Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
File: 8vigqhrtc_X7GDLsors1WkMrwDY.mft (raw, json)
Hash identifier: mlH1rNEmQgf7JDFubXBaRjKefOO+G7AcgIzuPFdyk8I=
Subject key identifier: F1:D8:A3:42:46:F6:BA:1C:8A:35:63:3C:A0:F0:4C:49:0A:8C:08:93
Authority key identifier: F2:F8:A0:AA:1A:ED:73:F5:FB:18:32:EC:A2:BB:35:5A:43:2B:C0:36
Certificate issuer: /CN=f2f8a0aa1aed73f5fb1832eca2bb355a432bc036
Certificate serial: 01A03F3BA40F6A3A68EA9B1EF7B12CE2EED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vigqhrtc_X7GDLsors1WkMrwDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:01:08 +0000
Manifest this update: Wed 26 Aug 2026 18:01:08 +0000
Manifest next update: Thu 27 Aug 2026 18:01:08 +0000
Files and hashes: 1: 8vigqhrtc_X7GDLsors1WkMrwDY.crl (hash: VDMAL+I+XHT/sww3HPC9Ss/aw0nA4Fb0cTQMzAQ6naI=)
2: h7--AovqPGK6NLh-jG9R8rSxBs0.roa (hash: UmwnctJBFA+ypMazpzLAxiY2TTny72pG2Vuqupg1Exg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vigqhrtc_X7GDLsors1WkMrwDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:a4:0f:6a:3a:68:ea:9b:1e:f7:b1:2c:e2:ee:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f8a0aa1aed73f5fb1832eca2bb355a432bc036
Validity
Not Before: Aug 26 18:01:08 2026 GMT
Not After : Aug 27 18:01:08 2026 GMT
Subject: CN=f1d8a34246f6ba1c8a35633ca0f04c490a8c0893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:85:eb:b8:2e:4d:cc:19:6c:f8:60:65:8b:
c2:d3:8e:6a:af:25:82:14:6a:6b:05:79:f7:a2:3a:
31:c2:1d:74:d5:0e:91:ed:ea:87:dc:e2:75:c6:71:
b8:39:f8:1a:a6:06:86:48:b6:93:63:af:54:c9:1b:
fa:78:a6:65:17:df:c0:bc:1c:12:b2:2b:8a:7c:bf:
dd:85:6c:da:0e:c0:c3:22:93:53:da:7f:7f:ff:63:
bc:86:54:d3:b5:26:12:b1:5c:be:b9:c2:93:cd:cf:
8d:db:db:04:8f:34:9b:b4:22:45:fa:7b:7d:2c:57:
b7:cf:f8:de:74:32:11:db:14:54:c4:93:e9:c2:0c:
d2:13:f0:40:25:51:4c:45:21:32:e4:0f:d0:d9:9c:
30:cb:d4:43:d8:76:95:bd:83:0d:97:4e:77:e5:cd:
8b:a2:c2:88:81:e8:03:ba:72:ff:af:55:c6:b9:c4:
3c:aa:83:67:7f:31:6f:ee:ae:3f:5f:2f:bd:f7:d4:
da:ea:6f:3b:cb:d5:bc:90:1f:b9:a3:22:30:ad:c1:
ae:68:86:0f:14:18:20:1e:1b:f0:93:4c:8e:c5:ad:
3b:a2:74:92:b3:fb:2f:02:03:8d:0c:0d:d1:0f:8b:
0a:52:ae:9c:10:55:7a:5c:60:93:a8:dd:62:59:d5:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D8:A3:42:46:F6:BA:1C:8A:35:63:3C:A0:F0:4C:49:0A:8C:08:93
X509v3 Authority Key Identifier:
keyid:F2:F8:A0:AA:1A:ED:73:F5:FB:18:32:EC:A2:BB:35:5A:43:2B:C0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vigqhrtc_X7GDLsors1WkMrwDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4f:36:42:c1:26:1b:51:17:5b:16:6e:af:ab:42:93:5d:e8:
00:09:16:0c:e0:2d:db:cf:7d:e5:8f:ac:e7:2b:e5:cb:1f:18:
fa:5c:74:1d:fd:60:d4:a9:07:1a:16:28:91:25:86:4a:50:05:
18:65:6a:1f:9f:33:72:b9:a8:07:34:2a:9a:f0:06:b3:9c:c5:
d8:ed:19:e4:ce:54:4a:0b:32:df:d8:57:a5:ad:46:ce:05:1b:
fa:15:96:f6:26:0f:89:1e:f2:ea:bb:5c:f7:e1:f4:95:bc:59:
ea:0e:e7:f0:75:4e:f0:33:12:60:f8:d7:47:4a:3a:bd:2f:87:
2e:60:6d:63:ba:95:a8:44:d4:d3:a6:1f:e3:5d:fd:f1:34:97:
a0:c9:ba:9f:d9:52:64:0e:a9:4a:30:6b:05:cb:2a:2a:b6:ce:
92:4f:7b:5c:20:c0:0d:c1:53:55:b4:0f:6f:6d:e7:cd:8f:fa:
33:3c:8d:45:21:a3:d8:96:82:e0:f8:5c:03:a9:45:a9:b2:30:
49:82:3e:63:35:69:11:fc:3b:a1:d6:8a:69:9a:f6:f3:51:c8:
c3:4e:de:2d:91:67:a0:ec:3c:05:ad:ce:5c:b4:3b:ae:c9:f3:
5a:1e:5b:7b:1e:91:00:11:a3:de:d4:92:de:9f:d3:da:06:58:
42:da:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:45 2026 by rpki-client