Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
File: 8okKqmI_iRMlIMqknt14C4WW2qA.mft (raw, json)
Hash identifier: r57q8pCLA4a7u1Aa7y2dn+c1COIfHr4K+VCtt5IPDTw=
Subject key identifier: BD:EB:6D:57:EC:7E:76:BD:91:D9:FF:C8:E6:FE:3F:1A:88:BD:98:37
Authority key identifier: F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
Certificate issuer: /CN=f2890aaa623f89132520caa49edd780b8596daa0
Certificate serial: 01A1781582F79D4E72BE92A7AE260B6197AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
Manifest number: 5D
Signing time: Mon 26 Oct 2026 12:00:38 +0000
Manifest this update: Mon 26 Oct 2026 12:00:38 +0000
Manifest next update: Tue 27 Oct 2026 12:00:38 +0000
Files and hashes: 1: 8okKqmI_iRMlIMqknt14C4WW2qA.crl (hash: /nVEhcnNEhU3Gtg7RXGqsKufpAfoHFnRH4UjO7mWrAM=)
2: xF1DzDjk2x1kIAUmYjScihsLh94.roa (hash: c33mejelY728d79n3OH435ljL0H9k5ztSPf/lo5be4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:82:f7:9d:4e:72:be:92:a7:ae:26:0b:61:97:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2890aaa623f89132520caa49edd780b8596daa0
Validity
Not Before: Oct 26 12:00:38 2026 GMT
Not After : Oct 27 12:00:38 2026 GMT
Subject: CN=bdeb6d57ec7e76bd91d9ffc8e6fe3f1a88bd9837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:93:18:f7:33:79:e9:da:92:b3:61:19:90:
d7:f5:83:e1:48:06:50:b7:67:1a:4e:a7:00:8e:5d:
7a:13:97:da:d7:30:a6:13:41:32:2c:56:f5:6e:7b:
5f:86:c8:0e:7d:cb:f0:7d:a5:3e:75:20:20:a1:ff:
9c:57:04:26:64:d1:65:90:ec:c5:e7:7c:c9:04:e4:
fc:73:74:a4:21:b1:76:16:d6:60:33:76:94:72:dc:
c5:e4:9f:5f:65:3a:a0:d1:b0:61:3a:23:82:90:6a:
c4:b6:59:9f:dd:c5:b1:e1:26:39:54:62:f7:8b:0b:
ed:89:7e:df:c0:fd:c4:80:3d:03:16:b0:ca:a7:9e:
71:e5:c9:52:1a:f7:43:7f:72:a5:6d:c0:e8:2c:e7:
30:23:6b:8d:ad:49:2b:63:ef:27:53:03:d8:39:7f:
ff:78:88:c8:6f:94:ba:91:c7:0a:e6:5f:f6:a6:d0:
80:b8:c1:cd:0b:47:11:18:81:e4:9c:7c:43:e7:14:
bd:e1:74:60:d1:bc:25:e9:3a:c5:88:cb:29:4c:2f:
c8:ba:97:42:e3:ae:d9:bf:a9:9a:f1:de:7c:ac:49:
88:d3:d8:13:c9:6e:3f:51:6e:15:0f:6a:49:58:26:
0f:1b:66:c1:e0:a6:9f:13:af:d6:9e:e7:f6:82:b0:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EB:6D:57:EC:7E:76:BD:91:D9:FF:C8:E6:FE:3F:1A:88:BD:98:37
X509v3 Authority Key Identifier:
keyid:F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4e:18:0d:6f:34:26:96:bd:d6:90:0d:bb:93:69:ce:0f:49:
60:3b:e4:d5:ac:e1:08:2a:eb:c2:02:e0:4f:12:fc:5b:3f:1d:
71:8a:00:46:b3:ac:03:a8:49:9a:2c:68:e5:ec:9e:17:69:8e:
d5:c4:ea:c2:c7:50:0b:6b:d7:59:b5:c9:df:25:4d:8f:88:27:
db:5f:2f:14:6b:ab:54:b6:76:c5:5f:17:2d:57:ed:3d:11:37:
ed:38:f1:f2:fa:f8:70:e1:a0:58:5b:0b:1b:b7:ed:93:76:57:
5a:37:8c:5a:c5:94:c7:0a:31:6b:09:51:bc:d1:ac:58:20:4b:
a8:57:b2:06:d4:c4:22:a8:ed:5f:3b:34:9b:bd:df:a9:30:32:
c4:22:57:09:df:b9:32:fa:04:4d:63:f2:51:b1:4e:24:68:4f:
21:e2:f8:21:3e:ce:aa:99:ac:be:4a:5e:44:c7:03:b1:83:aa:
91:96:93:a0:c6:ca:ef:da:72:ac:45:6c:29:fd:8f:9c:58:db:
7b:ab:cc:68:e6:c1:07:33:f3:20:d6:8d:19:b2:36:2b:ec:5f:
aa:48:5b:7b:64:29:da:57:21:61:82:13:82:3c:e2:54:71:d7:
b5:38:0e:cf:70:00:9e:cf:a9:a5:04:11:c6:7c:92:7e:e0:68:
f5:45:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:33 2026 by rpki-client