Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: 8EAI1QBmriV2KD6RrMBUnWtyzsWuEgQR5dKAIhZynDw=
Subject key identifier: 5B:0E:70:EF:33:75:F6:C4:46:46:EC:08:3E:CF:64:60:7E:7F:90:51
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 01A1822B580A06EF62462F8B0C2F47449E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 0DBA
Signing time: Wed 28 Oct 2026 11:00:40 +0000
Manifest this update: Wed 28 Oct 2026 11:00:40 +0000
Manifest next update: Thu 29 Oct 2026 11:00:40 +0000
Files and hashes: 1: dOj9E6FS6DEoaUcEFe4gpHgcFuo.roa (hash: dnfO9626LH91ChjEi8apYPGETS9gQAIqmrEgki3RmE4=)
2: s8k12EMWos9WpllXttebevgRpwc.crl (hash: fafbzJ+MfHF4KjIiwtWrJxRX8drBw26P5ppIBcVDYSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:58:0a:06:ef:62:46:2f:8b:0c:2f:47:44:9e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Oct 28 11:00:40 2026 GMT
Not After : Oct 29 11:00:40 2026 GMT
Subject: CN=5b0e70ef3375f6c44646ec083ecf64607e7f9051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:b7:8b:31:41:51:54:d5:33:86:89:16:80:
df:74:a5:ee:55:de:8f:ab:8a:f4:c3:db:a1:96:eb:
f4:97:88:85:25:5e:e7:28:11:32:7b:62:56:67:ed:
63:26:3b:6d:fe:87:1b:8b:12:41:22:14:ca:51:71:
d4:02:1b:91:a3:50:ff:1e:fc:80:a4:3b:d5:58:80:
5d:ba:21:20:6c:4e:54:cc:3d:08:20:1a:82:de:d0:
74:7a:db:eb:9a:e3:73:43:96:19:99:06:e8:7d:d9:
ed:62:81:83:cd:db:a6:b8:b4:17:64:64:ca:04:80:
ee:77:b8:8f:26:b3:9e:87:01:26:77:64:82:73:14:
a9:13:03:03:33:f7:71:7a:ca:69:0c:57:66:4d:ea:
c7:f9:50:c0:83:1b:5a:3d:ba:1b:13:97:24:3c:ee:
8a:4c:5f:6a:22:8a:f5:e6:84:e8:2e:ab:68:f1:59:
7b:91:48:1e:43:57:c2:e6:6a:5c:36:86:5d:d3:0d:
43:4a:e3:87:4c:7f:07:9d:0b:64:cc:df:8f:22:cd:
14:05:2a:c6:e2:46:09:11:9c:0c:13:f3:26:b0:34:
27:67:a1:be:60:3a:26:1a:94:58:38:49:60:1c:c2:
1a:42:af:d3:cf:b9:3d:96:4a:77:50:82:f7:bf:7f:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0E:70:EF:33:75:F6:C4:46:46:EC:08:3E:CF:64:60:7E:7F:90:51
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:09:ce:e3:7c:0b:62:40:c5:d8:f4:e2:c4:95:39:2a:d4:
ac:6d:39:0b:21:18:3c:79:4b:0c:a9:cc:a1:9d:ab:19:bc:53:
bd:90:b6:a0:e7:e0:12:0b:2c:58:ef:a9:39:8a:88:ca:e6:f8:
b3:4a:f6:04:eb:92:c1:a4:af:f3:e2:ab:b5:76:43:3e:40:84:
2e:2d:34:fb:0b:7e:cb:2a:3b:3d:7a:1c:68:39:54:79:6d:c4:
06:22:e0:fc:7b:7d:dc:01:c4:d0:0c:e7:48:78:42:cf:e6:1b:
67:03:e3:45:2f:ee:dd:c1:93:5e:31:85:cc:60:5e:b5:2e:2e:
31:d6:01:81:d9:67:2d:8e:b9:9a:5e:e5:f1:74:25:49:d8:57:
b9:d5:1d:92:7a:f9:31:96:75:12:e6:94:56:a1:1d:cb:02:d6:
02:b8:27:07:9a:a0:c8:3a:4e:f3:40:70:94:13:be:94:41:e4:
34:d4:1b:c4:af:37:bc:bc:c8:f0:e7:57:f1:db:d5:35:d8:3c:
f9:4b:08:e4:49:4b:c6:f7:61:29:7a:ed:79:f3:fb:03:a2:14:
da:a6:86:f7:77:c2:d9:e2:ed:26:2c:d8:22:ea:1b:2e:4f:e4:
86:39:81:4a:08:4d:42:48:c2:56:63:fd:9b:a7:bb:60:0e:9c:
65:b3:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:09:49 2026 by rpki-client