Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: cBx/K59S00yzYjKwUXnkgqDx8CY+bOc0P7/mdD096BI=
Subject key identifier: E1:B1:BE:38:E1:04:3A:66:EF:C1:04:D4:56:C6:A2:9B:40:A7:33:8A
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 01A1803D0E40F9EF53C69DA58CFF2D277CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 0DB9
Signing time: Wed 28 Oct 2026 02:00:47 +0000
Manifest this update: Wed 28 Oct 2026 02:00:47 +0000
Manifest next update: Thu 29 Oct 2026 02:00:47 +0000
Files and hashes: 1: dOj9E6FS6DEoaUcEFe4gpHgcFuo.roa (hash: dnfO9626LH91ChjEi8apYPGETS9gQAIqmrEgki3RmE4=)
2: s8k12EMWos9WpllXttebevgRpwc.crl (hash: NKKgxYa1Ao6ANThNZopEVXnCq+a+dMEEjgNPfROMI8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:0e:40:f9:ef:53:c6:9d:a5:8c:ff:2d:27:7c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Oct 28 02:00:47 2026 GMT
Not After : Oct 29 02:00:47 2026 GMT
Subject: CN=e1b1be38e1043a66efc104d456c6a29b40a7338a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:68:9f:f7:f9:4d:00:c1:3c:c2:ce:86:be:
bb:91:7d:43:9d:65:c2:00:64:8d:66:5d:2d:ad:e7:
fc:06:05:c7:85:33:8d:5b:5e:26:3b:24:c5:93:17:
9f:29:f2:56:d2:41:2a:ce:8d:09:fc:49:70:c5:33:
23:10:dc:08:0b:ae:ae:c4:6c:26:b4:13:ce:13:a1:
ce:3a:fd:33:a5:3a:5d:9f:51:cd:85:5a:e2:13:d0:
05:4f:04:2c:58:f3:63:94:5e:ca:15:82:12:47:c4:
ec:b2:47:01:90:22:26:22:35:9c:9d:30:26:e2:fa:
42:e5:88:e1:c2:0a:aa:37:e9:a9:d5:c3:69:7f:de:
ce:82:ca:b9:cd:58:7c:c5:eb:26:f4:e2:2a:13:6e:
1f:e3:05:8e:5b:22:4b:42:08:88:d0:e1:75:6b:4b:
b5:fb:e8:16:41:fb:4f:bc:5f:32:77:53:48:fc:4b:
2e:e5:12:73:02:44:8b:db:1b:66:bc:7f:91:3a:43:
39:67:3a:91:7b:a9:9e:3c:c5:92:32:67:ed:c0:d3:
39:f1:51:66:b3:61:4f:fb:df:fa:7b:e5:91:48:dd:
cc:0f:ee:4f:b8:83:9b:3d:d1:67:13:a7:d3:9d:a9:
7f:0f:67:94:7c:a9:15:59:e3:bf:b9:3b:49:ef:2f:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B1:BE:38:E1:04:3A:66:EF:C1:04:D4:56:C6:A2:9B:40:A7:33:8A
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:78:e7:76:ba:e6:1d:38:bb:ea:ed:a6:57:0d:33:9e:b6:2f:
91:f1:1a:2a:77:53:b0:82:8c:eb:c8:22:fb:41:20:23:f2:b0:
f1:1e:77:4d:e7:a7:da:15:70:ea:2e:07:e0:12:d8:5e:03:1e:
39:3a:0c:d1:7e:8f:54:6e:20:dc:dd:63:31:d2:e5:45:c3:db:
1c:2b:a9:9e:02:0f:67:1f:d3:29:85:03:df:22:af:73:aa:17:
14:21:fa:d9:e1:c0:53:aa:4d:bb:22:4b:39:57:d2:43:69:80:
17:92:1e:b3:47:3a:24:ab:7d:20:10:c4:f9:25:1a:05:fb:47:
84:88:e1:72:9c:dc:74:c8:a1:a5:fc:e2:3e:81:ed:46:cd:4d:
5c:9e:90:aa:dd:1e:ed:1b:7c:7f:02:44:ed:b5:62:96:c2:8e:
ef:3b:a7:be:24:a0:2b:fe:78:f4:e6:85:09:30:fe:5c:8e:38:
57:bd:3c:b0:5b:a0:0b:37:77:02:f2:7f:f2:87:f8:8b:50:97:
2d:2a:0a:24:ab:ec:41:c1:77:c4:9a:f6:63:54:39:9c:aa:5d:
65:6d:fa:a4:e2:c4:61:50:35:89:16:80:a6:b2:99:3b:1c:a9:
61:09:80:63:42:f1:ab:5d:80:4d:f7:36:18:a7:03:4c:13:45:
a2:cd:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:53 2026 by rpki-client