Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: Ps+52Bh8Joa8dMjsdpMLe2K2y04NjJQTK9eBDGGqyP8=
Subject key identifier: 16:43:8A:90:30:F6:1D:39:EE:58:FD:30:BA:81:DA:6C:6F:C2:95:D8
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 01A001DCDB5C2EC87254A687839CE677AAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 20:00:46 +0000
Manifest this update: Fri 14 Aug 2026 20:00:46 +0000
Manifest next update: Sat 15 Aug 2026 20:00:46 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: K7Ru7EIpjnS/+wpbKxgLL1a7GuqctUjmwrSEATFvPO0=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:db:5c:2e:c8:72:54:a6:87:83:9c:e6:77:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Aug 14 20:00:46 2026 GMT
Not After : Aug 15 20:00:46 2026 GMT
Subject: CN=16438a9030f61d39ee58fd30ba81da6c6fc295d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:d2:46:20:0e:94:13:c2:c1:e5:aa:5d:60:
3c:f0:1d:97:66:7c:9c:79:4b:c4:19:4d:a5:b0:85:
af:64:d8:e6:5f:9a:ba:7c:41:02:93:e9:4d:84:02:
85:e0:30:59:72:b2:13:bc:a0:e6:2c:ce:2a:88:b2:
32:86:32:dd:47:e3:ff:f8:95:72:99:98:96:b8:00:
9e:ea:1b:db:a2:bc:94:4a:e1:fc:9e:c7:89:83:ad:
59:71:11:a8:9f:27:94:b4:a5:bd:4f:0d:b2:52:90:
f2:ac:7a:06:ae:dc:b4:95:42:81:c6:1a:bb:b2:b3:
90:01:9a:1d:ee:9a:65:6b:b4:8e:b4:aa:73:db:aa:
4e:85:b5:81:58:c9:19:ac:fa:69:a1:db:ff:f8:36:
08:12:54:24:56:2e:66:c9:2a:32:69:41:37:08:ef:
87:7f:cf:f7:84:3f:61:52:4f:ac:09:21:42:28:51:
8d:3c:3e:e2:b1:cf:39:16:b0:56:8d:bd:e7:e5:fe:
1d:a5:2d:93:e4:73:16:44:c0:64:28:c5:26:d1:39:
70:df:d3:c3:6f:b0:97:10:7e:f7:38:98:e1:72:aa:
d0:4a:3c:a2:5b:cd:60:8b:0b:bf:60:a1:70:70:db:
5e:a0:14:5d:05:65:96:51:3a:79:8b:10:ee:71:38:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:8A:90:30:F6:1D:39:EE:58:FD:30:BA:81:DA:6C:6F:C2:95:D8
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a0:3e:a4:d2:5c:9f:a7:33:ea:b8:3c:36:26:21:00:d0:a8:
70:50:68:14:9c:2e:cb:3f:e8:ee:0c:a9:58:51:e8:69:20:a8:
2a:53:13:10:64:41:3f:dd:be:68:bb:5c:9a:c0:9d:39:f3:5b:
67:b9:32:02:1b:b7:25:7f:9a:2b:9b:31:97:a8:6f:6d:49:5d:
24:dd:da:c8:c1:00:e8:0f:e2:73:1e:47:e4:23:e7:dc:03:0d:
b8:6c:b7:0e:16:f5:9a:48:a2:e1:b9:05:78:be:3b:65:75:9d:
a2:3b:3f:5c:84:84:7e:57:7b:16:fd:81:ab:46:03:56:4b:56:
88:8c:4c:5a:6a:1d:c5:c6:05:4f:fa:9e:36:b9:f4:0d:4f:24:
0a:09:96:69:cb:f3:10:ae:9a:55:ff:4c:86:f2:8f:7d:ab:e7:
81:44:77:23:7a:02:20:f7:7f:77:18:16:1d:b9:0c:86:03:7d:
19:f0:2a:02:be:bc:37:6a:6c:ea:02:d3:fe:a0:7b:b5:5e:6f:
ec:1a:b0:dc:38:05:8e:a5:64:89:ff:2e:b6:9e:b7:27:65:54:
d9:0c:87:d3:63:d4:67:9d:07:c0:fe:ad:bd:55:a2:0e:53:39:
55:6e:70:e4:07:ce:45:76:13:5e:22:5b:26:76:b1:51:72:08:
44:4e:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:01 2026 by rpki-client