Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: sOr4D3sSAxY5aPpgMJXNMqJYrqATKK3HMfVyLAYjYcM=
Subject key identifier: 78:8C:D9:47:17:5D:50:59:86:D0:C6:41:13:4B:0C:06:94:7D:9E:D3
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 01A001A5D2C824C1B91995D17AA8E7533815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 12FF
Signing time: Fri 14 Aug 2026 19:00:39 +0000
Manifest this update: Fri 14 Aug 2026 19:00:39 +0000
Manifest next update: Sat 15 Aug 2026 19:00:39 +0000
Files and hashes: 1: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (hash: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44=)
2: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (hash: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4=)
3: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: W9bRDCCMcUWI6Ld5HnxJHC15tanUjGvuq/wlCBX95Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:d2:c8:24:c1:b9:19:95:d1:7a:a8:e7:53:38:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Aug 14 19:00:39 2026 GMT
Not After : Aug 15 19:00:39 2026 GMT
Subject: CN=788cd947175d505986d0c641134b0c06947d9ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:34:6e:65:cb:c9:7b:db:35:aa:e8:54:0c:
db:a6:00:7c:fe:b9:96:9c:0e:58:11:8d:84:94:7c:
29:fa:88:dc:94:ad:92:3c:02:f1:ed:72:4a:0c:7c:
95:d2:b0:a5:a3:91:91:31:44:cf:e6:42:64:c6:9e:
88:5f:46:bd:44:0b:b0:b3:50:51:0a:f1:d5:87:cb:
3b:12:d7:aa:d2:96:e2:06:94:55:4d:5f:a1:2b:4b:
f4:aa:45:67:aa:4a:d4:dd:bd:91:dc:07:23:0b:af:
42:05:a4:93:58:48:31:11:a7:c1:36:7c:b3:3f:49:
a2:e1:11:08:60:d9:3f:b3:22:2c:71:73:32:e6:8f:
dc:e6:c3:91:d3:d7:f7:4c:4a:85:43:eb:bd:d9:b5:
8d:1b:5c:95:b2:b6:c2:ad:a5:b6:2e:a2:9f:ea:bd:
43:2f:4f:ba:6d:49:59:80:00:6c:3d:71:0e:1e:03:
92:0e:76:c6:95:d9:d4:c0:b1:31:e7:cb:1e:fb:32:
d4:6e:7c:3a:b4:c5:33:da:b3:4e:52:3a:58:5a:f5:
0b:5f:10:1b:c6:6b:01:04:66:6b:d7:2b:58:b8:1b:
20:21:bf:5c:b1:06:bd:94:36:bb:80:91:12:10:fb:
d0:10:e7:30:d1:d3:01:0b:c5:0d:a4:be:e2:6f:e2:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8C:D9:47:17:5D:50:59:86:D0:C6:41:13:4B:0C:06:94:7D:9E:D3
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:37:51:00:b8:b1:5c:b2:e3:b6:d5:73:10:d0:98:aa:7d:bd:
17:58:00:d3:b8:f7:f9:f1:b2:14:15:52:ae:22:80:64:1d:f4:
b4:b8:7a:b9:15:2e:34:d5:5d:29:10:48:d3:19:79:25:44:aa:
04:40:20:91:c4:c9:56:f2:2d:a2:d6:22:41:7a:72:e7:f0:39:
f7:11:56:e4:7c:38:b7:c8:fd:4e:56:5d:31:a6:c2:a1:77:9d:
a4:f3:01:79:4d:6e:68:ec:a5:b2:c8:3d:5a:ee:2e:b0:c3:8c:
d3:fe:78:cc:2b:88:31:d8:7f:f9:3a:fe:04:f1:83:e3:7d:cf:
0a:d4:8b:e0:88:9a:e1:cc:9e:da:cf:5c:20:b7:7a:07:cd:88:
fb:c5:90:1c:8a:30:ed:bb:36:45:31:49:3e:1f:74:0e:86:a0:
4c:89:83:1d:06:18:b9:9a:5e:0b:da:f6:cb:e5:6a:59:d3:d4:
c9:ec:65:0a:90:f6:1f:b3:01:8e:95:62:27:55:97:8a:cb:c6:
4f:27:c0:72:ba:de:c3:dd:1c:3b:b0:16:de:7a:ef:e5:26:f8:
1e:68:f7:49:8a:fe:db:ea:96:07:2f:73:9a:fd:08:ca:5d:a0:
d0:b0:e1:49:ee:fe:e5:9e:9d:3a:86:33:90:57:b4:79:77:39:
28:0d:8d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:14 2026 by rpki-client