Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File: K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier: heR7TmqKtYie8mWlF9QsCBlzhO9p/rnV/PUDlsK3l+U=
Subject key identifier: 75:4F:F3:4A:AA:E0:B9:47:65:25:DC:D6:37:C8:DF:6A:01:8C:4A:38
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 01A08CB1A7A9A179A8EB66532D3575A2D19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number: 1A5D
Signing time: Thu 10 Sep 2026 19:00:47 +0000
Manifest this update: Thu 10 Sep 2026 19:00:47 +0000
Manifest next update: Fri 11 Sep 2026 19:00:47 +0000
Files and hashes: 1: 5CrZJSgU3umnhBpv3SBW8GVEgqE.roa (hash: 2gixcHV7KBq6bvuQpRe8OX0ebav7J2q4kd7P6HGr740=)
2: 66eo3bJdi9RGbEdDXS4tD5cqq_o.roa (hash: 5t8peN4WCQBgYdxTrPyY0DXm3aBeHyQsSo4GmYIKBxg=)
3: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: ymQhwwqpypmvKphbTIwan7oV9X/GthMusvAl/7vINS0=)
4: K_ZSiUHd1rB1pcqdi19och0DGOM.roa (hash: 8mJ7F1VxOqtPJAA3HEixFXJNyvdHfHViy/fRZXdsxig=)
5: QPcZtk0DXKyMJbNEz2ZuJuMfm00.roa (hash: umOLljeZUfmplY2DajwQdgANFJvFzfTBHi6UK1dXAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:a7:a9:a1:79:a8:eb:66:53:2d:35:75:a2:d1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Sep 10 19:00:47 2026 GMT
Not After : Sep 11 19:00:47 2026 GMT
Subject: CN=754ff34aaae0b9476525dcd637c8df6a018c4a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:78:4b:0b:63:e7:c5:79:74:63:8f:81:4a:
bc:0d:ab:34:b8:27:ae:5f:d7:96:20:ee:92:06:27:
c7:ca:3d:61:bc:49:1d:87:38:d3:30:04:9a:2d:43:
cc:d0:e4:3d:26:9e:fb:3c:e2:e1:30:79:c0:55:af:
5e:26:db:ab:63:ba:76:c2:2d:48:92:f9:6c:c8:3f:
ff:1c:29:0b:51:54:ac:b1:2e:16:39:e9:c0:3a:5f:
4e:75:2e:f0:d6:68:e7:7f:d3:cc:77:49:24:c0:19:
d2:c4:46:c0:b1:24:62:32:01:d0:5d:24:14:55:bf:
19:82:03:33:da:b9:fd:c8:df:0b:94:49:1b:9c:e7:
24:b6:b2:dd:f9:42:d3:54:f6:fc:2e:45:29:0d:89:
27:a3:bf:d1:c8:a8:c5:fd:98:05:8e:11:2a:05:fc:
82:06:ba:4c:f6:06:d7:7c:c9:fa:80:81:5d:46:85:
c5:eb:40:a9:40:60:43:0c:89:b0:40:06:77:7a:a7:
76:84:84:4d:e2:f9:2e:5a:9b:4f:5e:b8:61:96:72:
9b:64:86:b3:36:e1:98:82:fc:1c:92:82:8b:b9:2a:
f5:90:92:f2:ec:bf:0f:33:b6:a6:8b:ae:35:fb:5c:
66:f7:da:c1:08:37:ca:93:5a:6c:9e:c3:e3:97:db:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4F:F3:4A:AA:E0:B9:47:65:25:DC:D6:37:C8:DF:6A:01:8C:4A:38
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f6:e0:bd:ee:be:aa:a9:a8:57:33:35:b3:64:ed:35:ff:5e:
b0:5c:2a:85:de:43:15:b2:55:0e:fa:0f:fb:49:c2:11:d8:9a:
f7:00:e6:40:b3:1a:5c:73:8e:8a:7c:e4:70:5c:48:aa:fd:d2:
ce:a9:fe:2d:3d:65:11:e2:70:5e:83:c3:74:96:23:a8:72:db:
b2:12:fd:96:70:c1:1b:b7:7e:b5:68:64:1d:32:28:06:66:80:
4b:8c:71:60:ca:ec:71:f8:e0:8f:61:e3:44:cc:9d:22:d8:cf:
cb:32:85:26:26:be:c7:05:39:fc:e5:58:d4:a5:07:aa:9a:6b:
6f:16:0f:06:63:fe:50:8e:6c:93:63:c1:68:cf:f5:08:46:bc:
dc:14:2f:5a:e4:26:22:04:3a:89:84:68:85:35:3a:3d:56:3b:
1a:01:7f:25:29:7b:3b:6d:78:5a:bb:26:9e:97:e3:b4:8d:8f:
8c:f9:6e:00:4c:b9:97:cb:e8:26:0d:6c:ad:a8:b5:43:70:cb:
2b:d5:49:f6:31:26:c3:42:cd:1c:d6:83:d2:ed:1b:92:61:fe:
4a:16:9d:9d:e5:40:7e:26:ad:da:2c:c2:73:76:94:74:bc:6e:
9d:39:f1:64:72:5b:79:41:76:b6:68:ce:db:a4:0a:4f:45:43:
87:a2:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:33:10 2026 by rpki-client