Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: nJcnc/wIWW33NW5Vapfo2fIEHHmoPuo0hMcRehEPQBk=
Subject key identifier: 77:DD:DC:02:3A:89:E7:67:E7:1E:86:75:7C:F8:10:0A:85:69:98:37
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 01A001A5B7B8E6C881465F11FCCD607692DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 0858
Signing time: Fri 14 Aug 2026 19:00:32 +0000
Manifest this update: Fri 14 Aug 2026 19:00:32 +0000
Manifest next update: Sat 15 Aug 2026 19:00:32 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: oTkogjAo716f16TWD/0EvSdbX2vaIW2mvym96eOqKO4=)
2: e40GPVZTDeirYIdOqaP1aapsCXg.asa (hash: h+tl9RH2sA+blXZerCx7ZNM5+m8vY3pFl3hXGBoDo4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:b7:b8:e6:c8:81:46:5f:11:fc:cd:60:76:92:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Aug 14 19:00:32 2026 GMT
Not After : Aug 15 19:00:32 2026 GMT
Subject: CN=77dddc023a89e767e71e86757cf8100a85699837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:30:a5:2a:b2:47:fe:be:81:2e:f6:62:d5:
40:2b:e1:75:a7:7a:cd:73:97:f4:6e:f1:d7:8e:7b:
39:64:15:5c:f4:7e:94:d9:56:db:a2:75:64:88:9c:
bb:03:62:0d:14:c7:1a:81:bc:e6:0f:8a:b2:b4:ea:
d2:db:6c:10:e2:a3:fc:6c:f1:76:58:28:b3:09:6f:
0a:fb:a9:7b:cf:9e:1c:35:bd:e8:27:50:ce:d5:98:
4d:0f:7c:c9:b5:c0:4c:d6:d9:f8:25:24:aa:25:37:
19:e5:c7:3e:20:23:8e:03:f1:67:e1:95:9c:8b:7a:
d2:6d:5f:72:20:8b:3e:a2:66:b5:66:e0:01:da:c9:
f8:13:33:ab:11:c0:c7:d9:26:4e:f9:07:4c:e0:8c:
04:a3:eb:4f:08:c2:5a:8d:c3:8d:c2:a8:bd:84:99:
dc:ce:22:ea:f3:c3:43:85:bd:5e:29:df:d3:9f:1c:
3a:b8:af:05:cf:34:89:63:f7:02:29:11:05:cb:04:
04:f7:3d:56:e9:e8:86:ca:b9:70:35:ac:ac:22:c1:
17:6d:48:3d:e1:c0:f6:dd:e0:82:a0:09:7a:8d:31:
a4:e9:51:6d:30:b5:31:ce:9f:8c:97:40:d5:e0:e3:
c1:b5:af:c6:45:eb:52:d5:87:cf:60:5e:c3:f2:6c:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DD:DC:02:3A:89:E7:67:E7:1E:86:75:7C:F8:10:0A:85:69:98:37
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:39:b2:12:30:fe:65:bb:81:3c:39:b3:44:4f:ba:cd:35:62:
05:3f:cb:1c:51:fe:43:4f:4f:d0:57:fe:20:29:d5:1d:d6:07:
0b:9e:cc:b9:76:04:c3:02:6d:33:70:b4:99:e1:6a:9f:b6:ac:
5f:40:24:68:34:bb:44:50:fd:4c:cb:31:73:39:7b:2b:3f:ac:
64:a1:53:e7:40:0e:38:d6:df:9d:8c:50:30:73:f8:cf:2b:f4:
c6:0a:cf:03:4f:3f:04:55:54:75:4f:0b:b6:6e:55:ad:e0:a6:
aa:a3:9a:cb:f7:e6:f5:02:fd:22:88:e8:64:c6:24:eb:07:a5:
30:f1:94:04:62:dd:67:72:29:bb:61:1b:8d:19:64:16:6b:48:
5b:87:ff:87:12:e7:71:f2:67:7d:2b:50:12:89:28:84:2a:1a:
61:b7:cb:88:5e:ff:f1:f9:ee:f0:73:6e:26:4f:98:ed:83:ab:
ae:94:c8:7a:6d:cc:44:0c:db:44:5a:d9:72:8c:d6:56:1f:f7:
cf:32:a5:bb:e7:3a:91:36:e3:71:d9:66:bc:a5:90:28:7c:89:
f7:e9:c7:b4:f6:d6:09:e7:72:6e:75:55:6d:4b:68:3a:b7:c8:
20:b8:51:fe:a9:1b:da:2f:74:76:ed:03:11:b4:a8:63:d2:e9:
14:6c:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:38:27 2026 by rpki-client