Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: jycrz9Vbvei2jythteP6ngBU85M6ItDaXDFIoJk066A=
Subject key identifier: 24:A0:4C:70:1A:3F:8C:99:77:14:57:48:D5:DF:66:12:F3:94:A9:B9
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 01A001A5C3F435044F9D1D3E6B6A54B73884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0E80
Signing time: Fri 14 Aug 2026 19:00:35 +0000
Manifest this update: Fri 14 Aug 2026 19:00:35 +0000
Manifest next update: Sat 15 Aug 2026 19:00:35 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: Cgx/2wbtqltatizmeepPAqvoHtU7a/RFM1+UPqRlDn8=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:c3:f4:35:04:4f:9d:1d:3e:6b:6a:54:b7:38:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Aug 14 19:00:35 2026 GMT
Not After : Aug 15 19:00:35 2026 GMT
Subject: CN=24a04c701a3f8c9977145748d5df6612f394a9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:1d:b8:dd:73:33:fa:d7:fa:37:ac:ae:54:
b1:08:11:8c:7c:3c:17:6e:ea:97:3b:b6:db:92:6e:
0f:38:37:29:20:ed:a2:83:5e:4d:41:77:05:55:c4:
ee:d6:02:7e:76:d9:eb:09:9f:65:29:37:a1:e0:56:
68:d5:07:d3:22:e2:83:56:20:73:29:0a:a7:72:a9:
9f:0d:63:0a:e9:67:c7:42:86:7f:37:a3:ef:64:ca:
5b:2b:02:d9:96:6c:c8:fd:ef:28:2c:6c:58:86:59:
fe:7d:2c:63:a0:3f:c5:25:29:e5:4c:c5:c4:0c:08:
0d:b3:dc:00:8b:81:81:44:af:e8:44:ca:2e:3d:68:
bc:b7:06:26:ef:dc:4c:33:fc:c3:01:d9:0e:2f:14:
fa:cd:0d:b9:0c:11:cf:bf:3c:61:ee:01:5e:a9:72:
8b:d2:f6:8a:cf:6f:a8:7b:4c:b0:88:81:fd:10:12:
9c:10:e8:ba:da:4a:c4:e4:74:77:d8:37:70:5c:eb:
57:4d:21:c3:20:96:cb:bb:9d:e0:49:0b:68:c6:f4:
7f:8d:86:96:f8:9e:36:6e:95:a0:43:b2:67:e9:59:
19:68:69:37:42:2a:8c:74:45:2b:e2:29:f6:8d:2f:
02:76:bc:60:46:33:5d:7c:43:73:d2:30:e7:98:d8:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A0:4C:70:1A:3F:8C:99:77:14:57:48:D5:DF:66:12:F3:94:A9:B9
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f9:b9:74:53:20:6b:de:dc:ac:4a:52:7b:ae:9d:aa:af:08:
a6:f1:c5:bf:4c:83:49:28:d1:2d:13:8c:bf:27:db:64:c7:e6:
16:f3:ae:3c:be:23:2d:cf:2c:ec:19:69:24:a0:97:dc:af:1a:
35:ce:c2:94:33:1e:58:e5:f7:2e:49:26:83:c8:4e:77:7b:ef:
62:58:68:48:d8:3b:25:9c:94:4c:ea:91:5b:e6:44:9e:4b:f3:
94:6c:c9:7a:71:9c:77:ff:f5:a2:32:e7:84:76:71:30:6a:72:
82:ac:41:ee:c8:1f:9a:d1:a0:d7:ea:16:08:39:c1:d4:6c:49:
39:78:ee:1b:4e:98:36:ce:8d:e0:d9:14:ae:dd:18:41:ac:3e:
a6:59:c7:cd:7d:0a:35:cf:64:20:3f:a6:1d:a8:54:30:63:b0:
38:b6:6e:77:f2:eb:dc:5e:0c:34:d6:6c:2f:5c:43:73:9f:c7:
fb:87:80:f8:52:58:1d:2b:c7:0c:a6:4e:40:e5:30:e0:4c:e8:
e1:a3:09:94:ac:c6:d9:ce:e7:ec:6b:63:d9:09:ca:39:cf:a0:
d5:c0:f0:ae:44:ac:59:18:05:2f:2e:2b:37:56:fb:d2:ce:51:
6c:03:d9:27:29:04:2a:4a:54:91:a9:7e:32:8e:36:f3:e9:63:
2f:92:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:18 2026 by rpki-client