Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: 6FNv3AcN7hZV1pL5/9JUhvFx/uEAJdttzRMIZO+/JLU=
Subject key identifier: A5:B6:4B:17:91:C9:73:B6:3B:DC:EF:F7:1E:4D:5B:32:61:43:FF:39
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 01A145041C5F4DD2B4E3E027A50F25C1ABFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0F3E
Signing time: Fri 16 Oct 2026 14:00:59 +0000
Manifest this update: Fri 16 Oct 2026 14:00:59 +0000
Manifest next update: Sat 17 Oct 2026 14:00:59 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: TcOrzBSh7LIabfwdAAG4m2IQaMTAuLeOzYmK0YU19MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:04:1c:5f:4d:d2:b4:e3:e0:27:a5:0f:25:c1:ab:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Oct 16 14:00:59 2026 GMT
Not After : Oct 17 14:00:59 2026 GMT
Subject: CN=a5b64b1791c973b63bdceff71e4d5b326143ff39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:a0:e6:f0:9b:02:35:fb:42:4a:6e:cd:df:
7e:30:7e:3d:a7:79:7e:e1:02:8f:f9:10:92:23:f3:
fe:c9:57:f8:fb:bd:84:64:9d:e5:9a:72:d7:75:7a:
01:fb:24:c1:2c:97:c1:5c:88:be:00:a8:47:b2:62:
37:9a:51:f7:80:70:f7:38:6c:0d:29:f1:5f:44:d9:
85:f9:28:b9:52:a6:e8:3b:1c:65:67:4b:d0:29:de:
9e:2e:83:2f:13:ad:d0:50:4b:02:37:89:2c:84:e6:
3a:08:16:c7:83:f1:89:6d:15:54:2b:68:d3:cc:4c:
b8:49:9c:6a:b6:9d:0a:37:0f:8e:38:58:f8:26:60:
e7:6e:71:29:59:c0:f3:f6:ac:0b:2a:7c:0c:60:29:
8e:17:b1:06:1d:7e:b5:d5:b2:4d:92:59:07:25:03:
01:a6:57:62:13:41:79:07:b8:46:39:dc:71:3e:87:
a8:b3:61:05:48:e7:e1:26:98:10:1a:09:fd:a3:9c:
98:6b:bd:ed:56:a6:cb:30:f7:2d:36:fb:69:3c:2b:
74:10:19:9a:f1:8d:d5:0e:f5:86:87:e7:31:ef:5d:
77:22:89:5f:a0:28:93:06:da:3e:ad:72:0a:bf:fd:
2b:4f:4c:b3:31:6d:49:89:5a:af:e8:2c:b0:7e:a8:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:4B:17:91:C9:73:B6:3B:DC:EF:F7:1E:4D:5B:32:61:43:FF:39
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:87:c4:c4:1e:e6:53:7b:cd:c0:79:52:97:d3:cf:7a:70:15:
a2:34:18:24:b1:c0:1c:f8:54:1f:f1:8a:72:5b:67:bc:2e:ab:
ea:27:1d:b4:c8:93:cf:0b:b2:00:e5:6d:ba:03:e3:0f:ee:f8:
64:4c:a2:4c:37:e1:d4:dd:e2:fe:56:e5:e6:8b:74:b9:21:c4:
ad:49:ea:8e:cf:e2:ce:30:ec:e7:5d:f2:a5:ca:c6:85:8d:ba:
65:a3:20:a7:62:a5:d3:e4:99:59:64:e7:18:65:94:ee:98:1c:
1d:05:c2:23:8a:4c:18:28:50:10:e5:fd:1a:f0:0c:6a:de:08:
13:93:5e:c1:71:92:7f:19:77:56:8a:10:11:16:8a:f8:21:63:
11:a2:46:c5:93:18:52:74:30:33:cc:08:b8:a3:4b:8e:c0:81:
1f:d4:92:7f:e3:d6:ee:66:a5:c3:9a:ee:d8:83:2e:64:51:f1:
0b:a7:03:35:5f:31:11:5f:0b:82:c7:ad:c3:1c:14:ed:60:71:
dc:31:83:ff:9f:fe:20:45:b2:8d:e3:1f:59:76:3d:9f:9c:87:
76:68:51:67:cd:ba:e9:1e:fb:00:81:03:2b:91:45:55:97:9c:
d1:8c:a7:ab:55:c8:36:7e:4a:94:61:c9:c6:f9:8c:1c:d8:44:
76:13:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 21:28:02 2026 by rpki-client