Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: Z/r0fnQH+Y78hWRPO/nBIvm0rjmrstkxHcfQK7/D880=
Subject key identifier: 79:3A:3D:81:21:80:51:D1:46:83:05:CB:6F:F1:7E:57:01:A7:95:1B
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 01A011196948A136CD16BDEDFB486D3F85E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 1452
Signing time: Mon 17 Aug 2026 19:01:13 +0000
Manifest this update: Mon 17 Aug 2026 19:01:13 +0000
Manifest next update: Tue 18 Aug 2026 19:01:13 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: WI0uek/KRtYZEGbrS8KSXU7bbVJs908IyGeGiDNDags=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:19:69:48:a1:36:cd:16:bd:ed:fb:48:6d:3f:85:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Aug 17 19:01:13 2026 GMT
Not After : Aug 18 19:01:13 2026 GMT
Subject: CN=793a3d81218051d1468305cb6ff17e5701a7951b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:83:c0:4f:62:97:75:36:5f:34:ee:65:34:
fa:1a:40:eb:ef:ca:da:22:f9:62:0d:d8:e8:46:22:
47:93:37:50:08:5b:91:0a:54:c1:2e:b9:fd:b1:a5:
aa:eb:53:f5:e1:fa:92:93:c3:ed:8b:5f:26:92:f4:
dd:4e:5a:c4:2a:e9:c8:91:c8:49:17:eb:d0:97:a2:
5e:65:13:5b:c0:5a:68:05:fe:03:ec:84:36:a8:a1:
90:ec:72:d8:c3:7b:aa:5d:a2:91:ce:10:2e:a0:4e:
c7:a6:a4:1d:13:da:1d:1e:04:78:4c:35:05:04:b8:
cf:ef:23:de:aa:dd:d3:36:e1:11:c9:02:94:74:44:
82:dc:a7:4a:65:62:41:c6:b7:90:f1:2e:7e:de:6e:
70:ce:33:ea:42:82:f4:e3:6a:aa:dc:19:a8:a1:08:
8c:f1:29:85:0a:82:d6:8d:4b:97:5d:0f:7e:0c:8c:
3a:74:12:27:5c:ec:8a:b4:f8:9e:d9:85:4d:6b:1a:
a3:bb:f0:7f:f2:19:11:13:e1:b5:da:85:b5:22:ec:
23:3e:5c:13:7c:81:54:9d:8e:ca:b5:37:d0:14:4f:
08:db:7d:cf:68:af:5a:c0:2e:54:ee:dd:e9:a7:15:
a5:e1:d9:c8:37:57:f9:be:e6:7b:5b:4a:50:73:87:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3A:3D:81:21:80:51:D1:46:83:05:CB:6F:F1:7E:57:01:A7:95:1B
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a9:16:92:bf:a7:d9:28:a3:1b:c1:38:55:74:99:2c:67:66:
51:2d:08:1f:0c:d2:62:91:d4:06:56:b1:66:1f:ee:fc:af:9d:
4e:1d:44:d4:e9:cf:57:d0:c8:9e:05:95:a2:d6:15:73:d7:6a:
e7:74:9e:13:2e:f1:52:c8:dd:4d:43:9c:b6:43:61:4b:c6:37:
03:a8:5d:49:db:79:39:61:01:6f:3f:fc:30:f5:e9:19:85:1f:
85:a3:62:2d:14:f2:32:2a:e5:10:9c:8b:b2:ec:82:8c:99:ae:
c9:8e:aa:99:12:8d:ee:61:3b:41:48:c8:80:5d:1c:d8:89:07:
7e:9b:92:87:12:34:c9:18:5e:77:d8:c0:24:ae:fc:5d:2a:21:
c9:60:ca:1a:77:8a:c3:a2:77:27:99:94:69:ae:f4:0a:f7:01:
40:f8:93:76:18:29:22:bf:e9:04:8a:e1:7b:4f:f4:45:e4:5b:
d5:0e:6f:d3:34:8b:96:c1:45:fc:cb:84:cd:7e:f9:51:67:7a:
d0:5e:35:4d:0a:5c:cf:de:01:82:6b:f6:18:12:b4:da:66:36:
a4:46:b3:94:61:10:b1:67:e8:d1:d4:0d:48:c5:ad:f6:27:9f:
0e:34:8b:a5:17:b3:89:f1:a7:91:97:ff:4a:4e:0c:85:59:2c:
8a:d0:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:16:57 2026 by rpki-client