Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: DtFg4JD4ZyOISzMy7NCA95A7e++bPgKgu5uG5dDuUww=
Subject key identifier: F5:A8:FC:FF:84:99:74:8C:42:EF:75:EB:BD:5F:D8:6E:CA:8E:9A:CF
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 01A00100F5931071AF1F1FDA8C32814CC6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 16:00:34 +0000
Manifest this update: Fri 14 Aug 2026 16:00:34 +0000
Manifest next update: Sat 15 Aug 2026 16:00:34 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: mosCYNcbem5UpvqDfTUG5ZQN22210X0tfjrraTxCR4Y=)
2: r1byiiD8E5kv1tORv9SHaYWDCX8.roa (hash: Y7mEKt3t/ouKCUEMiF9nKEKnQJXCe30KkTBF7TaOr+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:f5:93:10:71:af:1f:1f:da:8c:32:81:4c:c6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Aug 14 16:00:34 2026 GMT
Not After : Aug 15 16:00:34 2026 GMT
Subject: CN=f5a8fcff8499748c42ef75ebbd5fd86eca8e9acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:4f:ae:95:b0:db:83:81:fa:c8:bd:79:5d:
88:f8:30:bd:56:1f:2b:1d:0e:f8:9f:9c:3e:ee:41:
6c:e4:83:f7:9b:f5:ca:ef:42:54:cd:25:bb:41:22:
61:8f:b5:58:bb:bc:ee:b6:d3:ca:10:2c:93:c7:26:
b9:dd:e2:0c:0d:f2:02:04:77:b6:57:05:95:a1:04:
9f:54:f7:e9:ad:5c:a2:81:75:33:3e:9e:2a:53:95:
43:99:63:81:ea:8e:f0:b4:ec:6d:7d:60:8c:45:56:
25:7b:85:a4:a9:c5:3b:c2:f2:64:da:0b:22:64:46:
f9:29:42:05:5a:d2:ce:4d:d8:ed:6d:4d:60:23:ca:
0b:41:11:be:95:67:fa:0d:ee:b2:0a:86:96:1f:8d:
0f:bb:4b:f9:14:bc:e5:8b:dd:9a:97:50:fc:0e:5c:
ea:fd:d9:ea:3b:44:01:ac:1f:c4:c5:cf:b2:e6:51:
8e:5b:6f:27:65:08:a1:30:25:dc:c7:33:53:01:04:
a9:43:50:78:c1:1b:29:4c:d7:d8:ff:bd:2d:09:a4:
c9:97:85:44:75:a7:1d:de:1e:35:16:1e:53:17:b1:
38:a3:58:1c:7c:62:c0:1d:13:b6:a5:38:7e:ce:9e:
22:21:28:d0:c8:f6:94:4d:34:61:87:f3:20:1d:01:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A8:FC:FF:84:99:74:8C:42:EF:75:EB:BD:5F:D8:6E:CA:8E:9A:CF
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:24:c9:2b:30:88:d6:32:e9:dd:20:d3:40:84:83:5e:e2:b8:
fa:2d:e4:f2:34:c0:91:59:61:b4:73:af:22:87:20:0d:c6:db:
99:f8:9b:5f:ae:3f:7f:4c:1e:ab:b3:91:93:bd:e4:75:31:2e:
05:b5:7a:06:49:1c:09:d1:8a:a8:ed:2b:65:9c:ae:af:e7:64:
c6:da:5a:57:24:b8:62:eb:6a:22:42:10:d0:f2:04:70:56:d2:
05:71:82:fb:f1:80:48:9a:11:be:eb:dc:4b:19:e2:42:60:84:
6d:3e:ed:24:bf:de:ba:37:61:96:cb:da:b4:ce:3c:52:3b:34:
13:7f:ca:8c:53:9a:88:a6:44:a4:51:bf:da:ad:c8:7d:ba:90:
4e:5a:39:5c:9f:00:94:dd:f0:57:c6:45:f4:58:2d:04:86:12:
ac:b1:84:59:b3:05:ca:66:2e:54:7b:00:34:3a:aa:dd:60:bd:
92:ee:53:fb:29:60:1e:53:a5:4b:9d:59:43:a3:e8:17:e2:bd:
e7:96:b5:50:1c:17:62:71:be:e4:c5:a6:1e:5b:73:53:ac:ba:
0a:66:8c:31:d7:32:7a:d7:68:93:98:76:44:42:b4:b7:8d:0f:
76:ec:7a:50:2f:24:21:3e:04:e7:5d:cb:bd:47:c8:8d:4b:39:
49:e9:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:23 2026 by rpki-client