Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: MOfawj7FUETiz6XxNLu18nXibtXsydTaT5LxViQU7zM=
Subject key identifier: 46:CD:13:D8:B2:97:3B:23:DC:BB:23:95:4E:95:0B:CD:BE:CA:87:3E
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 019FFA91944FA1BDFF331BD84215074A5E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 1991
Signing time: Thu 13 Aug 2026 10:01:12 +0000
Manifest this update: Thu 13 Aug 2026 10:01:12 +0000
Manifest next update: Fri 14 Aug 2026 10:01:12 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: Pxk32EQHvfwLRbnS42QdOP4kSZyjT91/QHYmCRbEsAU=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:91:94:4f:a1:bd:ff:33:1b:d8:42:15:07:4a:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Aug 13 10:01:12 2026 GMT
Not After : Aug 14 10:01:12 2026 GMT
Subject: CN=46cd13d8b2973b23dcbb23954e950bcdbeca873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:4d:03:6e:6c:32:26:85:83:1d:68:8d:26:
08:9a:bc:07:d6:f6:aa:8b:29:23:79:02:3f:ce:33:
20:f1:e3:b6:50:07:5c:43:48:78:22:cf:45:7c:a5:
48:8e:4c:38:3f:07:06:2a:5e:71:2a:93:38:39:bc:
52:e8:1c:bd:03:f8:de:be:98:80:bb:cf:fc:d8:2e:
8f:71:a3:29:61:66:6f:c3:13:f5:18:e7:6e:5e:17:
c0:d6:6a:d6:ba:f8:5e:1b:55:35:48:43:48:cc:1b:
78:7d:5a:a1:34:37:2b:1c:cf:09:81:87:28:a6:e9:
41:d7:ae:aa:cc:f0:23:ff:0b:99:5a:70:be:a7:a4:
da:12:a7:5f:9a:ef:d2:98:3f:fc:60:c9:58:fb:e7:
35:fb:3a:c9:56:34:35:e3:49:20:09:0f:a8:a9:c7:
d0:7f:10:be:ad:0b:4c:e0:70:9d:55:eb:f1:0f:34:
8e:48:9f:37:56:27:40:96:c4:c0:ef:4d:af:30:79:
b0:24:20:1c:e1:e8:45:95:f0:5f:ca:eb:be:67:1c:
45:f6:24:fc:54:8f:5b:99:69:5e:a0:09:70:55:7f:
04:9b:c5:24:31:f1:56:ca:8a:37:bf:ba:28:3d:33:
73:e5:f3:c1:1c:57:ce:8b:0e:76:e1:79:c6:4d:d3:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:13:D8:B2:97:3B:23:DC:BB:23:95:4E:95:0B:CD:BE:CA:87:3E
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4b:10:3e:36:af:5f:66:e6:3d:58:b4:40:17:27:7e:d6:d5:
e5:85:c5:ab:c1:ff:c6:e7:9b:e4:c3:88:fe:7a:f4:6c:87:54:
f1:ac:4e:b1:49:36:5c:b5:45:6d:86:4a:24:82:dd:65:65:27:
06:7d:e1:41:53:12:1c:7c:4e:98:4b:89:b3:ea:eb:82:b7:ab:
08:06:e9:f1:59:a3:ab:bc:5f:ae:c7:0d:1a:5d:69:da:c2:91:
e5:35:b9:3d:4f:21:52:0d:0c:99:de:f9:2b:4d:61:ae:30:f1:
5e:56:79:e2:17:b7:18:41:0a:09:2f:97:45:35:85:77:14:71:
27:c6:85:ea:2c:fc:b8:38:d3:cb:f6:00:23:75:d9:a9:72:91:
fa:0b:54:61:6d:bf:73:26:7f:bd:d4:2f:1d:bb:06:b6:02:d7:
1f:56:42:9f:4b:8d:5b:70:8f:be:de:45:ec:92:54:54:a2:32:
fe:9c:59:6a:c0:c3:b4:2b:74:ea:bd:64:f2:1d:3b:cf:40:0e:
6e:e2:f3:fc:b7:b7:a9:3e:2b:d8:67:74:47:ba:83:6a:6a:56:
3c:66:19:6b:99:90:cd:69:8f:5e:6d:48:ee:2a:b8:c5:2f:0b:
fd:46:6b:d2:b6:87:30:d0:80:17:1d:69:22:fc:e6:31:de:8f:
3d:c5:5d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:35:41 2026 by rpki-client