Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: okJZ0QhIXFjhUoqtsQm+RcZPd56LFSdS8umiFdKaxfM=
Subject key identifier: C0:05:18:A8:53:E0:0C:98:D3:2B:C3:15:19:EC:1B:8C:13:7F:B5:DC
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 01A13F02C78A6CE1BDC1D2ACBB885510E0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 0A25
Signing time: Thu 15 Oct 2026 10:01:49 +0000
Manifest this update: Thu 15 Oct 2026 10:01:49 +0000
Manifest next update: Fri 16 Oct 2026 10:01:49 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: NljURr/XS55uKrJx9mPrSOTbvyqhzJrEdMEYNthWMbQ=)
2: RG6yqiKkRhz8lYMy2eaNN51T1FA.roa (hash: lUsy6MxM/FnhLx9vJglsPl+zWcJ7Y2MIMoaSU4GgA5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:c7:8a:6c:e1:bd:c1:d2:ac:bb:88:55:10:e0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: Oct 15 10:01:49 2026 GMT
Not After : Oct 16 10:01:49 2026 GMT
Subject: CN=c00518a853e00c98d32bc31519ec1b8c137fb5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:b8:b4:0b:62:a3:22:72:00:03:fe:f4:cf:
b3:30:87:9c:e5:04:57:da:a7:e4:1e:15:77:c0:a2:
8c:3d:76:63:8a:a7:2d:c5:03:da:19:ba:6d:e6:71:
68:0a:e5:42:a5:c9:69:ea:35:86:42:30:f2:07:4f:
d1:97:86:1b:8c:77:60:41:4e:97:39:4e:d9:ef:9d:
5d:3a:be:9c:20:ac:1d:b8:36:f6:2b:f1:1f:2d:96:
4f:c7:e5:52:7b:51:0a:e0:7a:b0:2e:8c:88:54:bd:
13:ba:ba:04:52:ec:50:c4:81:ee:08:cc:f5:6e:3a:
77:68:8d:66:82:6d:2b:20:6c:10:e8:81:cb:7c:c5:
70:d8:92:eb:ae:4a:0b:ad:2e:80:34:3b:12:81:79:
50:70:54:c6:8f:2c:a0:9d:65:82:f0:96:e0:54:d5:
c6:51:51:8e:bd:d4:83:1d:a6:03:9c:e4:0b:6b:c3:
93:49:be:5b:63:64:48:9a:18:0e:2c:51:46:61:54:
70:3c:be:97:c1:40:e5:75:38:ec:9b:79:52:4a:82:
39:03:18:76:12:90:27:9e:93:96:6f:25:9f:3b:61:
ee:ae:42:30:17:ce:6f:13:9e:0c:72:a4:05:8b:27:
7e:21:ab:40:52:4e:00:5c:26:e2:7d:09:dd:59:b2:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:18:A8:53:E0:0C:98:D3:2B:C3:15:19:EC:1B:8C:13:7F:B5:DC
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:9a:5b:ec:4c:5b:21:7b:8b:f5:4d:59:e0:ce:aa:0a:24:
1e:dc:5c:d9:5d:e1:a0:06:ef:91:87:9c:e2:5d:f0:8c:de:b6:
b1:40:43:24:cc:11:c2:ff:59:bc:77:78:ed:58:3b:75:3d:1d:
e6:2c:12:be:63:ac:ee:a8:fe:b2:90:b7:81:e5:99:37:86:57:
90:4f:f8:54:a4:c6:26:69:ce:81:53:84:14:09:54:d6:50:19:
61:31:99:50:47:a5:8b:58:ec:36:82:db:da:ad:b7:b6:02:f3:
8e:d8:3e:3c:1e:a9:aa:00:e7:76:8d:27:e4:fa:8b:22:84:40:
88:0f:b8:c9:0d:b6:89:a1:64:3e:a0:15:6b:be:fb:b3:ea:ff:
59:4a:fa:8c:30:20:13:d9:75:71:a5:65:68:6d:ec:4f:3b:39:
1b:dd:4d:8f:c7:ed:2c:35:c8:92:59:ce:b5:14:f2:c6:6c:65:
d9:8d:81:db:c8:2b:67:99:df:c4:89:44:9c:8f:07:9a:7c:95:
e4:c7:c0:6c:7b:31:4e:2a:14:55:e5:15:7d:93:49:6e:f3:0c:
04:d2:66:47:c1:fd:c6:d9:60:c2:c8:48:51:97:74:c2:88:81:
e6:b6:1c:af:06:dc:30:9f:9d:47:c2:30:f0:bd:51:b7:17:42:
72:e7:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:24:49 2026 by rpki-client