Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: 6dWR/RQPt+5po0ik86EM/COTibqvS04DumcdfKSQnRk=
Subject key identifier: FD:83:92:91:C4:05:5B:D0:10:28:17:3C:9E:2C:24:BD:FF:1C:E6:58
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 01A00093C7CEEC973B1985CCBD95B2B430A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0E96
Signing time: Fri 14 Aug 2026 14:01:19 +0000
Manifest this update: Fri 14 Aug 2026 14:01:19 +0000
Manifest next update: Sat 15 Aug 2026 14:01:19 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: MwYN1O0jCJwDbDbPj5GVCXrs2Fd8twMkWDPmBX4XuHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:c7:ce:ec:97:3b:19:85:cc:bd:95:b2:b4:30:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Aug 14 14:01:19 2026 GMT
Not After : Aug 15 14:01:19 2026 GMT
Subject: CN=fd839291c4055bd01028173c9e2c24bdff1ce658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:95:86:77:25:6a:8d:a2:c7:52:81:fa:f0:
e3:ee:92:b2:bd:43:cf:ea:26:c2:f7:a4:b8:05:c0:
f5:f8:6e:21:e8:14:bd:41:7f:ec:b3:8f:6a:27:e1:
4b:50:00:33:56:62:83:6e:5b:9b:a6:59:39:1a:33:
6c:da:c7:f1:ca:c2:55:5e:b1:f1:1b:58:6c:49:f4:
d1:91:a7:7d:c4:49:4f:0b:be:bb:cf:b5:ac:d2:80:
9d:4f:d6:85:cd:ee:89:02:2f:09:68:27:0d:8b:5f:
32:8f:93:6b:9b:a3:48:4d:0a:0f:96:4c:e5:03:6a:
68:7e:23:12:e1:d3:ad:2c:e5:f4:67:63:8f:6a:46:
07:34:ec:69:cb:6c:6b:bc:4f:09:c9:41:79:d3:6f:
35:87:a8:cc:67:16:58:ff:e6:6c:2a:31:e8:ea:80:
26:c4:6b:d7:cc:72:e3:3c:97:27:0e:34:e6:42:f1:
55:9d:16:e8:f1:a9:83:3c:87:27:71:fe:b8:f3:7d:
16:cd:21:3c:b9:6d:a1:04:cb:11:ed:db:fe:3e:e1:
38:3f:40:47:77:4d:ff:5f:cf:9f:0c:a8:75:7f:87:
50:60:b3:4a:63:04:1c:77:ff:aa:5b:0a:f2:67:61:
92:1c:42:ae:ad:c1:d3:bc:89:20:e9:4b:6e:39:62:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:83:92:91:C4:05:5B:D0:10:28:17:3C:9E:2C:24:BD:FF:1C:E6:58
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d4:76:38:94:a4:5b:16:ab:23:54:bb:5a:ba:0d:4c:c9:a9:
f9:dc:37:2f:c8:6e:2b:c9:ee:64:81:a7:c1:5d:1e:e9:82:87:
3f:08:5c:07:4e:3c:60:98:b9:3a:e7:08:56:c2:14:6a:c4:c3:
b0:f2:02:78:19:96:6c:e4:73:6d:f3:9e:f3:ca:de:bc:4c:5a:
40:cb:c9:3e:60:d4:c8:db:d4:28:fb:ae:d5:54:e1:ad:9e:c6:
39:e7:74:5d:a7:86:d3:6d:d1:1a:dd:5b:7a:66:7c:f6:83:8c:
31:12:86:1e:2a:e8:d4:1c:20:68:e4:80:3a:af:89:5d:66:8a:
95:0a:c6:20:a9:8b:6f:d4:de:70:9c:96:d9:1b:50:75:fb:86:
d0:ad:42:bb:28:94:df:0e:bb:ac:da:83:16:79:08:55:72:a7:
c7:e2:8d:bc:85:b8:cb:04:26:77:bc:69:bc:7b:ae:80:d5:8f:
f3:74:77:6d:6f:c7:9f:98:0d:66:b5:32:50:01:c1:28:20:19:
a0:02:47:d1:a1:1e:f4:6a:62:30:7a:8a:73:bf:ff:b9:0d:41:
0a:48:87:24:9c:7d:b8:9f:3f:36:b1:a2:97:1d:ec:b8:8c:47:
65:3a:c8:61:37:d5:40:ef:e4:35:4e:77:6d:11:37:27:14:b7:
4f:94:df:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:15 2026 by rpki-client