
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: 3xF07dUTxl4pnMG0LkT+mFjeK6x8XJrEYsBIJ3OKgcw=
Subject key identifier: 10:73:B2:E0:AC:6F:79:5A:4F:C6:C8:D1:79:CD:2A:C7:8A:0D:1D:86
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 01A13F38F9820325494CEE3D2A984911DEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 154F
Signing time: Thu 15 Oct 2026 11:01:00 +0000
Manifest this update: Thu 15 Oct 2026 11:01:00 +0000
Manifest next update: Fri 16 Oct 2026 11:01:00 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: KFPEuRtduW4LDWpB1tIko0HFtqZpyEF60Q1lF0aH6V0=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:38:f9:82:03:25:49:4c:ee:3d:2a:98:49:11:de:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Oct 15 11:01:00 2026 GMT
Not After : Oct 16 11:01:00 2026 GMT
Subject: CN=1073b2e0ac6f795a4fc6c8d179cd2ac78a0d1d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:b1:0b:3b:d0:7c:12:44:4e:72:c9:23:c1:
50:24:e4:50:86:47:b1:ec:2b:7e:51:3b:4b:19:7f:
9e:a9:64:79:9e:11:da:f4:69:0c:81:0f:0b:b1:ea:
ab:61:cb:bd:47:72:b9:56:98:3e:e7:8d:5e:0a:16:
ec:4a:bf:b9:9b:fe:af:ef:7b:1d:9b:58:89:46:73:
d9:8d:4c:52:05:21:e4:78:33:7f:7f:07:b0:80:0c:
33:bc:59:7b:4f:6f:a3:0a:f8:f6:17:13:0b:c2:1c:
e2:1e:ee:38:fd:a6:b6:58:36:53:03:02:76:b2:47:
a3:16:22:08:03:0e:4c:c8:1b:29:52:56:52:91:c2:
85:ce:c3:fd:bf:79:e9:2c:5c:40:1c:94:8f:1d:b9:
7a:53:0d:42:fb:1f:8e:c1:4a:66:d9:e3:2d:d2:d6:
57:a5:11:50:1a:14:c9:8c:29:14:2e:a4:87:f6:ef:
47:d8:af:b8:f1:3b:62:88:8f:82:0f:ec:aa:26:61:
d4:77:03:6d:d9:12:55:4e:85:0f:5b:10:85:2f:f8:
79:bb:ac:13:76:a3:61:6c:74:35:c1:cd:02:aa:c7:
06:a0:38:fc:65:a9:5b:e0:0f:c5:fa:da:82:3a:d3:
cd:a0:73:a1:48:e6:18:3d:22:0c:9e:73:20:1c:3e:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:B2:E0:AC:6F:79:5A:4F:C6:C8:D1:79:CD:2A:C7:8A:0D:1D:86
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:5e:ac:5e:13:7a:46:32:c2:72:c9:cc:99:cd:3f:ab:56:
ad:2d:86:9d:fb:00:93:58:8d:13:41:39:ab:e8:3b:ad:82:3e:
37:0f:6b:dc:44:66:87:9c:b1:2f:0b:19:a1:6b:cb:2b:4e:e1:
a3:44:48:13:02:fd:d9:6e:88:08:e6:8e:79:6d:ab:b3:02:ca:
2b:23:cc:0f:91:9e:5a:e3:4a:63:15:80:b5:1d:57:36:40:a5:
c4:6c:39:97:15:6c:7b:5e:d7:aa:fb:72:b3:5a:b6:6f:1e:a6:
d9:d8:ea:dc:e2:16:f5:e9:89:71:88:16:87:b8:71:df:95:9e:
cd:c6:e9:91:58:98:b8:6e:d0:b7:47:6d:44:65:9e:ce:a2:f2:
24:0c:b8:ea:9a:a6:87:97:46:eb:7e:8b:30:f7:4c:f8:03:a8:
a9:fb:97:17:20:a4:98:21:9f:9f:37:29:88:8c:59:f2:b8:53:
25:ad:42:76:67:31:2d:e8:23:a0:5e:42:eb:9f:62:09:7b:9b:
f3:3a:9b:14:ff:c3:66:dd:ef:44:2b:6d:cc:a3:46:e5:db:ba:
e8:40:3b:29:e1:32:ea:3b:20:80:ce:26:d0:be:68:67:e1:c5:
17:46:a1:30:c4:aa:9e:6c:25:de:18:80:01:22:fe:95:da:b5:
29:91:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:02 2026 by rpki-client