Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier: j2ZcO/Vde+Z7HJshVrVohGNcywXdE0Ef08p4ctbjI84=
Subject key identifier: 88:17:CF:C4:D9:97:45:AE:90:6E:55:CA:C4:CD:75:B3:BD:64:DE:71
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial: 01A13D4AAF433FDC53FEE2E6E76742F579E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 02:01:06 +0000
Manifest this update: Thu 15 Oct 2026 02:01:06 +0000
Manifest next update: Fri 16 Oct 2026 02:01:06 +0000
Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: K14LjkCxIXbbL397LEosR5YAXJiGSvHEz5bQyXTIrNk=)
2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:af:43:3f:dc:53:fe:e2:e6:e7:67:42:f5:79:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Validity
Not Before: Oct 15 02:01:06 2026 GMT
Not After : Oct 16 02:01:06 2026 GMT
Subject: CN=8817cfc4d99745ae906e55cac4cd75b3bd64de71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:a9:b5:df:52:d6:93:6c:77:ab:b2:aa:ca:
a5:42:58:b0:a0:7b:ac:a8:c3:90:da:ce:ca:49:5b:
ad:c8:6a:6c:eb:9d:fc:7a:9c:8b:fb:d8:84:58:1b:
ee:0f:71:6d:b6:e2:c4:fc:2c:93:4a:6e:d6:66:7a:
2c:3f:84:b1:56:e9:d3:15:9b:70:fb:20:26:90:9e:
b8:67:3e:96:35:64:38:0e:df:f7:57:f1:dc:71:a6:
69:0a:0b:73:cd:5e:a4:5e:93:09:b6:9f:5f:6c:d7:
12:15:f4:c9:a2:40:3c:ff:a6:6b:5b:15:e5:39:ac:
c2:9b:51:7b:87:06:44:de:86:50:67:80:df:20:92:
14:11:14:2e:a9:6e:d1:cc:06:e7:c8:6d:68:ce:a4:
dd:a0:c8:1e:87:c0:28:4e:d5:53:49:c9:b7:f9:0a:
aa:7a:e8:4b:4a:c5:46:2e:48:39:dc:45:06:01:79:
22:32:89:fb:ac:ce:31:98:9a:bb:83:b0:37:72:6e:
87:fe:77:c0:93:ac:43:b9:b9:af:8f:eb:66:be:61:
a2:9d:7b:57:cf:6d:88:a9:37:41:6f:63:64:8d:b6:
7d:5e:e1:3b:b4:ad:8d:50:2a:3f:7c:ad:0f:15:2e:
be:f7:25:02:94:11:4b:b0:33:36:07:0f:ab:d4:f3:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:17:CF:C4:D9:97:45:AE:90:6E:55:CA:C4:CD:75:B3:BD:64:DE:71
X509v3 Authority Key Identifier:
keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:15:0e:cd:44:84:d1:91:17:39:41:bc:2c:95:e0:34:59:d2:
e1:f2:62:07:01:38:da:48:d9:36:3f:e5:7e:af:e0:6c:21:c3:
0a:2e:15:f5:7b:ce:32:a0:84:36:33:77:1d:ee:01:9f:d7:3e:
05:a8:cb:0e:7b:77:6e:62:cf:0a:72:e7:6e:cb:81:34:fa:28:
c2:0a:23:98:e5:63:4d:94:fb:ec:9a:41:36:60:69:ca:71:ba:
12:aa:30:67:9d:93:3c:76:ae:4e:31:24:6a:ec:d0:83:1e:68:
58:d9:91:f6:fa:b2:08:0f:74:1f:95:87:13:56:22:b9:6e:00:
50:8f:b0:66:96:9a:55:8b:c9:0d:e7:69:9b:e5:a4:b6:6f:41:
a7:b1:38:13:0c:d5:40:73:52:0d:52:c3:64:39:67:d1:5e:af:
36:b3:f1:10:03:e3:ae:3b:11:65:45:1f:09:22:8a:0a:a0:84:
af:a9:5e:7a:3a:bf:87:a8:3d:d3:45:37:60:2d:61:e7:e9:5e:
20:25:5f:97:46:a9:c7:c3:05:af:be:50:90:03:da:1b:ca:20:
40:25:15:43:30:54:53:cc:d6:7a:8d:02:a7:bd:12:e4:b5:a7:
6b:4c:ea:60:d9:0e:7c:0b:11:ac:3f:66:98:50:77:d8:b2:20:
57:54:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:18 2026 by rpki-client