Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: 58cmMqbIHK85/V6eCpRocbEE5/uRZ5n1v8i3OMqBpro=
Subject key identifier: B2:FB:1A:4C:4F:42:49:61:7D:CC:10:D6:4B:EA:8F:4C:4D:8C:9D:CC
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 01A0005CF2670E10F68674C3EFD543B156D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 1A08
Signing time: Fri 14 Aug 2026 13:01:26 +0000
Manifest this update: Fri 14 Aug 2026 13:01:26 +0000
Manifest next update: Sat 15 Aug 2026 13:01:26 +0000
Files and hashes: 1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: HWG3cjbxz8zWiDkqUqEWNsTdSaFz62orD0bz/um42q0=)
2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:f2:67:0e:10:f6:86:74:c3:ef:d5:43:b1:56:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Aug 14 13:01:26 2026 GMT
Not After : Aug 15 13:01:26 2026 GMT
Subject: CN=b2fb1a4c4f4249617dcc10d64bea8f4c4d8c9dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:b9:e5:51:18:64:9e:78:7e:d6:8a:30:1c:
47:69:58:c7:66:b3:31:af:8c:b0:83:a6:9a:d4:c8:
99:4d:ed:e8:c3:0c:b4:79:ed:65:b7:ab:c1:b4:de:
fe:68:2e:f0:b2:8e:c6:da:d2:68:de:61:2e:d3:a9:
ad:48:78:d3:97:cd:0d:59:20:c4:43:81:59:53:ce:
01:76:21:90:7a:22:5b:e5:2d:64:fd:47:36:50:6e:
ab:cc:61:f4:81:46:27:18:03:ab:5c:70:f8:d7:b3:
c5:3a:d5:be:aa:43:40:5a:c5:8e:75:ea:61:ff:50:
b1:30:d4:ed:52:80:c8:c1:ed:2f:86:cb:b8:93:fa:
89:fe:07:e3:e6:05:72:8b:a9:30:57:4d:3e:ac:ad:
39:bd:7d:af:7c:27:52:98:ac:76:37:e0:55:82:45:
e2:ee:5c:99:2f:e2:58:d7:23:09:05:bd:36:73:ab:
6e:c3:3c:9f:57:e0:a7:f0:f8:de:d7:de:84:3b:1b:
3b:43:e0:14:1f:23:a4:6d:79:81:59:87:43:e4:b4:
89:a9:99:7c:6e:e6:b9:35:d3:80:1f:f9:70:11:d0:
58:90:93:b8:df:1b:d9:c6:31:cd:7c:42:b2:f6:75:
05:67:5f:b4:15:5a:4d:1a:1a:8c:21:39:8a:a5:a1:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:1A:4C:4F:42:49:61:7D:CC:10:D6:4B:EA:8F:4C:4D:8C:9D:CC
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a9:64:0b:43:bc:ff:56:5a:e6:ca:ea:2f:3d:53:fa:cd:39:
ab:c8:ae:2f:85:93:99:4e:08:ec:9c:5b:b3:8a:02:34:a9:0f:
b0:37:30:4c:c7:cc:ab:2f:83:02:40:13:32:d3:69:8c:26:9e:
a3:4c:4e:df:51:e9:11:54:ac:ac:fd:da:5f:9b:e9:db:90:8a:
71:76:53:fb:89:b5:c9:04:36:d2:82:3b:91:ac:c6:c0:27:00:
98:86:36:31:f1:09:d0:16:aa:ba:16:96:69:28:ac:6f:7b:ec:
a5:c1:00:b3:74:9c:0b:06:fc:ac:5c:1d:3c:9f:4f:b1:3a:ac:
f7:66:7d:c3:56:d9:b2:9e:6c:ff:1c:16:d1:4f:5a:9d:ed:4b:
cb:7c:9e:b2:1e:25:fb:19:20:ba:5a:e8:35:7a:80:ef:b6:9a:
94:c5:79:12:db:91:ae:3b:72:5b:0d:fd:ec:30:87:4c:b2:ed:
3e:e1:38:22:f2:97:f4:55:5a:5b:b4:6b:5e:07:e5:02:4d:f3:
bc:84:2b:a0:93:2b:82:b7:ed:4d:36:89:b0:8c:28:09:1d:97:
ea:5a:96:a3:2d:50:26:d3:07:d8:ee:89:e0:66:cd:2b:03:7b:
01:75:a4:36:33:15:8c:6a:9e:d4:2a:e6:54:af:61:db:b1:d7:
35:98:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:24 2026 by rpki-client