Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: 74pdEXrRg3ILq9q1dCw+vTjz9YCOTGwDn4i6S1MiZZQ=
Subject key identifier: D2:EA:ED:E9:00:0B:C5:30:00:37:E3:75:C2:ED:76:6E:77:B6:FA:45
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 01A00101EBAE89B17CE10C3B25D270031FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 0C00
Signing time: Fri 14 Aug 2026 16:01:38 +0000
Manifest this update: Fri 14 Aug 2026 16:01:38 +0000
Manifest next update: Sat 15 Aug 2026 16:01:38 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: +7KnwTFAdr+DWorx6htbtZ95fzReGPWm1gJdfZTDVnE=)
2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:eb:ae:89:b1:7c:e1:0c:3b:25:d2:70:03:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Aug 14 16:01:38 2026 GMT
Not After : Aug 15 16:01:38 2026 GMT
Subject: CN=d2eaede9000bc5300037e375c2ed766e77b6fa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:7b:d8:d7:97:df:e5:7e:fb:47:e8:1d:77:
27:d7:89:64:a9:b1:fa:e4:e8:cc:ea:5a:3e:9c:8a:
8f:fe:58:1c:6d:49:11:b8:0d:3c:9f:49:db:c2:7a:
a0:78:59:ec:97:ee:0b:1a:00:af:c9:68:2e:e1:1b:
72:38:eb:3a:fe:0a:94:6e:2e:11:4d:f2:54:89:b1:
e2:4e:86:f7:43:a4:9c:a3:37:9d:59:70:b2:be:bf:
d1:3d:32:6b:14:d3:23:aa:8f:de:b6:b9:b3:9e:b4:
6f:76:8f:f5:12:08:3d:71:9f:fc:a9:db:a3:58:64:
b9:d5:ae:b8:ba:90:d1:08:98:01:48:2a:0f:db:22:
50:b4:2f:18:2a:1d:7d:c6:26:df:3c:11:b3:86:16:
31:00:d2:a4:d9:98:f6:51:58:cc:f6:88:a7:e7:c8:
4b:f7:58:ae:63:51:cc:bd:93:91:76:55:48:a3:d9:
2e:ac:df:6e:6c:f7:65:8d:71:92:98:fc:a3:39:f7:
d9:62:99:9f:c5:95:95:f2:38:ef:a8:40:c1:1f:70:
99:4c:93:00:f8:66:19:37:da:ab:1a:c5:9f:46:d2:
75:de:95:d3:d4:fd:13:29:86:ef:38:81:d2:d7:7e:
26:47:f2:0b:4c:7c:2d:55:06:89:18:ca:c8:cc:2f:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EA:ED:E9:00:0B:C5:30:00:37:E3:75:C2:ED:76:6E:77:B6:FA:45
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f8:27:40:44:da:b5:92:a7:4e:37:4e:47:12:60:c0:40:e7:
08:e8:8a:5d:38:e6:42:15:92:4b:0e:61:39:f0:23:fa:12:21:
67:36:dd:bf:94:be:a5:aa:34:3c:ac:c6:bb:4c:c5:4d:83:74:
e0:ab:1f:f0:3f:99:da:ff:13:29:3a:4a:76:90:f1:e0:7f:f3:
08:c7:4d:04:c8:a6:75:87:ba:82:c0:e2:46:0a:02:44:30:a9:
6a:39:3b:4a:0b:b0:fb:63:b5:fc:07:0a:f1:e1:d5:e9:c1:96:
94:15:40:2c:f1:3a:7c:42:a7:55:6b:0c:36:4b:77:02:3a:00:
77:cb:d5:9e:fc:ff:58:aa:f4:96:76:a7:fd:23:ac:f9:b6:e3:
c1:c7:30:97:c1:f6:02:ad:88:f8:a8:b7:3a:d7:bb:8d:a3:41:
10:83:44:aa:4c:82:18:09:e0:f7:62:c1:e3:11:96:9c:e8:86:
c6:bb:6e:eb:34:00:b3:ba:fa:5b:3c:69:c0:14:c5:87:71:cf:
39:d7:47:cf:3f:41:d1:5f:89:47:91:19:cf:db:ab:9f:1b:55:
c1:91:a5:61:27:e8:a3:18:42:3c:db:2a:8c:a1:b9:ce:cf:72:
ad:3b:60:ba:44:78:2e:21:88:a7:73:a5:eb:de:cb:37:c0:0a:
a9:dc:55:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:51 2026 by rpki-client