Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: 4Egr+W3Eg/Z75ankS+WLE0dQOczZlzO0wUBZTc11QzY=
Subject key identifier: BF:CF:97:64:5A:86:0B:DC:76:2A:DB:9D:8B:DE:75:42:5C:E3:D7:E5
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 01A0016FC5D400AFB87014C949828880AD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 18:01:37 +0000
Manifest this update: Fri 14 Aug 2026 18:01:37 +0000
Manifest next update: Sat 15 Aug 2026 18:01:37 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: NxUcoCCGZbZx8+Pqcf1auUJLMV8JSXu3MHFvq8wDHAs=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:c5:d4:00:af:b8:70:14:c9:49:82:88:80:ad:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Aug 14 18:01:37 2026 GMT
Not After : Aug 15 18:01:37 2026 GMT
Subject: CN=bfcf97645a860bdc762adb9d8bde75425ce3d7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:70:6d:4a:5a:1a:94:1e:48:0c:c2:b1:2c:fd:
c9:be:8d:0e:0b:6b:48:23:de:0a:01:29:48:5c:93:
d2:5a:88:59:aa:69:37:07:d8:8a:4b:30:50:ad:4a:
2b:60:91:e3:c2:10:9d:66:84:c3:b6:f7:f5:1d:04:
cd:84:cb:d3:81:5a:94:c6:27:6e:8c:d5:a0:dd:70:
2a:7d:a7:a0:5d:fe:27:9b:68:04:84:04:09:98:ba:
10:c6:5c:ca:79:08:4f:d7:9b:0f:bc:69:61:e8:cc:
bf:14:50:3d:1c:1a:8d:1d:0b:90:83:01:ac:49:54:
ce:54:e5:bc:9b:d4:61:61:74:09:7e:c3:00:02:5e:
a0:72:04:72:69:4e:87:34:d2:18:1c:32:34:96:c7:
bf:9b:6d:9d:26:71:9d:81:27:75:c2:3f:a9:25:e3:
a6:e5:67:dc:e8:df:b0:60:43:65:59:96:3c:e9:d5:
07:10:a2:e3:1d:c4:d4:0c:fc:f7:7e:89:40:b1:ed:
c9:8a:0f:be:3b:6d:c4:5f:39:9c:da:4b:30:a4:f8:
69:bc:2d:b1:5e:46:fa:ec:d5:35:8e:e8:76:a9:a6:
c6:fd:85:aa:81:ff:c0:7c:0f:cf:19:89:4d:0d:3e:
3f:3b:86:df:e2:1b:19:2c:43:26:f7:69:ef:b7:87:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:97:64:5A:86:0B:DC:76:2A:DB:9D:8B:DE:75:42:5C:E3:D7:E5
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:06:21:de:87:c0:4d:39:8e:74:98:e6:b8:70:d9:cf:f3:c2:
02:ec:77:65:d9:55:f3:61:44:4e:12:13:41:95:eb:be:1e:10:
a2:95:7f:2e:1d:6a:5f:62:56:e6:82:96:0f:25:fc:1f:05:9e:
38:0c:4a:57:34:24:4c:92:67:ef:5d:f1:21:e2:be:6d:1e:24:
63:39:6d:e8:dc:80:20:8c:15:12:bd:83:08:98:5f:64:84:ef:
e2:b2:28:01:0b:0b:df:02:4d:73:76:ac:fb:27:cb:9b:6b:3f:
d3:0c:c0:66:65:fc:65:cc:bd:10:04:80:75:0e:9b:97:a4:10:
42:96:e3:30:10:9e:9d:0c:6f:8c:60:11:0e:be:f8:1f:2b:b7:
16:9b:75:7a:35:f3:9e:02:72:52:03:e1:73:76:be:b1:57:7c:
6b:e6:16:7d:0a:06:bb:8e:34:22:c1:20:b7:91:27:07:c6:41:
37:fb:e2:07:e6:02:60:a9:37:5e:8c:04:96:ba:e1:82:11:b5:
7c:c0:a5:a7:54:63:0f:74:ac:11:d5:5b:60:6c:c3:a4:69:16:
d2:19:e2:57:71:2f:8f:93:9f:61:a1:5f:6c:53:11:d6:61:a6:
be:7b:5b:86:39:2a:03:0b:d6:fd:9d:57:46:a1:ba:b2:c7:77:
72:13:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:07 2026 by rpki-client