Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: N3EOm6gn/qen44NKbj/g1xV5tPbSHMbntpdzXjjPjdE=
Subject key identifier: A8:82:DE:9A:A7:9F:82:D4:0C:A3:AC:38:1C:D3:D0:0C:BD:1B:62:01
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 01A0021406FDAAFA250821D63E2038F50571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 108D
Signing time: Fri 14 Aug 2026 21:01:01 +0000
Manifest this update: Fri 14 Aug 2026 21:01:01 +0000
Manifest next update: Sat 15 Aug 2026 21:01:01 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: IRj5KxXw4xuicAUqUWvUy3AsuVJRAG8ar5B6/3RQehY=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:06:fd:aa:fa:25:08:21:d6:3e:20:38:f5:05:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Aug 14 21:01:01 2026 GMT
Not After : Aug 15 21:01:01 2026 GMT
Subject: CN=a882de9aa79f82d40ca3ac381cd3d00cbd1b6201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:0f:b8:a2:44:d1:21:06:10:9e:54:4a:6e:
44:a6:f5:37:a1:f3:28:23:b5:8f:bf:13:1a:e1:1e:
06:7c:50:3a:7f:86:a6:b3:f4:44:bd:09:71:d1:4d:
3d:93:99:18:72:a3:06:a5:62:c3:4c:e0:ee:7f:f8:
b1:91:8f:d1:94:65:1b:07:f1:99:f3:9c:6b:ad:85:
02:64:47:db:cf:0d:69:03:a7:df:ac:1f:2d:63:d9:
28:c7:11:bb:3c:c7:cf:95:76:32:45:9c:61:42:7d:
26:87:86:ca:9c:8a:15:30:c9:0d:c9:98:07:e3:d8:
24:ac:40:7d:9a:26:8e:d5:57:d0:b7:be:49:77:c1:
43:3e:53:ee:09:57:f7:90:0d:a6:26:30:97:ad:1d:
e0:a1:39:e8:b5:76:27:1f:d2:54:6e:70:07:6c:6c:
49:27:53:87:89:85:13:c5:21:3c:71:c9:47:8d:a4:
30:f0:18:9d:f1:39:5e:f3:45:4a:6e:c3:3e:c2:3d:
eb:1d:08:0d:1d:90:8f:5b:a9:4c:33:af:fa:02:77:
10:12:bd:68:f1:a7:16:2d:5c:56:16:db:39:12:65:
aa:5a:3c:61:4f:61:66:5f:78:e2:ff:66:d5:da:3a:
bf:28:75:ea:53:c2:8f:1b:98:43:c9:bc:5c:43:4f:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:82:DE:9A:A7:9F:82:D4:0C:A3:AC:38:1C:D3:D0:0C:BD:1B:62:01
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b7:26:dd:f9:96:92:a5:f9:b4:7d:0b:f8:c7:c3:f9:2b:4f:
6b:47:c9:d7:8f:74:40:63:1b:3d:fb:8a:5a:8e:ef:ca:3a:ea:
a9:20:65:2b:98:4e:55:c2:20:7d:6c:1c:ef:83:97:e5:dd:03:
ba:51:cb:66:51:d2:a9:97:e5:7c:9b:40:a0:ab:ef:de:ba:3a:
28:3c:b9:36:f5:f1:5d:ea:9c:5e:fd:b9:c7:06:7e:73:b4:68:
e7:c2:02:17:71:f5:7b:0f:77:a7:56:78:a3:91:de:d2:28:71:
4e:81:74:70:24:0e:bd:1b:7a:8d:c2:6d:19:ff:21:80:11:04:
a6:2b:00:77:6e:d9:95:25:19:9f:4e:db:30:97:a6:3b:ae:4f:
9c:d6:44:da:58:8f:f5:e4:7b:e3:68:12:f6:fd:6e:df:7c:70:
25:d3:04:04:ab:c8:07:e8:24:90:62:29:3a:d2:82:80:4e:e0:
83:38:dc:9c:60:80:96:36:cd:d8:c9:b6:12:a9:f1:66:56:ec:
7d:6a:be:3d:8d:36:d2:b8:55:9d:bb:10:a6:fe:45:08:1f:ea:
a9:7f:17:cd:95:e8:58:62:96:56:28:22:49:89:a3:51:1a:15:
6d:52:6c:41:eb:d1:9d:a1:fb:af:f2:48:e5:eb:45:c7:f7:53:
4d:b6:9d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:49 2026 by rpki-client