Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: vRYOp8ZpfFrii21wSz2EpIcLkIRv5bIwmL5RTC1gnEA=
Subject key identifier: F1:B3:11:52:BB:BB:4B:A7:A7:9A:B3:AB:2F:FC:54:F9:F4:21:B0:42
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 01A001A5C8D1F4DD85075EBF14DB5AE3972E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 19:00:37 +0000
Manifest this update: Fri 14 Aug 2026 19:00:37 +0000
Manifest next update: Sat 15 Aug 2026 19:00:37 +0000
Files and hashes: 1: 2SUVJ80PsPV5Sm7U3L8hHtyTcHk.roa (hash: KC9QuJ44Bvhyw7hXPqUGMgqZJZPJd+t4xVPwghxLews=)
2: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: 77fyudckjWs8v31VfYojaFbdQfTc705tb57MuN1+EZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:c8:d1:f4:dd:85:07:5e:bf:14:db:5a:e3:97:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Aug 14 19:00:37 2026 GMT
Not After : Aug 15 19:00:37 2026 GMT
Subject: CN=f1b31152bbbb4ba7a79ab3ab2ffc54f9f421b042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:b2:49:b3:1f:e6:72:69:c0:cf:40:d0:7c:
23:62:bd:c9:28:98:3b:ed:a7:ea:58:bf:2b:e1:40:
56:6f:f7:2f:81:70:70:b4:f9:bb:bd:c2:9b:fc:af:
d5:78:00:fb:46:4e:77:d3:88:b3:11:6e:b3:ae:ec:
ae:43:f2:f8:c3:2d:70:f9:46:39:6e:ae:1e:23:da:
4a:b1:0b:3d:53:43:7d:70:86:be:de:35:9f:c6:57:
27:04:6f:46:e6:eb:5d:62:63:8d:de:3f:00:ba:2d:
b1:f6:41:b9:e5:90:81:83:83:54:4b:81:b4:3e:5f:
bb:1f:50:46:7a:40:01:44:55:44:48:1d:c8:ef:9f:
15:0c:c1:a7:f3:3b:c4:0f:44:32:7f:a5:d1:82:de:
0a:ea:14:6b:1a:70:38:56:44:37:61:25:07:bc:da:
3f:c5:2f:ac:bc:3c:d5:37:9e:ca:da:32:11:6f:5a:
b6:2e:fc:88:2e:ff:62:0c:88:e0:93:75:ee:a4:fb:
ad:a6:82:3d:31:cb:fe:97:e0:62:fe:70:82:19:34:
d9:22:24:2b:b5:95:e1:48:70:c9:a5:c3:4b:fa:b1:
d7:59:07:72:39:19:66:5a:c7:bc:10:45:a4:d7:93:
12:53:f1:ba:31:67:cc:35:01:27:c0:ae:54:58:6f:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B3:11:52:BB:BB:4B:A7:A7:9A:B3:AB:2F:FC:54:F9:F4:21:B0:42
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c1:37:fd:a2:5f:90:64:de:2b:42:3f:bd:19:5b:52:53:97:
18:fd:5d:a8:8f:9c:1c:70:cf:3d:ce:ae:20:c2:97:48:6e:8d:
c1:90:d9:40:f6:39:8d:25:df:13:eb:50:a7:f9:8c:7b:ae:b5:
87:d3:5f:72:75:f5:c8:60:3c:af:5e:e2:5f:ac:6a:2c:35:40:
c6:af:39:74:1e:8c:2e:91:df:f7:66:5b:af:cb:06:a0:9e:1c:
ca:b4:79:91:ee:fd:5e:8b:50:7a:52:da:15:30:74:62:e0:5d:
d6:df:97:71:87:dc:57:17:18:53:b3:0d:3f:97:9c:dd:7f:a6:
52:ed:26:65:e4:7e:ba:75:ac:95:44:ee:9e:4a:44:2b:f1:f1:
09:45:bc:3e:6b:27:23:e5:b7:c6:2d:a9:05:85:58:6b:4b:97:
38:1d:87:fe:a6:86:f0:4b:8f:f7:ab:fe:be:c3:d5:02:88:d6:
c1:a3:d7:42:9f:f7:66:f3:00:7d:af:bb:cf:be:30:fb:b6:4a:
5e:0e:ab:f3:68:5e:fd:18:14:df:24:f2:2c:2c:05:e0:0b:1f:
df:5e:14:cc:a2:f3:75:4d:d0:f7:a4:b7:83:3c:42:44:4c:2c:
2c:67:e1:e9:56:05:c3:35:fa:51:16:5b:4e:25:9c:11:b5:e2:
25:70:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:11 2026 by rpki-client