Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: IJx8aV/ShLZ5O5qDH0W33qk39RFDFHtxRj1PKpf7KSY=
Subject key identifier: DA:AB:7F:52:8B:52:A2:28:D2:52:45:53:F7:D6:FB:33:98:10:28:A7
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 01A0009307DAB227D06B94725CB7F0FB7553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 14:00:30 +0000
Manifest this update: Fri 14 Aug 2026 14:00:30 +0000
Manifest next update: Sat 15 Aug 2026 14:00:30 +0000
Files and hashes: 1: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: aS35qU4kZjo5pIP78jADcY93y7TXwQnKoeiejXBHOMs=)
2: Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa (hash: mKMA8v5enBshub8zpH+FWCvpU25kENVUShbbazleOWE=)
3: U_rat5lH-1OBTjZW3Kpv35l2bnY.roa (hash: RWS/4jTw+B9QckGKnUwmlAnGx+MDkdaAdkO4bYQ9r8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:07:da:b2:27:d0:6b:94:72:5c:b7:f0:fb:75:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Aug 14 14:00:30 2026 GMT
Not After : Aug 15 14:00:30 2026 GMT
Subject: CN=daab7f528b52a228d2524553f7d6fb33981028a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:0c:23:05:73:81:e6:02:c1:ba:94:ad:e6:
dc:6f:45:5f:62:ff:dc:87:24:96:a3:7b:6f:bf:49:
28:c7:a0:24:81:9e:45:a2:40:22:10:5a:05:9b:01:
76:4d:04:f1:91:d9:02:c3:69:96:d8:62:c3:46:49:
51:82:6c:11:f1:5b:0d:02:a7:92:4d:78:68:22:ea:
3c:0d:d8:fa:4c:a4:ee:10:0e:ab:02:26:b5:4f:b1:
0e:0d:e6:7f:21:97:72:26:51:9b:8a:a0:49:42:5f:
7c:2c:39:80:c0:d7:ba:e3:3f:6d:be:b8:13:65:ec:
62:85:0a:75:d5:5d:9e:84:7c:26:39:ef:eb:4f:26:
61:e6:75:72:ba:75:a1:fd:13:3d:b8:98:2f:3c:aa:
ed:84:6b:a2:18:81:51:9f:da:46:0b:9b:96:d7:3e:
f8:0d:c1:c0:f2:0a:c5:1d:f3:eb:a0:f8:95:7c:48:
14:ed:29:ce:be:d5:bb:fc:9e:05:69:ba:8c:7e:3b:
ee:33:fb:e6:dd:e9:2b:cf:de:46:03:8c:e3:29:a9:
77:7b:4c:cf:1e:6b:27:fa:f7:6f:e8:7b:93:f7:e1:
d6:19:7d:f6:f2:e8:5f:79:30:36:ca:fb:7c:cc:c4:
9d:35:9a:d9:68:29:fb:cf:90:24:61:aa:2a:21:17:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AB:7F:52:8B:52:A2:28:D2:52:45:53:F7:D6:FB:33:98:10:28:A7
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e3:20:b9:b5:3b:5d:ac:19:f8:92:d0:3c:a5:3a:2c:d7:df:
26:a7:26:ba:d8:d3:a7:a4:0c:7a:a9:95:fa:88:08:46:a0:59:
78:1d:5b:98:0c:c7:5b:ee:07:d5:4b:77:10:19:a3:ce:88:ba:
55:7d:78:47:a0:49:30:87:29:b4:57:64:e9:7e:d5:c6:20:cb:
a5:e1:dd:cb:31:32:ce:f6:1e:9c:cd:ff:70:20:e9:6b:b2:af:
88:87:17:8c:5a:24:20:2b:9e:51:b6:95:dc:00:51:08:e4:59:
79:53:3e:b6:4e:be:d4:5d:13:2d:86:62:ff:4c:eb:7e:f5:4f:
ec:77:0f:a3:16:be:8c:f8:72:69:d5:c2:17:a6:4d:b0:7e:f0:
34:cb:62:12:c1:83:f0:87:fb:e3:a5:19:9b:ce:80:fc:fa:da:
b2:2c:c5:64:da:dd:e3:9b:3f:4c:0e:72:18:be:53:66:87:56:
e8:14:35:f7:2a:28:45:c3:df:63:b7:95:19:70:99:e2:c5:60:
0d:07:50:9d:e6:0b:8f:3d:6d:38:d1:d6:1a:b0:4f:ea:9e:8b:
66:02:fd:10:ad:de:8a:71:53:81:6f:84:3f:3a:bf:26:0e:90:
2a:7c:3a:93:30:0a:34:40:80:1d:91:93:3b:aa:72:83:3d:b6:
8a:a2:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:20 2026 by rpki-client