Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: PkyP0LABacBGL+FKwqx8v+of34nNqV9rIlz3kihJ1Vw=
Subject key identifier: A6:49:E9:8F:71:32:16:82:9F:01:F3:D7:8C:AF:DD:42:C4:F0:E9:70
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 01A001DCC6F3FA837613BA58999FA41EB82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0E40
Signing time: Fri 14 Aug 2026 20:00:41 +0000
Manifest this update: Fri 14 Aug 2026 20:00:41 +0000
Manifest next update: Sat 15 Aug 2026 20:00:41 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: Hw2Ylq3wec37ArvyLproJwE24b153YhX8o/R9ODUAHw=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:c6:f3:fa:83:76:13:ba:58:99:9f:a4:1e:b8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Aug 14 20:00:41 2026 GMT
Not After : Aug 15 20:00:41 2026 GMT
Subject: CN=a649e98f713216829f01f3d78cafdd42c4f0e970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:62:38:d8:81:18:41:ff:32:59:4b:d8:f7:
7a:5e:b2:3b:a9:7c:86:40:4a:ad:70:c7:ff:9a:e2:
c2:33:d2:88:fd:16:b0:c3:b3:6f:17:35:9e:1e:3b:
44:68:f7:0e:44:7a:5a:0f:a1:0e:3e:98:3d:aa:0b:
33:c3:e6:65:1f:33:6d:ec:4a:55:aa:7c:22:52:ad:
cb:5f:ec:f6:e1:12:4e:86:3d:6e:87:90:66:5a:3f:
a0:85:d8:07:7f:3a:57:9b:b1:80:17:29:65:91:6f:
8f:27:68:e4:26:df:78:c1:bb:e3:39:d5:07:20:87:
81:92:ae:bb:9a:d2:ca:84:66:b1:48:91:a7:de:bb:
04:8b:d9:c4:d2:bb:1c:29:31:60:65:45:dd:8b:4b:
b7:9e:ce:09:09:b6:1b:2b:bd:b1:6a:9c:94:a4:84:
63:73:f5:51:e3:6e:57:42:2d:5d:fa:2d:5f:de:1e:
6f:91:64:ea:a2:50:3d:27:ba:54:4f:e5:d0:62:b4:
a3:8d:bd:6c:30:4f:8a:18:9b:f6:da:60:f5:96:6f:
05:6f:c5:d4:7e:68:e5:19:fe:2d:07:5b:41:85:4e:
ee:68:dd:ae:11:bb:e0:d0:d8:98:ab:ff:35:d7:80:
7a:98:9d:5c:e6:bc:a8:7b:ce:2d:2a:ba:c5:b1:bc:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:49:E9:8F:71:32:16:82:9F:01:F3:D7:8C:AF:DD:42:C4:F0:E9:70
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:38:c9:22:5f:b9:25:b5:3d:d3:1a:8d:b8:b0:4b:c0:9e:e1:
cf:3b:df:74:ec:2c:e4:81:9e:a4:dc:f8:7b:34:15:7c:eb:5b:
56:09:c2:24:05:20:54:18:54:de:b1:21:e2:c3:4a:f6:bf:b5:
e3:78:7c:52:be:6c:b2:06:14:ec:40:28:df:1c:ac:9b:41:cd:
47:db:5c:5d:34:ef:b5:03:94:9c:55:ae:78:f9:b9:42:14:37:
42:ff:aa:9e:c2:0f:b1:a3:25:82:fb:ce:25:6c:8c:f7:5a:5c:
1d:6c:46:e2:bd:54:1f:1d:79:53:29:f1:06:98:39:bd:3b:00:
4e:4c:2d:16:f6:2e:0e:de:94:42:5e:c9:1d:a8:0e:3d:a3:7c:
d4:79:ab:a1:00:6f:6b:16:a0:93:91:dd:60:5b:10:53:83:42:
5e:ff:5e:05:9d:2f:4a:45:4f:2a:b8:33:6d:ab:f6:7a:b2:1f:
c2:68:1e:11:8c:05:0e:4b:9c:bb:d3:aa:5c:3c:87:4c:6d:59:
02:6a:90:81:5a:4e:cd:5c:f9:1f:49:06:0d:d6:fc:1e:dd:38:
ba:44:1f:6d:65:53:a0:26:50:c7:04:a3:9a:a8:36:33:cd:e1:
28:0e:7e:77:74:02:1d:7f:5a:9d:49:ce:21:ff:3e:a6:52:f2:
ba:fb:a9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:45 2026 by rpki-client