Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: dlSVCtc66iMXIIS1j646XaRfJXZl78PK50zIUbDBGTI=
Subject key identifier: 08:D2:96:A3:78:40:15:6E:04:89:C2:AC:71:8D:FD:0E:5A:56:FA:3E
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 01A13E9468CE4D40D298C36CE6AAF11B7C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 119E
Signing time: Thu 15 Oct 2026 08:01:15 +0000
Manifest this update: Thu 15 Oct 2026 08:01:15 +0000
Manifest next update: Fri 16 Oct 2026 08:01:15 +0000
Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: iKpesJcmOXj5A+ke+iYwoJJBDGZeWKzBFHly/W5pSf4=)
2: foPJ5M9ZOVkGAWVnVqDC4Cs4-NU.roa (hash: 1DlyQW+RNTimUxXGNa+g3AQuv/uMpZoTB33IBxZu3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:68:ce:4d:40:d2:98:c3:6c:e6:aa:f1:1b:7c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Oct 15 08:01:15 2026 GMT
Not After : Oct 16 08:01:15 2026 GMT
Subject: CN=08d296a37840156e0489c2ac718dfd0e5a56fa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:6c:65:82:36:e9:d3:23:2a:eb:81:5f:e4:
96:cc:bf:3f:02:44:5d:eb:6d:f4:d4:42:12:6c:94:
06:d9:3b:e9:5f:f5:ad:1b:7b:cd:c4:75:9e:d8:2c:
8d:db:87:08:a8:71:16:a8:0b:b0:3d:99:7c:8d:7c:
41:e8:b3:07:3b:b4:cf:34:c2:6a:67:78:d0:8e:e3:
3e:db:97:7c:9c:13:40:b9:ca:d4:d7:6f:c3:67:b8:
69:a2:d1:fb:73:d5:df:e7:b8:99:12:37:79:41:0a:
b5:7e:e6:fe:88:c5:da:7c:e7:f2:ee:be:e5:cb:b4:
01:c7:d0:59:27:b0:9f:66:6e:5a:18:c4:2b:41:54:
b5:e4:cb:ab:ae:d1:bb:34:09:4c:96:57:10:af:85:
bc:45:bb:55:d9:87:e0:6b:49:b6:52:da:d2:8a:92:
49:48:b2:13:12:d2:13:83:c8:0f:5c:fd:81:84:29:
49:0d:7b:f5:1a:54:6a:4a:50:19:8b:1d:3a:2c:f3:
41:33:bb:35:53:fc:ea:49:0d:c8:d5:94:27:13:e8:
54:58:1e:37:56:a8:36:04:a1:d5:ab:68:67:b3:ea:
44:55:ba:a5:b3:76:c1:53:2e:a1:2b:7c:aa:c7:d9:
04:ca:8d:bf:3c:78:2e:9d:b0:8d:4e:fc:9f:7e:4d:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:96:A3:78:40:15:6E:04:89:C2:AC:71:8D:FD:0E:5A:56:FA:3E
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:fe:99:26:b7:ee:62:f2:de:52:8c:28:9f:cf:40:a5:c0:a2:
76:1a:f0:26:16:bd:ef:60:bf:59:7f:56:ba:d5:3f:61:43:a1:
fc:1c:f7:68:c8:83:c9:8e:cf:25:82:b1:d7:f8:09:96:03:b9:
a6:6a:ea:94:58:d1:f9:70:8e:7f:ea:ca:5d:d8:6c:3c:6b:d4:
f6:5a:19:aa:56:d3:7d:35:3e:14:4d:56:b9:76:a2:8e:1d:bd:
d9:ca:5c:98:ee:b5:85:f2:fd:cd:5c:f2:59:9b:9d:28:37:82:
b7:3d:ae:b8:30:cd:7a:b2:6d:5a:4d:6f:d7:a2:69:e7:7c:d2:
f5:b0:82:7c:4a:81:a1:63:f9:21:f6:97:28:d2:bd:90:98:f0:
cb:6f:ff:09:6c:10:f8:49:d6:b4:64:f1:97:0e:ea:e8:a5:1c:
7e:86:83:ea:41:fe:d3:61:86:63:30:c5:85:99:7b:80:74:66:
ff:a0:3a:d5:b3:ba:1b:09:d9:10:c1:d0:f6:30:7a:36:4d:7f:
88:b7:97:53:21:fb:c1:54:4d:c6:20:1f:58:08:bf:48:80:0a:
e5:8b:cf:19:22:1d:c5:d7:3f:25:82:9d:40:5d:3c:67:cc:40:
69:d4:01:e1:90:a1:25:05:1f:3a:e0:ce:f9:33:9e:93:ad:d8:
83:ba:eb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:26:34 2026 by rpki-client