4a:f9:bd:c4:93:be:ff:88:27:71:02:f0:36:bf:e3:
fa:8a:c9:11:29:a8:75:e5:96:15:3c:0c:e4:80:0d:
58:08:20:5b:09:96:09:61:e4:a1:6e:49:28:d6:02:
2d:cc:35:3f:a4:a4:e5:47:71:32:46:95:23:ff:d5:
4a:9d:ad:78:c3:4c:aa:61:2f:2e:90:ac:ee:f1:0d:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:93:05:52:67:89:2F:F8:8C:FB:8E:AF:4F:7A:08:F9:D2:E8:7E:26
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:06:aa:28:ac:03:41:43:3e:94:36:d9:ad:50:0c:d8:d4:6b:
1b:19:84:72:76:8e:7d:ed:a3:f0:77:3e:3e:a4:3a:28:d6:ac:
13:59:f7:93:95:f5:60:e0:81:90:55:45:3f:fb:d8:63:e0:e2:
b3:7b:32:c2:c9:94:66:7b:fe:60:8d:3e:9b:a2:fa:0e:bc:df:
e3:fc:9d:52:3e:3b:b0:7a:53:a9:3d:fb:27:69:a3:f0:c4:5f:
17:35:52:c0:30:64:4d:ab:b5:65:68:8d:9a:96:00:20:02:fb:
86:f8:5b:24:71:2e:19:8c:5f:41:49:51:4d:f2:12:0e:4d:9b:
77:49:8b:c7:57:c1:94:39:75:dd:bc:84:47:1e:35:00:ec:8a:
ee:3a:67:f0:5a:cd:a8:cb:bf:38:99:d7:d1:d5:ab:18:c4:cb:
bb:f1:78:4e:2f:3d:f9:5f:d7:67:63:c0:e9:d1:96:64:2e:bb:
c9:51:a4:4c:33:b0:54:fb:94:f1:dc:ca:b6:51:62:4a:87:fe:
7e:76:e6:06:f8:4d:aa:60:3d:cc:78:06:29:39:fe:9d:fb:95:
87:bb:d7:dd:1c:e5:ca:c5:6e:ab:45:cc:d7:e0:42:03:e4:15:
00:a3:06:5e:1c:1c:35:e7:14:94:14:05:99:41:2b:bb:39:f4:
33:6e:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:19:26 2026 by rpki-client