Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: u+WRyMo+Q3ZYdVKjbN6HlxlzfgccV2Fh7Y9Df+3UddM=
Subject key identifier: A7:99:9F:70:19:16:A7:0E:C4:84:91:27:09:8F:4F:CD:E1:70:26:6A
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 01A13FDDF16B9D79B909828910F4241C7F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 14F4
Signing time: Thu 15 Oct 2026 14:01:12 +0000
Manifest this update: Thu 15 Oct 2026 14:01:12 +0000
Manifest next update: Fri 16 Oct 2026 14:01:12 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: /qHxdfp/RbJucuHuQHtMj5FGmzXyg/Us3xtap2nuu4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:dd:f1:6b:9d:79:b9:09:82:89:10:f4:24:1c:7f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Oct 15 14:01:12 2026 GMT
Not After : Oct 16 14:01:12 2026 GMT
Subject: CN=a7999f701916a70ec4849127098f4fcde170266a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:19:c9:57:da:6d:38:7c:4d:78:c7:df:44:
2e:32:27:40:3b:14:86:ff:6f:58:c2:61:ae:d8:ca:
9d:c7:9e:33:b6:5c:d6:81:cf:79:f3:fc:28:d0:45:
c7:21:7c:e9:60:ad:57:0a:15:d3:4a:e6:2b:fa:05:
81:4c:31:ce:b8:de:44:fb:e3:35:ef:27:b0:4b:b4:
1e:e8:46:09:06:80:e8:44:95:2c:24:eb:0d:a6:39:
a2:d1:de:f4:65:99:92:99:11:79:52:df:d4:e5:f9:
0f:cf:03:dd:5e:51:5c:f5:f9:72:21:71:4d:eb:96:
22:b8:1d:b9:2c:0c:6d:b0:f0:6b:0f:bb:e8:9d:5f:
e0:fd:3a:82:21:c6:30:49:e5:bb:0c:7c:22:aa:b7:
d5:80:66:e0:d4:ce:b8:52:02:0a:4c:ae:2e:3e:1f:
95:66:d0:a1:84:0d:e4:3e:9f:77:1b:6b:cc:0b:30:
cd:63:22:95:e6:88:fa:1e:55:ce:7c:d7:16:99:97:
23:6e:26:8c:48:c3:c7:7b:b7:03:24:2d:54:7b:45:
a9:8f:39:ff:98:04:67:dd:cd:be:c4:a4:97:f2:77:
4d:40:28:17:f3:b4:b4:23:9f:c6:0d:85:03:83:ba:
af:f4:ea:81:cd:ec:45:81:cd:cc:c0:34:66:79:94:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:9F:70:19:16:A7:0E:C4:84:91:27:09:8F:4F:CD:E1:70:26:6A
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0e:8c:3a:e2:e3:93:f9:7e:47:f2:60:bf:b7:09:ef:f8:f0:
c5:82:f9:db:b6:5d:74:c0:7c:f0:62:4d:69:31:04:3b:7c:a4:
38:00:8f:f8:50:11:09:5b:57:0a:e5:81:fa:3b:bb:60:34:3a:
08:5b:54:65:83:ea:f5:a8:30:cf:b8:37:75:2e:c7:90:6c:c1:
ca:33:50:16:f6:e8:92:b0:10:6a:86:0b:0c:8b:84:f6:12:1f:
48:f4:3c:52:18:fd:96:d3:91:e1:60:a8:14:f4:53:f4:95:9c:
d4:2c:7a:d0:08:94:08:c2:52:ea:31:b9:57:3e:00:7b:56:b8:
69:e4:5c:15:5a:53:76:77:19:5c:63:51:7a:c5:69:e5:e1:34:
74:f8:1c:a0:7e:55:eb:82:1f:58:d5:76:ae:89:5f:67:88:41:
61:67:35:2e:cd:c3:03:d1:03:e2:26:10:3f:bb:51:a4:21:5d:
ee:2b:c1:2e:4d:84:11:14:40:5b:63:60:da:86:d0:a1:e6:b6:
83:07:c9:56:43:71:5b:77:46:5c:83:9a:b5:a5:83:39:d9:92:
e8:27:c2:52:40:c3:57:71:87:81:e0:05:ee:8c:6c:24:b3:a8:
1b:e5:81:08:e2:10:cc:1e:a8:9c:57:35:89:e3:b3:cc:7c:43:
0f:b7:c4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:48 2026 by rpki-client