Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
File: 8jhsPFHpFWdv2RMCrLncu5no8Uw.mft (raw, json)
Hash identifier: sHpzyUggu9NZMZIl56wzeQlzb7BxwwqviogcmF9Z42c=
Subject key identifier: 0B:FC:0E:72:1F:D9:04:A9:16:DB:6E:6C:8B:85:F8:29:5E:00:10:D3
Authority key identifier: F2:38:6C:3C:51:E9:15:67:6F:D9:13:02:AC:B9:DC:BB:99:E8:F1:4C
Certificate issuer: /CN=f2386c3c51e915676fd91302acb9dcbb99e8f14c
Certificate serial: 01A0404DF20723543734CB6F37FB86D7E148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jhsPFHpFWdv2RMCrLncu5no8Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
Manifest number: 017B
Signing time: Wed 26 Aug 2026 23:00:44 +0000
Manifest this update: Wed 26 Aug 2026 23:00:44 +0000
Manifest next update: Thu 27 Aug 2026 23:00:44 +0000
Files and hashes: 1: 8jhsPFHpFWdv2RMCrLncu5no8Uw.crl (hash: 2IsJckow46X/eFhPb3sYjZwLEpjUPwOj5imq9ieUTi0=)
2: ljZjgEZ9hW8cqxzlDtOAe4H1ql4.roa (hash: Z1WL6d9QfuUEoOquGksnlFUMW7fVN0+PQc/OczyRZHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jhsPFHpFWdv2RMCrLncu5no8Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:f2:07:23:54:37:34:cb:6f:37:fb:86:d7:e1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2386c3c51e915676fd91302acb9dcbb99e8f14c
Validity
Not Before: Aug 26 23:00:44 2026 GMT
Not After : Aug 27 23:00:44 2026 GMT
Subject: CN=0bfc0e721fd904a916db6e6c8b85f8295e0010d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:4c:70:72:2f:c7:e6:d8:73:93:a5:7f:d5:
56:c5:e2:22:69:4d:00:03:b9:11:f4:c3:3c:08:a6:
c8:97:fa:18:c0:65:fe:bb:b1:bc:b6:1d:96:c1:02:
bd:02:12:bb:72:f5:d4:08:63:5e:82:c5:2e:58:47:
3b:85:71:cd:8a:71:2e:66:91:d3:e7:f4:96:87:83:
ec:ec:1f:0f:7a:18:63:3f:f5:97:8a:ba:f8:70:50:
79:ab:a0:c3:f9:ee:76:ce:91:ef:a3:62:a1:9a:e6:
37:09:02:16:2a:17:7a:e6:13:78:8c:fd:79:fb:ad:
17:8b:ac:35:d8:c9:8c:e2:c5:71:7b:1d:b6:97:0f:
ed:fd:ff:1b:08:88:4a:17:31:62:d3:ff:dc:06:47:
40:7e:94:e6:a3:0f:40:d6:34:c1:b4:12:13:a7:a6:
5c:c8:98:06:24:c8:67:91:e1:26:cc:1f:4c:75:e5:
2b:20:bd:19:9a:fe:e8:f4:e6:1e:06:6e:73:4f:60:
79:4d:ce:23:94:04:4b:19:01:48:b6:c0:12:65:f5:
20:54:bd:26:5f:18:32:79:6e:a2:60:3a:3d:2f:02:
c1:45:b3:a9:51:94:c2:d9:ba:1f:4a:d6:17:c4:b9:
78:38:3d:b6:01:31:e2:cd:f5:b0:fe:62:35:41:9b:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FC:0E:72:1F:D9:04:A9:16:DB:6E:6C:8B:85:F8:29:5E:00:10:D3
X509v3 Authority Key Identifier:
keyid:F2:38:6C:3C:51:E9:15:67:6F:D9:13:02:AC:B9:DC:BB:99:E8:F1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jhsPFHpFWdv2RMCrLncu5no8Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3f:2c:fc:89:91:b8:0e:ef:69:09:ef:f6:b5:65:9c:49:9e:
f6:f9:6d:82:dc:86:f1:a4:35:29:b5:99:ab:71:72:10:40:f0:
75:94:47:1b:e1:7c:3a:db:a4:f7:aa:ae:e3:ee:d6:35:9e:95:
48:60:90:17:65:1c:0d:13:52:ae:dd:5b:73:d1:5c:17:4a:f9:
93:7d:45:f1:f2:29:4f:c4:57:d7:e8:a8:fc:31:dc:af:5e:a8:
81:54:4b:a5:7c:c4:4b:ba:d0:cb:d8:ec:fc:db:fc:79:bb:ac:
39:73:7d:e8:a1:40:dc:29:5b:64:9f:d0:47:a7:7a:81:70:ef:
70:b3:2c:e4:18:14:3d:a6:59:06:a6:0b:8d:49:62:d3:f8:e3:
bb:d0:f3:c0:da:49:f4:7c:41:be:ac:3b:a4:8b:ce:87:f8:80:
43:de:70:2a:5d:c5:fd:41:df:73:6e:13:98:30:c8:55:4a:a6:
b8:64:19:41:a6:8a:fc:ee:15:fd:f0:6e:29:69:6d:e5:62:5a:
ac:84:a0:f4:86:e1:d6:4a:1e:99:2e:36:b6:73:60:23:d7:5e:
0e:21:b3:72:e1:1c:5c:99:9e:a6:60:78:54:f8:c5:7a:10:11:
32:84:89:79:62:30:12:79:7c:29:b8:72:8b:11:69:c3:62:61:
44:cf:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:53 2026 by rpki-client