Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: Q06vzbkfDvqFI44fUWEg1dZ/BYg4R8H65/9lx8xYB/M=
Subject key identifier: 86:81:85:94:F2:84:64:94:C7:D6:3F:F0:86:E2:E2:C9:3C:CB:3D:F4
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 01A08AFAB50C9F3D86F56FD1F60BAEDE39AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 1858
Signing time: Thu 10 Sep 2026 11:01:21 +0000
Manifest this update: Thu 10 Sep 2026 11:01:21 +0000
Manifest next update: Fri 11 Sep 2026 11:01:21 +0000
Files and hashes: 1: GSheiqG0sKaOK_fFmZYJC3QfvLo.roa (hash: 5B6cRBlSKlHWSJH0+zxK6L6MtaJyKkMFEXEoN+t2Rxk=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: w8hmGnC7XCXRP66YgGy73GAv4+NjV2NPNKM/LJvJwds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:b5:0c:9f:3d:86:f5:6f:d1:f6:0b:ae:de:39:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Sep 10 11:01:21 2026 GMT
Not After : Sep 11 11:01:21 2026 GMT
Subject: CN=86818594f2846494c7d63ff086e2e2c93ccb3df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:8e:2b:f5:f8:f3:db:27:c7:d4:28:2b:d6:
a7:cc:18:1d:6f:2d:bf:5e:21:c7:a8:45:04:35:f3:
e5:5c:f7:7d:ce:ba:90:09:8f:b9:de:58:ce:6e:ae:
4a:d5:88:f4:c0:0c:a5:79:5b:c5:ee:17:49:ae:b1:
62:23:74:8c:e1:12:9c:4e:32:ab:6e:80:da:c2:aa:
5c:8b:7a:ed:29:18:2f:72:2d:05:15:23:d3:85:47:
e3:22:22:9e:6d:a9:5c:fe:4b:53:bc:92:28:5c:22:
1e:5e:f1:46:dc:e6:0b:2f:2f:47:66:bd:49:4a:21:
97:e2:a6:6a:54:b2:5b:7a:58:34:25:96:cf:23:92:
6f:34:68:17:1f:9d:fd:e9:38:d6:17:5c:79:36:8b:
2d:dd:bc:65:e5:b9:39:b3:bb:2c:c8:c5:d7:b6:7c:
e6:d7:17:95:9e:1b:65:a7:7f:51:0e:7b:ac:e2:d0:
c9:b1:09:5b:18:8a:7b:7f:27:9a:8f:e7:22:a4:ad:
34:94:89:30:08:97:6c:13:8f:77:1b:a2:11:4d:bf:
da:21:ff:a2:47:11:6b:07:f1:51:b4:fa:d3:c6:5b:
15:0b:3e:37:35:a1:47:5e:fe:ef:f5:28:a4:bd:e6:
68:51:8f:c7:e1:d4:0b:3d:6a:03:10:32:f3:cc:ba:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:85:94:F2:84:64:94:C7:D6:3F:F0:86:E2:E2:C9:3C:CB:3D:F4
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d3:b0:e4:c5:68:b6:05:eb:7f:23:3f:b8:77:48:51:70:82:
59:b0:7d:05:53:6f:62:e5:09:83:e0:fd:a7:00:aa:a2:83:30:
55:8e:25:dc:4c:22:bb:8a:8c:c7:0c:4b:cd:6d:87:99:ed:9f:
29:7e:63:8f:e0:f3:9f:64:66:44:93:bc:91:37:d2:79:84:37:
ab:eb:46:a7:75:57:70:1e:ad:2c:92:c9:6b:66:7c:6d:83:80:
48:5e:dc:71:ab:96:55:62:61:51:40:01:ed:44:50:82:6d:44:
50:db:ea:2e:b7:d0:7c:2c:15:48:f5:64:34:fb:af:cb:01:b4:
66:f7:c8:98:77:9b:ee:36:4e:ba:03:2a:aa:c9:3e:df:49:9c:
0c:bc:32:26:51:d1:81:53:8a:80:1f:e7:41:50:db:f1:32:2b:
4e:ff:bc:c4:33:61:fd:e4:c2:7a:79:6a:16:fc:ad:38:70:d5:
14:b8:18:c6:b7:d3:ae:d3:12:3d:fd:a5:90:74:94:99:0a:0d:
26:42:57:2e:e4:6d:8b:a4:f8:4b:c3:f7:38:01:cf:36:5d:7f:
df:98:31:2c:38:6f:8a:c4:5f:0b:8c:0e:63:b9:94:46:b0:ce:
5b:0a:05:ec:44:f3:1f:45:68:c9:ba:1b:56:49:00:03:61:d9:
09:32:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:49 2026 by rpki-client