Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
File: 8vQKwelzpu2pWuj5lPOipGwwGlE.mft (raw, json)
Hash identifier: NaOQB4p7mTOxxyNS6FXHh4Bdsj7O72lfNp48Rcj+zNE=
Subject key identifier: 15:AA:1F:DB:81:54:94:AE:C6:37:C6:8E:25:AF:33:0C:9A:5A:7B:A1
Authority key identifier: F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
Certificate issuer: /CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Certificate serial: 01A040F2A50001DD0F18B7336F6FBF606CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
Manifest number: 96
Signing time: Thu 27 Aug 2026 02:00:38 +0000
Manifest this update: Thu 27 Aug 2026 02:00:38 +0000
Manifest next update: Fri 28 Aug 2026 02:00:38 +0000
Files and hashes: 1: 8vQKwelzpu2pWuj5lPOipGwwGlE.crl (hash: apT79SbT1wOn+y0Rckn0uDymK9Boa5BrEHqIg+/aU58=)
2: 9eIznmkQ1i1wObSFJhgIo07kbEs.roa (hash: PRIHTF2R61srx/cf5f84GRd6EYSqTtmRTfxJne6LAdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:a5:00:01:dd:0f:18:b7:33:6f:6f:bf:60:6c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Validity
Not Before: Aug 27 02:00:38 2026 GMT
Not After : Aug 28 02:00:38 2026 GMT
Subject: CN=15aa1fdb815494aec637c68e25af330c9a5a7ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:26:bb:12:44:53:17:92:d3:16:af:d9:5a:71:
c3:a2:2b:6e:9a:9a:f4:71:cf:ce:3f:98:07:b8:d4:
00:69:91:3c:80:b1:cb:59:99:6d:c2:bf:f3:33:0c:
f1:1e:8e:62:7a:d2:3f:2b:84:28:ef:d6:1e:9f:29:
ad:b1:e6:1b:33:3c:5e:15:9b:06:53:9e:07:c2:b2:
4a:b8:7c:87:c9:12:a9:46:ca:21:d0:d9:24:46:7b:
3e:9d:f2:b2:31:4e:98:f1:5d:2e:f4:11:65:60:e7:
fa:90:ef:30:99:1c:f5:30:a5:ff:fb:5b:99:3f:a2:
d0:cd:7f:0d:af:d9:66:96:04:cf:ec:63:74:b4:1c:
d1:02:81:8c:d5:3d:d2:38:31:f3:b3:f3:fb:54:f3:
e7:f1:88:ad:e5:0c:5d:4d:78:d2:29:15:68:7d:63:
62:6e:94:2d:1f:8e:38:24:ec:d0:d9:1e:cf:bd:f8:
23:e1:bf:82:be:41:bd:84:9c:4a:48:28:58:14:61:
7b:33:da:03:8c:a1:3a:71:b0:eb:da:9d:9f:bc:b5:
b3:27:d4:23:8f:71:da:18:38:c5:da:9f:ff:8e:06:
79:91:58:78:85:04:9c:8e:d1:7f:e3:06:71:0e:99:
5c:20:1e:74:d7:4c:12:fc:6e:27:a9:86:66:a8:7b:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:1F:DB:81:54:94:AE:C6:37:C6:8E:25:AF:33:0C:9A:5A:7B:A1
X509v3 Authority Key Identifier:
keyid:F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:27:ac:e9:d5:1e:38:3a:38:f1:06:6a:ac:be:a2:d7:e6:00:
24:b1:85:18:8d:81:88:24:ee:80:c4:ca:fe:73:f1:26:1c:d9:
de:7e:c6:96:eb:41:73:86:b2:69:5d:fd:26:e1:21:a4:7d:29:
44:1e:13:3d:6e:d8:1b:64:2c:85:68:f4:0b:94:25:19:a8:e1:
50:28:23:2c:6a:2b:b7:a9:22:4e:71:95:e4:36:64:ef:f1:21:
50:7d:46:45:8f:1c:c0:40:7b:09:aa:a3:8f:d1:fd:f8:22:be:
6e:90:c0:e6:40:8d:1f:c5:c2:de:0c:7d:a5:44:e7:cf:e8:03:
b4:ff:c0:02:e6:62:85:a0:69:f5:fd:16:c8:1a:38:41:54:0f:
40:d4:61:6a:b5:c1:14:54:00:77:3c:13:a5:f7:b8:4a:4e:8e:
e3:9c:ab:ce:0b:17:f9:da:53:0b:58:4e:48:1e:b5:6d:ef:e7:
01:bf:d4:fd:f1:24:76:18:3b:c7:03:51:36:60:d3:7f:92:21:
79:ab:7e:f4:65:9c:b0:38:5e:eb:9a:85:14:a6:1e:42:74:36:
ec:86:90:d0:f3:77:5e:74:a6:46:4c:1c:fc:19:1f:51:b3:8f:
a4:f3:15:df:05:26:8f:83:a7:cb:79:f3:1e:48:3f:ee:cb:86:
7e:4d:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:43 2026 by rpki-client