Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: 38rYAQD0Pr9x4G9eJMNaoT5iLiAlzGX7sJFRW9xRr8M=
Subject key identifier: 4A:3F:D6:2E:D4:60:64:8B:4D:FC:C2:A3:99:C3:FD:F8:E0:89:47:18
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 01A0024AB10313E11903FB470A7AEE8C09AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 0A02
Signing time: Fri 14 Aug 2026 22:00:44 +0000
Manifest this update: Fri 14 Aug 2026 22:00:44 +0000
Manifest next update: Sat 15 Aug 2026 22:00:44 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: ewCXqzni/awSDgF2UR/Fgheo375c5CA1C942EUfcg60=)
2: CJhFdSugh2xrtXcQtigps8wHu28.roa (hash: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:b1:03:13:e1:19:03:fb:47:0a:7a:ee:8c:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Aug 14 22:00:44 2026 GMT
Not After : Aug 15 22:00:44 2026 GMT
Subject: CN=4a3fd62ed460648b4dfcc2a399c3fdf8e0894718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:8b:8a:3c:23:0a:57:9b:45:0a:dd:5b:e0:
b2:3f:8f:c0:f7:57:57:8e:30:4d:da:0a:0d:df:bd:
cc:c0:b6:28:30:c6:aa:74:7a:d2:5d:3e:be:d5:7d:
30:36:ce:20:c7:77:9d:ce:e9:c4:4d:d4:ec:06:55:
f1:2f:b6:f7:fc:19:f4:b5:9f:c7:19:11:9c:65:33:
50:07:bc:2f:01:18:10:31:95:32:e5:33:dd:d0:b0:
0d:74:1a:d1:1e:00:9d:5a:b6:0f:97:27:f3:11:06:
b9:da:32:3d:dd:49:10:e0:ee:79:70:ed:51:45:56:
c2:af:1a:8c:c2:36:66:14:61:86:71:a5:11:80:72:
bf:6f:6a:e9:ab:39:dd:92:ee:43:8b:7d:c6:75:45:
1f:22:2f:a8:03:51:1d:b9:59:42:83:ad:60:16:be:
8e:b8:cf:89:e8:2e:bf:a7:3a:14:7f:73:89:b8:af:
c4:f7:c5:6b:f8:6c:ac:b0:2f:50:c3:f2:61:d6:d7:
d3:e1:41:f2:38:49:eb:63:8a:86:ac:38:3e:53:4f:
b0:25:eb:52:77:24:fe:53:31:c6:21:11:fd:b7:b6:
d4:d6:e2:c2:aa:b7:68:aa:25:fa:1a:06:5c:6c:8c:
14:60:23:f7:7d:69:e8:89:f5:4d:84:b4:0e:f7:86:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:D6:2E:D4:60:64:8B:4D:FC:C2:A3:99:C3:FD:F8:E0:89:47:18
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dc:75:87:40:c5:f9:5e:b5:0a:da:57:e6:cc:e9:9c:b4:1e:
4f:7c:f4:d5:73:1e:78:5b:75:32:e3:59:0b:d0:c7:3d:cb:6c:
ad:58:a5:bf:d5:f9:99:29:43:6f:1b:d5:fe:37:99:e8:8a:ad:
85:af:94:7d:ef:e6:56:a7:c9:88:c3:ba:24:1f:32:4a:91:9a:
84:88:fd:8b:57:c8:2d:4e:3f:40:96:cf:75:76:85:19:aa:af:
fb:ce:d8:16:f2:15:35:cd:23:b1:24:81:84:d8:ef:3c:86:06:
4f:5c:15:d9:61:52:d1:3c:a7:2c:29:08:bb:96:f7:78:92:f1:
59:03:8e:49:0b:21:f0:4e:5d:a5:ea:9e:93:73:79:3b:f0:36:
07:b7:42:a8:c3:88:e5:13:5c:18:f9:43:d4:3a:bc:a5:33:07:
f0:1d:71:13:ad:fb:1c:d3:d5:41:74:a5:68:83:5b:f0:87:38:
a7:e8:bc:1f:ab:d2:c7:c5:26:01:66:03:b9:c1:2e:f5:78:6b:
88:ca:8e:3a:ab:e3:e0:b2:d1:34:9b:b6:d2:3a:94:ef:d5:1f:
e2:6a:9d:45:a5:a6:5c:0a:57:a3:51:49:08:d8:0e:c5:0a:2a:
65:41:50:e8:92:a6:5f:b3:f2:07:f1:95:92:ab:bd:08:22:45:
c9:df:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:04 2026 by rpki-client