Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: tQUAkQ5C2IWHiVsuI+Wl6sM/FNA0pfxBjYvUnvLILV8=
Subject key identifier: 97:D9:D5:D0:0E:25:51:B9:AA:10:ED:BD:C4:3D:21:7E:80:94:CF:0E
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 01A129FB0D26E2C0381DF757946508FCD59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0C19
Signing time: Sun 11 Oct 2026 08:01:21 +0000
Manifest this update: Sun 11 Oct 2026 08:01:21 +0000
Manifest next update: Mon 12 Oct 2026 08:01:21 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: 0PfWFrRr9W0bb+Zm5RKQi6UblfLnYoCUyQmC69oUywY=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fb:0d:26:e2:c0:38:1d:f7:57:94:65:08:fc:d5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Oct 11 08:01:21 2026 GMT
Not After : Oct 12 08:01:21 2026 GMT
Subject: CN=97d9d5d00e2551b9aa10edbdc43d217e8094cf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:e5:33:c4:7c:ab:07:90:c6:bb:3a:64:b9:
7b:d5:a1:79:4a:53:4f:6b:4b:a2:a0:45:23:8a:6e:
d5:3a:fc:7a:71:85:7e:f9:f0:13:c4:05:4b:fb:c8:
f2:56:aa:80:d4:e4:2d:68:fc:c3:36:59:e6:c2:03:
43:15:7b:eb:8c:15:31:ab:04:7e:70:52:56:38:9a:
84:e7:a2:a6:ce:22:ed:af:71:bf:f3:9e:9f:fd:27:
b4:2b:ca:6d:19:d2:cd:63:35:11:9b:4d:13:60:5c:
f4:86:d3:89:2d:77:c5:6f:72:da:69:b2:22:da:f7:
4a:23:e9:10:b0:6a:8c:5e:30:3c:a9:dc:ff:22:ff:
09:15:1b:33:0e:ee:08:9b:b5:be:97:1b:7f:a5:0f:
3d:76:ea:05:60:b0:33:73:1a:1b:fb:55:3f:58:36:
7c:23:6c:e0:9a:fb:a5:3c:0e:9e:43:21:5d:f6:74:
4a:ec:59:54:71:76:0e:d5:98:47:53:72:ac:11:c6:
9c:10:98:f7:84:cd:0b:36:d9:39:f8:d2:99:91:84:
9f:64:da:9e:56:d8:1a:9f:3d:66:7c:bf:e8:39:3c:
35:24:e0:5f:20:c2:b7:4f:e6:71:f7:7c:8d:8b:3c:
ed:dc:57:35:fe:58:6b:fc:75:c9:29:b5:5e:08:ed:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D9:D5:D0:0E:25:51:B9:AA:10:ED:BD:C4:3D:21:7E:80:94:CF:0E
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:47:c4:b0:aa:d9:c8:24:b0:2f:c2:31:4c:98:62:8f:a9:18:
8d:1b:5a:4c:3e:5b:92:9c:b1:d0:17:32:38:c0:e9:89:2a:e7:
41:16:52:1b:41:65:3e:09:df:58:eb:ac:ba:24:70:c6:52:05:
63:cf:d1:61:e5:c9:c2:bd:1c:3b:11:62:5d:76:84:37:84:fa:
60:6f:c7:d1:54:ea:f1:4b:b1:36:8e:57:e6:73:f7:34:99:51:
40:67:ea:81:66:62:91:e3:1c:ff:8d:95:48:87:85:8e:21:03:
cc:23:ab:4e:ec:76:81:c9:b1:54:51:9b:34:e5:29:1b:a0:1c:
7c:fe:f9:45:b2:9c:78:2b:37:69:e6:fb:40:b5:65:5c:70:8a:
1e:13:f2:4c:8e:bd:c3:c5:e6:3a:63:16:69:20:83:0d:4a:aa:
45:f2:02:e6:21:a7:8a:7e:8b:55:71:2d:1f:92:08:20:c7:a9:
96:cf:b1:6b:e5:24:9b:08:9f:53:33:42:f5:4f:b1:d4:fa:c8:
ae:c3:68:d7:94:3a:49:78:b1:cb:c3:be:a3:5f:71:2c:6e:4a:
19:96:39:fb:b8:6d:9b:35:29:73:f4:f6:c6:0e:47:42:24:6f:
8d:fb:2d:59:43:40:64:bb:c8:8f:b7:6e:09:45:41:a8:f3:1c:
e6:04:eb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:58:49 2026 by rpki-client