Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
File: 8oS7eVhYemBZneFztOhaDJSRoaQ.mft (raw, json)
Hash identifier: uTBMftSVU5vhuADy1GOQVi2HaCkSrrV5p/P0QV3yJ+w=
Subject key identifier: 7C:17:B4:23:F7:70:83:33:D9:35:09:54:CC:25:C4:32:4F:13:B4:BC
Authority key identifier: F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
Certificate issuer: /CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Certificate serial: 01A0E551BB81D366FC8B1566E81767D12096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
Manifest number: F0
Signing time: Mon 28 Sep 2026 00:02:13 +0000
Manifest this update: Mon 28 Sep 2026 00:02:13 +0000
Manifest next update: Tue 29 Sep 2026 00:02:13 +0000
Files and hashes: 1: 8oS7eVhYemBZneFztOhaDJSRoaQ.crl (hash: bgMUN3Rpc0PM5XMDA9zqXycSD1PCKPpMvhhmnlBM270=)
2: IVY6iWcM0h4WNsuJ0C_dYZMPbEY.asa (hash: vJRxB/YA0VSs2+csKGJpplBLmMHFGaBIIWUMdGp+a7U=)
3: t3aKyQAZqp0JpNY9WkTBO5wmV88.roa (hash: 2JKrAMaSBOfAdSssyHnAfVhbKUiXcGPrBZgPHZSrc8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:51:bb:81:d3:66:fc:8b:15:66:e8:17:67:d1:20:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Validity
Not Before: Sep 28 00:02:13 2026 GMT
Not After : Sep 29 00:02:13 2026 GMT
Subject: CN=7c17b423f7708333d9350954cc25c4324f13b4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:45:47:2f:68:5e:8b:93:0c:fe:fa:ba:7f:
7a:65:27:a9:b4:1e:7f:2f:2c:44:89:23:e7:90:d9:
45:a2:96:a3:fa:45:79:e1:d7:4f:ee:7d:8c:ad:d0:
2b:31:41:9e:b7:3c:08:11:97:f9:a6:22:fd:5c:0a:
8c:26:5b:d6:b0:10:4b:f7:9d:f3:bd:47:30:37:cc:
39:3b:96:e1:87:21:bf:41:f7:f7:82:90:c8:9d:22:
4e:51:5c:9b:22:30:ba:46:2c:15:f9:63:1e:c7:3a:
fb:0d:d9:ab:63:2d:4e:81:08:92:aa:4e:62:b6:49:
55:3c:64:5e:72:8e:6f:2c:16:57:6e:4b:2d:5f:c6:
54:a2:91:f5:d0:67:05:02:95:7c:73:bf:6f:8b:ea:
2b:54:d3:a6:b1:88:be:50:32:19:f8:b7:9f:38:0f:
a0:94:c4:fe:7c:05:c4:52:c5:e7:0f:23:18:3f:59:
d2:13:55:3d:29:3e:ab:c8:90:4e:65:bc:a5:82:6b:
bf:5f:9e:b6:e6:7d:42:32:e3:59:bd:59:4b:80:8a:
91:f6:09:29:54:04:c7:08:44:7b:79:c9:f9:ae:46:
ff:4a:81:50:d8:01:7e:9e:62:db:e3:1f:20:56:61:
d4:52:c6:2d:9f:35:32:fc:c7:83:4b:49:dc:c0:3c:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:17:B4:23:F7:70:83:33:D9:35:09:54:CC:25:C4:32:4F:13:B4:BC
X509v3 Authority Key Identifier:
keyid:F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:31:bf:f5:4d:64:89:98:d9:11:33:1a:6c:fa:99:35:ae:96:
e9:ec:c2:c8:42:2f:a8:94:c6:e9:72:be:ac:17:90:ce:2c:41:
65:c2:d6:e0:50:bf:c2:ca:fd:c4:00:12:92:09:3b:b4:11:dd:
b2:d0:f0:e1:73:d3:2e:da:43:4d:b7:c2:2e:44:a1:46:c8:4e:
f1:bc:2b:c7:47:8c:d3:cf:20:a5:fc:54:b7:d5:28:88:6f:99:
61:db:5e:aa:96:6d:c4:fe:86:b8:cf:3b:5f:11:e4:9c:80:59:
46:44:15:14:6d:d3:aa:26:3f:b2:45:e5:5b:2a:0f:88:85:fe:
22:38:37:91:30:45:5b:70:20:8f:6c:3c:3f:33:30:51:fe:a6:
09:20:ae:94:ed:c9:2b:63:87:52:af:25:c6:7f:d0:e4:53:a9:
08:8d:fc:ee:b7:96:41:b2:d5:c7:64:44:03:db:5d:98:01:55:
13:e5:5e:f9:7c:b7:46:71:01:2d:16:d6:2b:cf:c2:e2:d1:50:
05:a9:51:8f:fe:a2:77:d3:66:71:7e:6f:c5:a2:17:fc:bd:77:
71:80:87:ed:e0:e1:27:d6:64:9c:8a:04:7c:8f:17:13:4c:3a:
80:12:30:f8:6f:a9:b1:b6:59:fd:3d:0a:c8:b0:cc:83:05:e6:
c5:97:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:42:17 2026 by rpki-client