Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: 76Yf9aVTVAqKDDVmaFucFi0QyvBs7/ZfQGe7uD3vsAE=
Subject key identifier: 75:35:66:C5:F3:0C:D0:4A:9A:B1:06:35:B1:F4:0B:FE:F9:63:A0:05
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 01A001DD1768C4BCA7F04810DCE3C86FB046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 10FA
Signing time: Fri 14 Aug 2026 20:01:01 +0000
Manifest this update: Fri 14 Aug 2026 20:01:01 +0000
Manifest next update: Sat 15 Aug 2026 20:01:01 +0000
Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: wqt1NgLDd0hamCyM127/aeWdOoCSS+1eoBShm5TaPEU=)
2: foPJ5M9ZOVkGAWVnVqDC4Cs4-NU.roa (hash: 1DlyQW+RNTimUxXGNa+g3AQuv/uMpZoTB33IBxZu3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:17:68:c4:bc:a7:f0:48:10:dc:e3:c8:6f:b0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Aug 14 20:01:01 2026 GMT
Not After : Aug 15 20:01:01 2026 GMT
Subject: CN=753566c5f30cd04a9ab10635b1f40bfef963a005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:04:20:34:39:a8:d5:c3:1e:21:63:d0:f0:
19:95:bc:39:f7:9e:ec:ab:cb:18:95:8a:0d:02:38:
3c:a6:d0:9f:6c:a1:77:1a:4c:87:6e:dc:e4:02:1b:
72:de:27:1c:fd:0d:7f:21:fe:23:5e:fa:0d:75:4e:
0d:bd:bf:4e:0a:a2:17:a8:d0:16:d6:71:b1:bb:ec:
04:79:5d:36:b1:62:d6:37:22:11:21:1e:ff:05:01:
e1:3e:fd:ac:a8:45:26:c3:f8:bb:51:f3:24:41:c4:
75:38:52:a0:8b:b0:ba:68:60:c6:a8:1e:97:6a:d0:
e8:b2:3b:55:13:af:f5:9e:52:f4:5b:26:1c:c0:1a:
ba:09:2c:cb:4a:26:28:f1:9c:8f:63:44:d9:0a:58:
d9:a2:40:5f:a1:97:e8:d8:f2:d8:80:15:8a:30:c9:
02:dd:e1:98:70:7a:26:67:25:4a:5f:9a:0d:ca:ab:
a6:23:f7:21:61:96:26:ed:eb:75:23:a7:c0:96:2a:
56:00:e4:fa:79:32:8e:47:4b:fa:16:41:c1:a4:f1:
bf:5b:79:bf:50:47:54:34:af:12:88:fb:e0:85:b4:
2c:48:e3:76:6a:5a:34:39:0d:54:f4:a3:81:53:da:
38:c3:e7:bd:25:0b:82:f5:05:11:78:04:34:51:d0:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:35:66:C5:F3:0C:D0:4A:9A:B1:06:35:B1:F4:0B:FE:F9:63:A0:05
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f7:c5:0c:fc:7b:17:dc:65:97:1b:26:1e:f3:f5:ca:3f:29:
95:13:f2:13:72:30:fb:b5:df:81:19:3a:69:35:5b:bf:8f:7f:
54:57:a7:31:9d:c3:cf:af:71:a7:b1:1c:43:79:87:d6:b6:ba:
8e:b5:43:aa:3e:e2:65:f0:a1:1a:c4:0c:55:86:6b:d6:7e:5b:
97:31:6a:d2:7c:1d:a6:c6:4d:64:1b:09:14:fe:c5:c2:3a:f8:
5c:ea:05:74:71:34:8b:e1:b1:75:39:f6:b5:31:e2:ca:77:e0:
4a:61:0d:d7:82:1a:59:55:91:a7:80:e2:19:97:b9:15:d6:67:
ca:51:8d:68:61:fc:d2:6a:08:69:b3:3b:4c:44:ab:9f:37:d4:
f6:d2:0e:95:69:93:bc:93:ee:b7:c6:07:57:2a:3a:64:71:e7:
0e:f2:1c:9d:f4:53:45:ea:ab:01:37:0b:76:7a:73:65:82:07:
b2:e6:e8:c8:7b:f1:5d:b8:4c:e5:48:99:aa:c7:5b:15:1d:25:
41:d1:72:1b:43:67:9b:60:38:c2:27:57:da:ed:f5:80:d4:2b:
2e:94:4e:c6:ad:13:5f:52:fc:10:75:29:60:51:15:bc:08:c4:
c3:24:26:a2:bc:0b:8b:51:1a:85:c4:1d:6b:f7:28:52:4c:af:
c0:26:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:02 2026 by rpki-client