Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
File: 8BEN0EuQ0jaaSydktx_TjQUIX-w.mft (raw, json)
Hash identifier: SS3HE7yeF6HPizS2IHANtfv66DNF3XRaMhYDTRKN+hs=
Subject key identifier: A0:61:87:D5:C5:58:B9:B7:F5:19:F6:84:17:84:83:4C:E9:8A:C7:68
Authority key identifier: F0:11:0D:D0:4B:90:D2:36:9A:4B:27:64:B7:1F:D3:8D:05:08:5F:EC
Certificate issuer: /CN=f0110dd04b90d2369a4b2764b71fd38d05085fec
Certificate serial: 01A06F830DD19A53ED4F95EB531B5167CB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:00:54 +0000
Manifest this update: Sat 05 Sep 2026 03:00:54 +0000
Manifest next update: Sun 06 Sep 2026 03:00:54 +0000
Files and hashes: 1: 4ZQr3EKg7XLkj-p9Nvw6XTVpPbo.roa (hash: exTQU9dmfmZhdPx8oGiUL/j0MT0I/USYBEi+eDQjOJc=)
2: 8BEN0EuQ0jaaSydktx_TjQUIX-w.crl (hash: TqOcwL9Lb5wjDxb3juzTGY5ILuryaK6SqelVJq805Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:0d:d1:9a:53:ed:4f:95:eb:53:1b:51:67:cb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0110dd04b90d2369a4b2764b71fd38d05085fec
Validity
Not Before: Sep 5 03:00:54 2026 GMT
Not After : Sep 6 03:00:54 2026 GMT
Subject: CN=a06187d5c558b9b7f519f6841784834ce98ac768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:17:ea:f3:91:90:66:a1:6b:29:96:1c:49:41:
97:a8:d0:1f:c0:f8:c2:b4:b6:89:d8:20:c0:3c:76:
6f:87:df:70:ba:96:1d:98:28:bf:f4:32:bc:e7:ad:
90:f4:81:49:14:1d:42:56:6e:fe:90:13:eb:40:64:
ab:29:00:e8:b7:0e:20:b2:7a:4f:d0:ec:8a:df:2f:
dd:54:9d:d6:10:dc:e4:1a:3e:06:6d:18:35:c1:86:
0b:50:06:71:d8:8c:8f:8d:8c:be:fd:3e:b7:7f:e2:
0a:47:d1:18:f1:5a:a2:cb:d5:30:dc:38:61:71:53:
02:64:a3:dd:b1:c9:31:b5:fd:94:b9:51:0b:24:fb:
56:0c:e3:f7:4e:1d:2a:cf:84:d3:04:bb:dc:a7:4c:
f3:90:ee:ac:3b:a4:ae:b8:5f:ae:38:e8:6d:e5:60:
ab:3b:4f:a2:8a:9c:ec:f5:bb:ec:42:61:b2:e4:0c:
7b:96:e2:c2:0c:95:74:83:d0:2d:1f:5c:36:a1:8b:
ea:e8:66:a8:1a:ae:40:e8:e0:ca:f1:7d:f8:e5:58:
69:09:5a:75:14:83:1b:bd:8a:08:c1:c4:3d:bf:d7:
fd:aa:a2:90:e5:89:37:4c:05:48:f4:03:f8:f7:44:
66:82:d3:ff:9b:c0:26:24:cc:4b:3a:e8:e1:05:00:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:87:D5:C5:58:B9:B7:F5:19:F6:84:17:84:83:4C:E9:8A:C7:68
X509v3 Authority Key Identifier:
keyid:F0:11:0D:D0:4B:90:D2:36:9A:4B:27:64:B7:1F:D3:8D:05:08:5F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4e:e8:80:03:bb:36:8a:43:5b:33:90:de:da:74:5e:ad:d8:
8a:c3:ae:71:50:49:09:13:17:51:00:7e:cb:26:8f:7c:e4:14:
0a:40:dd:3d:48:7a:83:72:0a:76:3f:3b:73:65:ab:ae:f6:bd:
e0:af:76:78:b8:4f:07:cb:d7:46:e5:cf:f1:c5:cc:1a:5e:6a:
0e:02:22:e0:ef:7e:b8:00:da:95:03:01:c4:f3:19:cb:9c:55:
99:78:18:c9:41:8a:c5:54:f2:ac:b4:f7:2e:e4:e5:80:f0:e2:
aa:b2:f6:d0:fb:4a:57:a7:e4:46:39:6d:98:1a:0b:4b:51:06:
0e:e0:58:2e:d4:93:1e:db:7e:01:95:9f:98:05:23:14:42:c0:
e1:e9:9c:51:e8:72:4e:90:d4:ac:a0:e3:69:ac:aa:ba:23:2a:
55:31:9b:89:eb:cf:66:7d:0e:76:ea:8c:b2:b9:1d:c9:ba:73:
78:21:48:af:12:3a:6b:56:60:7d:0b:7b:f5:ea:aa:90:22:dd:
3b:19:a7:ba:cc:87:9c:ea:bb:3c:80:71:11:e3:d5:35:81:56:
c4:2d:a7:23:ff:72:29:29:85:50:4f:63:26:6b:ed:d9:1e:91:
b2:3c:dc:96:87:c3:72:3f:11:99:ae:ee:d9:03:1d:dc:a8:d1:
3a:9c:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:07 2026 by rpki-client