Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.mft
File: 8yGP6gYFApn3AjI4MvBll9R7K2g.mft (raw, json)
Hash identifier: MiMWR9UAHGewzcrNWz9lxGLdFjqzsV+Kb4/vyBCmoQQ=
Subject key identifier: 4A:B8:1E:2F:18:C5:5B:63:94:F8:B6:B0:06:09:67:29:61:F8:71:E2
Authority key identifier: F3:21:8F:EA:06:05:02:99:F7:02:32:38:32:F0:65:97:D4:7B:2B:68
Certificate issuer: /CN=f3218fea06050299f702323832f06597d47b2b68
Certificate serial: 01A0412AAE839D9FCBC3A8265AF33A09E306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yGP6gYFApn3AjI4MvBll9R7K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:51 +0000
Manifest this update: Thu 27 Aug 2026 03:01:51 +0000
Manifest next update: Fri 28 Aug 2026 03:01:51 +0000
Files and hashes: 1: 0RtwyRVvjIiWN2cWguOt53v2hjY.roa (hash: mzBpFhzZJKGkwbVMWM32gnUj/RPjVRzflr6kqw19bpA=)
2: 8yGP6gYFApn3AjI4MvBll9R7K2g.crl (hash: xt+g1N80tvzxuRgKgcLG2S7hx9x8s4L2CHuHD9/9qKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yGP6gYFApn3AjI4MvBll9R7K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:ae:83:9d:9f:cb:c3:a8:26:5a:f3:3a:09:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3218fea06050299f702323832f06597d47b2b68
Validity
Not Before: Aug 27 03:01:51 2026 GMT
Not After : Aug 28 03:01:51 2026 GMT
Subject: CN=4ab81e2f18c55b6394f8b6b00609672961f871e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:7e:72:27:d9:44:c0:6f:8b:27:94:3d:6f:
85:6e:43:9f:36:c0:d9:34:2d:61:d9:03:d0:bb:c5:
cf:63:5e:03:9c:59:a7:28:08:6a:39:c7:30:bc:07:
f7:3e:a5:45:74:d7:bc:ef:64:3c:3d:fe:b7:7c:a8:
9d:46:f5:25:69:6a:eb:ea:ef:a1:33:51:ee:8a:75:
8f:fa:2d:90:b8:6e:c4:68:c1:6d:c7:cb:05:8d:e8:
c5:1c:ab:db:b5:73:59:bb:96:86:e6:a7:90:0c:c3:
55:e3:03:72:5d:a9:bf:c4:03:cb:3f:56:f5:ad:bf:
8c:d6:d9:c3:25:05:58:24:be:06:03:e8:5d:19:2b:
fd:19:b2:68:c5:9c:30:57:1b:4c:d2:fa:a2:ca:90:
f0:75:cd:89:f0:43:ed:61:8b:09:ed:69:71:ba:5d:
8b:97:14:9a:d8:3e:b5:5b:1f:9b:e1:b5:3d:9b:0f:
f2:17:65:9a:34:3b:03:8c:ea:5a:8d:43:79:ac:58:
a1:03:0b:ee:62:02:cb:4e:d9:4a:aa:c2:2e:fe:df:
17:38:dc:9b:b6:1a:95:99:b3:c2:52:03:c8:80:7b:
5b:01:dd:db:fe:b2:e2:64:35:9b:5a:07:26:db:92:
c6:b2:89:4d:7b:61:e2:37:41:e8:f7:42:9d:dd:86:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:1E:2F:18:C5:5B:63:94:F8:B6:B0:06:09:67:29:61:F8:71:E2
X509v3 Authority Key Identifier:
keyid:F3:21:8F:EA:06:05:02:99:F7:02:32:38:32:F0:65:97:D4:7B:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yGP6gYFApn3AjI4MvBll9R7K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fe:03:65:16:96:b0:79:95:8a:8a:c7:81:94:49:a6:bd:4a:
72:95:d6:26:75:91:39:8f:76:f6:7f:b9:36:03:b6:ce:d6:b7:
ed:c1:69:f7:b6:6b:16:21:2f:6c:39:c5:95:24:3c:6b:e0:9b:
45:c8:ea:7d:2f:64:e9:7f:a4:fb:fd:31:95:92:ad:05:35:f5:
31:c0:e7:c9:fd:8a:3b:2e:8b:69:91:8e:d1:98:ce:f5:8f:12:
c1:c8:0a:ff:6e:bc:f7:73:6a:c3:23:e2:d5:49:31:26:29:f2:
70:95:b2:e3:20:e8:0d:be:07:c3:ca:55:01:ec:8b:f1:55:97:
c0:46:88:c0:b4:1b:ba:c4:2d:ec:b3:75:7e:45:1f:b6:68:b3:
57:f4:83:a3:34:a6:fc:03:1b:8c:3b:22:e5:71:b4:ef:a0:18:
8f:e4:61:49:cc:0d:de:a3:97:01:80:89:4c:b8:8b:81:ed:63:
2a:af:9d:83:8e:3a:b7:9f:1b:53:bb:3e:d7:64:fd:fe:29:1c:
c0:23:e1:5b:99:f7:ce:71:b4:a7:b7:c5:54:b1:ac:ff:cf:d6:
1a:45:1c:f0:e3:a9:5a:17:9f:e9:63:0c:36:63:b0:18:13:c0:
19:6d:ef:1e:ac:51:75:43:95:ab:7b:5d:0b:35:46:44:c4:56:
f4:8a:58:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:07:37 2026 by rpki-client