Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: tbmyTTmA0zbg0hidn0jNKWDHz/dFus6HS+aJ7vVz+4c=
Subject key identifier: BB:28:B4:A5:48:A1:99:2F:6F:E2:7B:FC:9C:DC:5E:47:A7:AE:F1:5E
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 01A000938CB08CE3DE17D95FE93C12952C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 10F9
Signing time: Fri 14 Aug 2026 14:01:04 +0000
Manifest this update: Fri 14 Aug 2026 14:01:04 +0000
Manifest next update: Sat 15 Aug 2026 14:01:04 +0000
Files and hashes: 1: 7o87e6t6rCHZCTctqNbeIGrB924.asa (hash: gPHZRrAJDyxpEWcymQSdvWZAGGUKmIVDKFbHH3RVcGE=)
2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: ATLqbBiudT7dJlvYc03jwxgI2pbKaoqzFZP7sML8+Vc=)
3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:8c:b0:8c:e3:de:17:d9:5f:e9:3c:12:95:2c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Aug 14 14:01:04 2026 GMT
Not After : Aug 15 14:01:04 2026 GMT
Subject: CN=bb28b4a548a1992f6fe27bfc9cdc5e47a7aef15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:ab:7c:2e:83:74:cf:d5:b5:71:ba:95:bc:
72:a9:99:25:24:d3:3b:5f:9f:ef:75:0d:42:44:a4:
87:67:cb:3b:29:7d:c0:80:d1:81:01:80:cd:d3:e3:
c3:06:33:7f:82:4c:85:0b:80:1a:24:04:cd:2f:ff:
5d:5d:c2:b3:7a:2c:34:4f:5c:cd:46:05:0b:8a:0e:
39:96:c6:65:43:4a:9a:5a:c5:18:09:34:f1:38:ad:
91:a6:c7:fa:9c:30:11:9e:55:e0:8a:92:ac:7d:c6:
c7:1d:ad:45:7e:e8:d8:1a:5a:00:a9:36:a3:6c:db:
de:d5:f4:47:31:46:67:81:81:08:27:dd:57:3d:ee:
29:22:4e:a1:b8:55:22:8c:3c:d9:97:d3:af:9d:65:
73:5f:f1:e5:9c:02:c4:7b:ba:c4:1d:14:31:89:71:
1e:2b:45:dc:3a:2f:89:8b:69:38:1e:f7:05:18:71:
7e:dc:a5:92:54:ff:23:9d:22:95:0e:54:06:16:17:
69:3c:1d:b8:bf:e4:8e:2d:55:ee:26:4a:66:e1:58:
12:08:d6:56:5c:6f:70:87:60:33:40:48:36:c4:13:
15:37:c5:be:c2:67:a2:30:eb:e5:65:45:4e:b9:ed:
d2:77:d7:5d:ef:2f:e1:ab:0e:2d:4d:ba:06:6a:ec:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:28:B4:A5:48:A1:99:2F:6F:E2:7B:FC:9C:DC:5E:47:A7:AE:F1:5E
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:66:0b:61:40:25:e9:ff:0a:82:92:c7:f7:c3:a8:77:20:b6:
e6:b7:4e:5c:c9:ec:60:4c:4b:d4:d3:94:82:f4:6e:01:9b:b0:
88:b7:88:17:d3:05:99:38:ab:9a:fe:15:3f:df:b3:4e:1f:36:
af:cc:76:8c:c6:5e:02:26:09:48:ec:87:5d:e1:07:59:32:13:
7a:ad:3a:72:4b:66:96:b1:8b:e2:8d:fe:4c:93:e1:a3:6d:2f:
77:f0:b6:92:67:ee:f5:4c:62:d5:04:8b:69:2e:c8:23:e5:3f:
31:07:47:93:ab:38:b7:7c:13:5e:51:c1:ef:9d:73:6b:04:6d:
13:e3:8c:9c:50:52:e0:64:50:68:f2:b2:9d:73:74:4f:da:0c:
50:0a:5c:f2:e3:1c:74:90:5c:da:35:7f:d8:09:64:49:3c:9a:
e9:2a:35:d9:b3:00:f9:30:09:04:ed:c1:dd:82:50:3d:44:8c:
a9:c2:8b:9b:59:c7:11:b6:0a:99:22:19:dc:f4:12:c2:5f:32:
6e:d7:e1:d3:d5:e3:6c:9d:4f:d9:e4:a1:64:3c:3f:48:36:fc:
8e:26:0d:5d:80:04:58:96:66:3b:db:5c:ef:b7:f8:45:3e:4f:
9a:62:16:1f:1a:03:08:e5:0d:58:2b:79:66:5a:9a:23:ba:0e:
ed:a4:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:24 2026 by rpki-client