Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
File: 1fdy0HHFE8Hozluapn9oke71C-8.mft (raw, json)
Hash identifier: QDY2netzYBzbi6wI/Mpg8lHYl/Nhpx/KDRhEn3yadMo=
Subject key identifier: 17:75:B2:51:68:37:ED:D6:A4:14:77:D8:DB:93:F1:A9:43:83:2D:45
Authority key identifier: D5:F7:72:D0:71:C5:13:C1:E8:CE:5B:9A:A6:7F:68:91:EE:F5:0B:EF
Certificate issuer: /CN=d5f772d071c513c1e8ce5b9aa67f6891eef50bef
Certificate serial: 01A04016D317F8C3F69B9EA34F3AB264BB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
Manifest number: 0151
Signing time: Wed 26 Aug 2026 22:00:32 +0000
Manifest this update: Wed 26 Aug 2026 22:00:32 +0000
Manifest next update: Thu 27 Aug 2026 22:00:32 +0000
Files and hashes: 1: 1fdy0HHFE8Hozluapn9oke71C-8.crl (hash: NWSLPeLFKK3hQJn2eeliI18MBXxX0DjeAnm5bYinZQY=)
2: KLEbsUex6kfA2TrHqsrxk6W_jrc.roa (hash: 8GJL4HHRySJ+N/l9kxJIoQ+ji927avPBg8CMqptjZQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:16:d3:17:f8:c3:f6:9b:9e:a3:4f:3a:b2:64:bb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f772d071c513c1e8ce5b9aa67f6891eef50bef
Validity
Not Before: Aug 26 22:00:32 2026 GMT
Not After : Aug 27 22:00:32 2026 GMT
Subject: CN=1775b2516837edd6a41477d8db93f1a943832d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:a7:99:73:af:27:bc:61:f5:45:3f:63:f3:
ce:18:1b:9c:0a:a5:9a:14:e5:b9:3e:83:31:a1:35:
d2:33:8a:da:d3:5e:c6:4a:a0:42:b9:3f:90:84:e5:
bb:3d:3c:75:c2:1a:1b:3b:be:b4:90:a8:0a:ef:22:
5b:3e:71:cc:3a:3a:c3:52:59:50:8e:cb:84:65:e0:
29:ae:33:24:c7:d2:df:be:ed:64:9a:f3:66:7a:20:
fd:13:c0:64:f0:94:f2:d9:91:76:bf:3f:d8:b4:bc:
e6:ae:cc:79:83:b1:10:33:ae:61:27:df:16:2c:5b:
22:87:02:f5:4c:aa:d6:b5:0b:c9:b5:6a:e0:05:d1:
2f:7f:d3:b7:6c:97:e4:06:e5:27:ea:31:93:ad:6d:
e3:92:f0:71:fd:ed:1e:72:05:d5:e0:87:48:17:87:
88:a8:e4:e7:03:30:cc:5b:62:05:74:e6:f0:94:9a:
8a:83:97:ed:cc:0b:0d:41:c3:86:65:e2:ad:17:f9:
5b:7e:fe:a2:d6:cf:b5:f9:5f:b2:a2:50:49:25:94:
5c:3d:b3:a2:f9:fa:ce:00:1f:f5:fa:ed:09:a9:b4:
ff:cf:3d:2e:33:2b:48:47:09:81:ee:c1:15:d2:e7:
96:93:e5:13:76:27:46:03:c4:4c:57:37:5f:de:09:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:75:B2:51:68:37:ED:D6:A4:14:77:D8:DB:93:F1:A9:43:83:2D:45
X509v3 Authority Key Identifier:
keyid:D5:F7:72:D0:71:C5:13:C1:E8:CE:5B:9A:A6:7F:68:91:EE:F5:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8b:e2:5f:c2:df:fc:d1:09:ea:b6:eb:b8:3d:74:ce:98:b6:
93:bb:e1:d0:af:78:dc:07:a1:5b:d7:6f:4c:8d:bd:bf:cb:88:
0a:90:ce:da:06:11:11:60:a5:28:17:33:4f:55:3d:89:f5:26:
82:77:d6:be:a8:ad:19:b2:f2:ef:da:b6:63:6a:cc:ea:f8:aa:
1d:48:2e:d8:99:1c:5d:c5:3c:e5:5c:f3:53:57:24:3e:d5:ba:
5b:e8:ff:ad:cf:16:d1:67:ce:32:7f:03:cf:80:ad:14:a8:be:
83:03:5e:22:e7:5e:29:d0:a6:24:8e:10:ad:64:0a:ca:92:8f:
f0:cd:44:51:6f:8d:d5:a8:e2:95:3f:1e:f0:1e:46:f9:b4:a2:
3c:da:1b:34:a1:e5:d1:d4:a5:e0:33:73:b8:e2:0f:93:31:c9:
37:71:93:dd:c5:24:25:86:75:57:b3:c8:6f:f8:65:6e:34:a3:
67:7d:eb:51:27:8d:d6:6a:99:23:74:b6:b6:1b:ad:fd:f3:e6:
58:b2:bb:22:c1:87:19:1e:d4:15:2d:b3:f7:30:43:28:8a:cd:
fd:a2:a3:6f:bd:a0:d6:b0:a1:7c:0b:bc:78:4a:07:05:e6:5d:
9f:83:3b:88:80:02:04:2d:10:f8:44:ff:fa:24:40:de:f4:a8:
d9:33:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:33 2026 by rpki-client