Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: S1jbR4C8mVnMmKc5yqUGqNPwA7z9CeEuA8+uLCVxLtY=
Subject key identifier: 83:2A:95:E6:F0:6D:AF:3F:6C:2F:B6:EF:8A:DC:35:A6:F8:9D:7B:33
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 01A13F023D7D11D8DD48C8ABF9E0FDD506C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 0AA6
Signing time: Thu 15 Oct 2026 10:01:13 +0000
Manifest this update: Thu 15 Oct 2026 10:01:13 +0000
Manifest next update: Fri 16 Oct 2026 10:01:13 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: ilc5t9i9Ksaz+Z58IugllkEqx7xbvAL3Rbl8TMla0p4=)
2: CJhFdSugh2xrtXcQtigps8wHu28.roa (hash: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:3d:7d:11:d8:dd:48:c8:ab:f9:e0:fd:d5:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Oct 15 10:01:13 2026 GMT
Not After : Oct 16 10:01:13 2026 GMT
Subject: CN=832a95e6f06daf3f6c2fb6ef8adc35a6f89d7b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:6e:24:21:1e:03:4e:80:20:1f:4c:c1:db:
ac:35:94:1f:87:7d:5c:f8:f4:a8:08:4f:1a:fe:ab:
c3:82:e0:e8:0f:e2:8b:2f:70:3c:20:40:fe:a4:43:
8b:82:a4:5e:08:32:32:d5:38:68:1d:06:79:14:b6:
e6:78:d5:09:67:f8:d2:ca:bf:a4:08:a2:4a:51:b6:
e2:56:df:e7:eb:03:c9:a2:2c:2e:77:fa:12:c5:10:
c0:66:46:75:41:87:06:5d:ed:69:8f:f5:15:6e:89:
76:d5:90:e1:74:94:12:05:39:44:05:e7:2b:e0:1c:
98:42:7e:98:1e:04:8c:45:b4:99:55:ec:95:ac:b5:
04:b4:8b:1a:5d:81:44:c4:3c:71:d9:ae:80:5f:22:
68:6d:25:a5:e2:5c:5d:01:fd:36:0e:85:f5:e3:7d:
47:9b:66:cc:c1:01:91:ea:ce:2c:65:d6:b4:5c:55:
04:7f:8a:21:a1:c5:f6:aa:24:02:eb:21:bb:25:7d:
a1:13:a3:64:3f:e7:34:4a:60:a7:62:55:c7:ff:01:
bf:83:fc:e0:85:e5:8d:73:fc:10:93:32:56:bb:59:
82:47:3f:27:3c:8b:dd:21:5a:60:3e:d6:f2:32:13:
3c:1b:3f:26:5e:72:3c:81:48:74:4d:b3:a0:b0:9a:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2A:95:E6:F0:6D:AF:3F:6C:2F:B6:EF:8A:DC:35:A6:F8:9D:7B:33
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:cc:65:fd:03:8b:73:53:6d:96:d7:ef:ab:b3:e8:c5:42:
20:5f:ce:67:9e:b6:cf:08:8a:51:96:b4:04:2d:7b:55:1f:02:
ec:e9:5c:a0:61:1e:5c:b8:39:ec:b6:bd:4b:29:0d:99:ee:00:
f6:67:4f:3b:37:4c:77:85:60:5a:f6:76:5e:a4:0e:0e:ee:ad:
72:90:a9:5e:84:95:b6:87:bc:bd:e7:8e:cb:f2:ee:43:86:98:
54:b4:71:f2:54:0d:31:5b:29:8f:22:4a:d8:5a:5b:11:cf:d1:
ba:5e:b9:07:84:d8:98:ec:47:ad:44:41:9c:4a:11:f7:29:71:
44:ac:88:0b:c7:5b:ea:11:22:df:1d:c5:08:5d:24:d6:49:bf:
68:14:ed:1f:98:2e:b2:52:46:e0:71:8a:35:58:81:e8:bc:dc:
cd:c7:a8:2a:3e:cc:92:a9:7c:d9:3a:37:1c:a8:c4:db:f3:8d:
d8:f3:9b:c6:d7:52:48:10:5c:22:84:7e:6f:98:64:9b:26:9d:
ae:24:7c:3c:45:9b:2c:3d:51:30:8f:8d:9f:2b:e9:a2:4a:07:
22:2b:e7:2b:36:36:a7:e7:a2:f1:e4:69:b8:de:7b:a0:70:69:
15:bd:ea:8b:76:a6:cc:24:a5:ad:57:2e:2d:7d:23:18:8a:d2:
ca:a8:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:23:02 2026 by rpki-client