Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: P4IViwGYGOAzUPC5m0gSGjbcJ7BCaFCZJab2hpyFRRc=
Subject key identifier: 60:C5:D3:CC:E2:5B:CE:87:45:A7:C2:EA:61:FB:44:15:6B:20:A8:7E
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 01A000937DAFA474CEBB46FE87D47E94F7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 105C
Signing time: Fri 14 Aug 2026 14:01:00 +0000
Manifest this update: Fri 14 Aug 2026 14:01:00 +0000
Manifest next update: Sat 15 Aug 2026 14:01:00 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: fvezyftjnhfwK5Suz4vyLLp91Win6WtAykblhbgM8Hg=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:7d:af:a4:74:ce:bb:46:fe:87:d4:7e:94:f7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Aug 14 14:01:00 2026 GMT
Not After : Aug 15 14:01:00 2026 GMT
Subject: CN=60c5d3cce25bce8745a7c2ea61fb44156b20a87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:42:fb:43:1e:9d:f0:e0:67:8a:3f:1c:db:
18:e3:71:f1:76:84:19:ad:49:7a:01:24:f3:36:63:
38:f6:d7:f1:6c:d1:00:50:54:9d:a7:5b:96:0e:bd:
07:f8:32:56:68:5d:82:12:ab:c9:0a:01:df:a8:8e:
ba:e8:2d:20:d8:6c:c5:24:bc:ba:a8:d3:7e:ba:ac:
4f:67:62:c2:84:85:88:2c:fd:9b:56:e8:61:20:64:
a3:aa:0c:bc:74:96:1a:11:9b:4f:d1:96:19:6d:be:
6f:6d:18:90:60:1f:4e:88:30:26:54:c9:21:d5:ff:
86:b5:20:18:f0:5d:03:93:c6:c6:87:70:67:43:81:
bb:b6:a9:a1:ce:29:3d:51:18:85:92:f7:64:94:e0:
fa:4d:e8:90:7d:93:0f:88:7d:24:3e:e9:89:6f:9b:
bc:be:b4:f5:26:db:c9:5c:b8:f9:2d:45:2f:1f:f9:
10:88:d1:71:55:d3:fe:30:36:70:01:49:26:c4:81:
25:d2:b6:d6:2b:c7:31:55:01:6b:12:b9:12:88:6d:
5d:d3:85:b4:60:e1:8c:c6:66:47:2d:5d:09:f7:11:
5b:2a:3b:7b:f0:33:f5:20:63:5c:a0:74:bc:1a:59:
82:28:a5:ac:ed:90:fa:01:f2:04:f0:c9:05:b7:31:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C5:D3:CC:E2:5B:CE:87:45:A7:C2:EA:61:FB:44:15:6B:20:A8:7E
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b9:52:50:cd:e7:68:23:ee:48:1a:43:ae:5e:d4:2d:81:07:
bb:a8:0a:cd:d9:34:42:f8:c0:04:93:64:a3:e8:fd:65:57:a1:
66:f6:28:26:85:f0:4e:f7:55:89:6d:7b:02:28:80:ac:42:37:
74:17:97:df:82:68:70:48:1d:d1:11:d3:72:11:0b:b9:1a:c2:
00:3d:d5:3e:f8:31:5b:1b:b1:1e:c3:a3:16:dc:a6:ad:8a:d4:
9e:19:18:65:62:43:8d:7a:0f:97:7e:dd:ee:07:34:9a:31:f1:
20:e3:a0:3a:7e:07:0b:ff:4e:2d:be:f5:a5:77:e8:c2:72:42:
5a:da:b1:d6:63:f9:eb:09:07:3a:fa:db:21:0b:95:70:04:35:
d4:e7:57:ed:89:37:92:ad:87:6f:02:74:5a:24:4e:13:2c:a8:
f2:3a:49:78:13:eb:f7:da:00:09:4a:3e:dd:c4:b1:76:48:0c:
82:84:12:8c:0f:51:d8:8f:f4:04:d8:f2:10:09:ea:19:5d:fa:
4f:14:b0:ef:4c:18:4b:28:86:75:35:08:cc:c7:82:eb:52:c3:
bc:c7:60:c2:c7:0d:5f:3d:f1:66:40:76:40:5f:ad:be:93:7f:
c5:12:e0:df:b3:13:0f:d9:ac:73:e5:12:7a:20:3b:ab:61:03:
f9:c2:45:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:34 2026 by rpki-client