Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: kQON0ZIIdJM4Y+SncNzlRFXYs19dzoo4mtkcDUsnucA=
Subject key identifier: 05:9F:3B:56:8F:A6:0B:D5:15:2C:19:6B:3F:BD:1B:8D:5D:04:29:5E
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 01A00093D18055E42BDB629FC879F5DE1BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 14AA
Signing time: Fri 14 Aug 2026 14:01:22 +0000
Manifest this update: Fri 14 Aug 2026 14:01:22 +0000
Manifest next update: Sat 15 Aug 2026 14:01:22 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: okT9tAXXzNZPT620IbDbzBuxeWUv5ojL9MxhqoMgA3U=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:d1:80:55:e4:2b:db:62:9f:c8:79:f5:de:1b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Aug 14 14:01:22 2026 GMT
Not After : Aug 15 14:01:22 2026 GMT
Subject: CN=059f3b568fa60bd5152c196b3fbd1b8d5d04295e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:c2:a4:33:7b:bb:3a:c5:62:06:b7:b3:4d:
79:89:af:75:b9:35:13:10:bb:17:06:da:ba:e3:26:
38:7e:5d:fc:f2:29:78:78:a2:24:e3:06:d7:e7:24:
e2:22:ed:c8:c9:6f:e7:df:3c:b7:38:63:b0:c6:5f:
48:53:0e:bf:d1:0c:a3:4c:33:cb:a4:79:2c:e2:a7:
e9:0e:4b:f4:1e:e5:60:02:4b:68:92:e3:68:b9:63:
1f:b1:6f:35:28:a2:08:b5:ad:42:a4:57:f2:ba:43:
60:f9:5f:4d:9a:51:70:55:79:28:89:7a:2e:92:b1:
e0:8a:b3:c3:c8:e3:f9:4e:ce:0e:db:c9:0e:c9:62:
6b:26:e8:4f:21:05:25:56:d2:55:49:5d:07:e0:16:
42:98:06:f2:be:a0:fe:3b:bc:26:83:f3:00:ce:7d:
3f:f1:64:a5:dc:25:13:09:45:1d:0d:06:4b:8a:e2:
8e:42:c7:ec:85:a2:3d:26:cc:a9:ab:9c:56:a6:6e:
dd:74:6d:e2:3b:02:b0:57:d6:ee:8e:35:73:c8:a2:
af:86:5d:1d:73:a7:ec:91:ad:44:d9:89:f7:b9:eb:
47:22:5b:a0:e9:26:0d:d4:3a:0a:ba:ac:9d:e2:bd:
6c:98:2c:33:d4:ee:ce:4e:80:0c:38:d6:38:ab:0b:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:3B:56:8F:A6:0B:D5:15:2C:19:6B:3F:BD:1B:8D:5D:04:29:5E
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c4:d7:42:1b:1f:7c:6e:db:31:50:00:79:fc:e1:fe:99:da:
2c:e5:90:7b:bc:4c:69:5a:40:75:8f:0c:7a:20:8e:f9:93:39:
f6:10:ba:be:38:01:e8:13:4f:83:2a:ff:40:b8:19:c7:ff:ed:
60:d4:1b:b0:da:af:34:29:e9:2f:49:23:eb:7e:e5:61:79:a8:
c1:e0:ec:e7:64:79:23:13:c6:5b:6a:c0:4d:c8:42:73:f7:35:
0c:0c:ef:18:41:2d:1d:4f:69:b0:e8:fa:b1:84:45:6b:6d:38:
98:ce:3b:8e:64:59:fb:6e:58:c3:6f:d9:53:42:7e:a9:7f:5f:
c9:30:f2:05:5d:44:1e:47:c8:fc:a1:a5:04:06:fa:22:9b:a4:
83:7b:06:a1:ab:f8:84:b3:1e:2d:87:40:8b:6e:0f:5f:eb:fc:
05:79:14:0c:51:49:9c:d0:5d:42:f2:06:69:ce:07:8a:df:6d:
2f:c9:38:b6:a5:0e:fb:96:d2:3b:34:7f:f4:ad:68:32:75:f3:
a2:a2:86:4c:17:f5:87:18:10:9f:0a:ec:9a:0d:b3:fd:38:c5:
73:f0:9f:4d:52:90:1c:21:06:37:92:97:3b:b3:cf:71:29:77:
e3:a7:40:06:dd:0d:a0:5e:05:e0:a0:ea:57:1d:50:fe:93:87:
11:7a:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:02 2026 by rpki-client