Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: Ro6YXxDO1Mc93pBQNY5fU3u7B2Y0+0oDgqrxjqp0TLo=
Subject key identifier: 6B:5B:FD:A2:44:01:D7:C7:66:0B:16:A4:19:BA:6C:E4:16:84:10:7D
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 01A08A8CCCB1FF7FB5FB4F209035F5375B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 14AD
Signing time: Thu 10 Sep 2026 09:01:18 +0000
Manifest this update: Thu 10 Sep 2026 09:01:18 +0000
Manifest next update: Fri 11 Sep 2026 09:01:18 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: XD3beDr/j7Y3DHekDRg5GI4ZCAjlfMw/qEmJSP2/nuQ=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:cc:b1:ff:7f:b5:fb:4f:20:90:35:f5:37:5b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Sep 10 09:01:18 2026 GMT
Not After : Sep 11 09:01:18 2026 GMT
Subject: CN=6b5bfda24401d7c7660b16a419ba6ce41684107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:94:43:72:16:79:88:b7:e3:2b:d9:a7:f5:
d9:45:a7:b1:5c:93:c5:c1:18:3c:52:99:09:b9:53:
01:8c:52:8f:c7:b9:79:99:d6:dd:6a:7e:f8:0a:ba:
f0:ac:0f:b3:ec:11:74:a6:42:1d:2f:2c:36:f8:12:
b9:ad:ec:6d:6b:a1:79:87:1d:6b:d3:83:82:fd:13:
76:91:25:6a:67:75:e7:ff:55:53:89:61:ba:97:82:
c7:7a:92:01:c5:0e:dc:00:09:d8:66:8e:7a:66:6f:
87:b4:34:de:9b:e8:1f:21:64:c1:3c:30:33:40:3f:
2b:16:16:30:a7:e9:5f:1f:f9:4a:76:30:1a:e9:0e:
e1:9e:26:31:c3:f2:35:ee:45:50:41:8f:0b:25:b0:
d7:39:b1:ed:84:71:cc:0a:a7:f0:46:4f:3a:47:89:
7a:60:4a:26:ed:21:66:59:65:1d:74:42:8f:20:aa:
95:13:42:83:70:29:35:17:93:e8:d6:45:ff:e1:5e:
99:d6:af:3d:1b:4c:4d:7e:ce:23:5d:83:55:de:66:
fe:d6:f7:2c:2b:84:3d:22:cc:61:aa:4c:bc:1a:28:
46:60:d2:ac:dc:34:51:5b:10:c9:87:d8:49:57:93:
f7:4a:74:8f:21:0d:86:a9:b0:d0:c4:fb:92:d5:cf:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5B:FD:A2:44:01:D7:C7:66:0B:16:A4:19:BA:6C:E4:16:84:10:7D
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:9e:8a:75:a5:d1:7b:3a:56:b3:08:e2:fe:2b:82:a1:b7:e3:
5c:9c:96:0c:68:80:b5:14:34:05:c1:48:b6:96:3f:8d:af:de:
bb:5c:bd:1a:3c:46:7a:85:c1:42:5f:f2:df:02:71:f0:01:09:
bb:90:6a:60:4a:77:6c:c5:d2:86:03:4a:fb:72:49:c4:04:bc:
29:8b:61:9d:f0:37:96:d4:1e:a9:1a:37:cb:ef:5b:38:cc:0f:
5e:c5:66:e1:86:e9:a4:2b:ae:0b:6c:14:68:76:cb:be:ac:8d:
50:43:3b:d7:66:ee:4e:23:98:26:57:33:d0:dd:bf:4a:88:1a:
00:9e:cc:b6:9d:cb:b5:b3:70:80:35:8c:c7:5d:33:b6:c8:74:
96:99:09:18:51:3a:8a:99:00:dd:58:e1:69:7d:78:40:c5:26:
8e:4e:6b:17:2c:64:a5:45:8b:73:7d:0c:e3:b3:ea:43:24:21:
4c:8d:14:b1:fd:0a:a2:43:04:b1:73:85:bb:c7:f8:3c:b6:92:
03:0d:09:88:6b:bc:a7:c5:f7:38:e8:44:e2:fc:c1:7a:cf:2a:
53:43:09:5e:91:85:3f:7d:3c:13:eb:46:a5:f3:65:54:30:a3:
7d:5f:dd:bb:f0:ce:7a:97:b0:db:bb:1e:1d:96:5b:cd:dc:0b:
2e:ec:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:34 2026 by rpki-client