Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: SeiI/2DW0GcBrLn/LwUazfaLN3IBQ6IK2f3Mz2chpNs=
Subject key identifier: C5:26:63:0F:DD:06:25:2E:38:44:70:7B:EF:95:54:1D:6D:85:F9:18
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 01A14C4F9FAD99E0807D6F52AD6A52573087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 1138
Signing time: Sun 18 Oct 2026 00:00:48 +0000
Manifest this update: Sun 18 Oct 2026 00:00:48 +0000
Manifest next update: Mon 19 Oct 2026 00:00:48 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: uN3ffd1Wq40Jk4HL/8LguyKwxCBAnccXWIjJBOrDWrw=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:4f:9f:ad:99:e0:80:7d:6f:52:ad:6a:52:57:30:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Oct 18 00:00:48 2026 GMT
Not After : Oct 19 00:00:48 2026 GMT
Subject: CN=c526630fdd06252e3844707bef95541d6d85f918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:9e:9a:6a:ed:f0:c1:40:6c:e5:77:e6:e2:
51:e4:82:a0:5c:28:86:da:4e:e6:6e:e3:12:6b:bc:
6d:c2:bc:1f:a5:7d:27:08:2c:cf:18:d1:8f:64:58:
89:6d:4d:2b:3e:5e:f3:fa:35:f7:47:00:58:b3:43:
41:5b:ee:58:9b:85:da:67:73:31:a7:21:35:9a:6d:
8f:91:ec:95:fd:99:a9:ec:29:f1:71:d3:77:c7:be:
a4:a0:c7:06:59:e0:09:8d:58:62:05:45:b8:d7:de:
f7:2e:53:13:d6:f4:32:26:5b:84:0f:cb:55:1c:df:
74:c4:7e:00:1a:58:37:79:41:f1:3f:89:1c:4d:eb:
af:a9:ef:b7:2e:f0:81:03:8a:eb:4f:9f:e6:57:fa:
c6:4e:dc:e1:48:fe:ee:0d:b0:6e:aa:9b:9e:3e:47:
7b:fc:9e:22:9d:1a:f9:9b:27:6f:d8:05:12:eb:4b:
a1:0d:6f:0e:4f:87:44:12:66:70:b0:3e:b0:31:a5:
08:4b:dd:65:21:a3:1f:8c:9c:91:eb:6e:bf:b4:2b:
29:c2:52:f3:82:24:1f:33:6d:a7:54:5d:ad:02:4d:
83:8f:3b:41:36:52:04:16:f1:fa:b6:8b:db:99:44:
90:5d:cd:fc:36:af:75:ff:ed:48:62:a8:f2:65:02:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:63:0F:DD:06:25:2E:38:44:70:7B:EF:95:54:1D:6D:85:F9:18
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c7:f9:5f:e4:0d:b6:a5:c4:86:58:5e:06:c7:5b:10:8c:8f:
dc:2b:e1:b2:b4:f8:32:69:3b:de:5f:1c:4c:ae:fb:de:d5:c3:
fc:1c:0a:82:a5:6d:c5:b0:fd:fa:3c:8f:e6:ba:cb:01:7b:d2:
74:3e:57:90:47:e4:eb:0e:45:30:9e:31:ce:04:98:5a:fb:fd:
ae:1b:57:78:0e:4c:0b:d4:35:f7:10:0c:e7:9e:5e:b6:38:46:
70:76:9f:d1:0d:13:a1:9a:80:c8:ac:94:45:13:60:67:f0:13:
75:75:90:ee:6b:da:50:9e:c1:62:df:d8:94:c7:89:45:51:5a:
b8:1a:52:da:b7:b4:ed:2a:96:bb:1e:f1:5b:d3:76:67:3f:7a:
2f:39:1d:39:1b:2f:a2:5a:97:f7:8a:e6:40:6e:4d:4c:79:9c:
a1:5d:dd:a2:53:19:04:0c:14:02:6b:82:9e:25:b5:43:11:a4:
9e:a9:b7:ed:66:20:75:d1:a9:74:c8:95:a5:79:3a:7f:0e:ba:
dd:b8:33:d2:61:fd:28:34:8d:ed:ff:b4:4c:a5:24:01:b7:88:
7a:96:2c:4e:dc:64:25:11:4d:40:2a:9b:14:8a:f8:9b:67:8f:
28:c1:79:0b:c4:7d:ba:3e:de:79:63:78:c9:2d:d5:f7:a1:da:
b6:64:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:20:27 2026 by rpki-client