Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: GhEV3+hHk8UuIzjreozfLN086slDfatFJesKXnvRoj0=
Subject key identifier: 8F:85:27:F5:E9:B0:55:33:5D:25:03:F4:72:EA:04:77:B0:AF:F0:B0
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 01A0016F7FC1EE841C33C828DEDDCE9F0DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 16F9
Signing time: Fri 14 Aug 2026 18:01:19 +0000
Manifest this update: Fri 14 Aug 2026 18:01:19 +0000
Manifest next update: Sat 15 Aug 2026 18:01:19 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: HyTVNwJfHU7Z4tXonXkXaJ2SJm+jWPcT0vkNVFodxXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:7f:c1:ee:84:1c:33:c8:28:de:dd:ce:9f:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Aug 14 18:01:19 2026 GMT
Not After : Aug 15 18:01:19 2026 GMT
Subject: CN=8f8527f5e9b055335d2503f472ea0477b0aff0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:0e:3f:12:b6:ce:97:a6:18:44:99:25:91:
f0:d4:77:79:f3:ba:69:a4:9d:26:b9:ff:a6:ec:21:
93:15:ae:9f:13:93:68:48:cb:7c:82:cc:8d:35:d2:
df:4c:93:33:b8:a5:17:8a:6a:90:01:e6:96:90:90:
0a:51:1f:0f:fd:4b:d4:1a:e7:1f:eb:66:a8:83:25:
fa:d2:4e:85:98:b0:93:1b:81:54:7a:7a:c8:be:0e:
83:d0:70:d5:bb:53:6d:90:81:ed:7b:26:3b:b6:bd:
1d:47:c4:28:eb:17:c2:09:7f:80:39:5b:65:31:7b:
62:4e:d2:06:88:37:92:76:7b:36:da:26:84:88:06:
71:6b:d1:25:b8:95:bd:65:b7:fd:bf:98:6d:d3:8e:
6c:f8:c1:84:10:31:9b:71:29:3b:07:1e:03:cc:d9:
60:1a:0f:1a:03:85:59:0f:49:79:d6:f4:e5:c0:df:
35:1a:81:7e:70:20:83:3e:43:c7:d7:3e:a2:32:ca:
ae:47:a8:20:58:fd:d3:1d:0b:63:46:68:ba:17:87:
cf:ee:15:12:fb:98:c3:d3:84:8a:b6:36:17:30:63:
b6:eb:39:0f:c6:14:e1:f4:cf:ee:80:11:a5:a5:ee:
08:9d:21:2f:e8:c4:b8:ba:2d:43:72:b2:cb:1b:2e:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:85:27:F5:E9:B0:55:33:5D:25:03:F4:72:EA:04:77:B0:AF:F0:B0
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:42:03:d2:34:c2:98:2d:8b:e9:89:2c:44:19:74:b1:7c:ea:
16:cd:1e:c6:b0:e2:43:35:54:b8:d0:18:e9:d9:23:e8:31:62:
36:99:dc:ae:98:99:77:82:41:cf:2b:b7:48:9e:84:9c:49:be:
53:3f:6b:6a:d5:45:ec:6d:c4:06:cc:a9:2d:57:9e:5a:c3:80:
12:05:ce:d8:f0:32:82:43:e3:f3:1b:85:83:11:c2:19:4a:59:
f4:5f:5c:b4:57:c9:d3:b0:a1:28:c6:ab:e7:d5:94:85:22:01:
34:cb:dd:66:c4:7e:d3:af:90:c3:f6:78:f7:f1:38:90:5d:e3:
f2:3e:0e:9a:11:e8:36:ae:9f:97:ca:e6:06:db:8b:45:ab:f7:
32:db:64:08:6e:6c:10:46:0c:08:80:fa:71:de:df:fb:14:29:
8d:38:c7:6b:b0:fa:b7:8b:08:6e:db:78:b6:e4:68:49:d3:4a:
1f:f6:20:a8:2e:3d:1a:c4:f6:45:81:e2:3a:16:bb:95:23:d3:
a9:13:b7:0c:42:e2:fe:80:d7:a3:62:33:64:8b:50:5d:c3:6e:
f4:c9:c4:53:a0:80:cd:5b:ab:f1:a4:9b:cb:18:f3:dc:67:f7:
33:6e:34:d3:ce:8c:47:df:58:cf:70:6c:4d:dd:58:a6:f6:0a:
ae:65:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:55 2026 by rpki-client