Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: DDTPIY08VESKTmn5AIy27rEyNuOGaLkzWEn3mdp1jF8=
Subject key identifier: C1:96:DF:69:C0:E1:85:16:66:00:6A:61:D7:7C:8E:FD:96:4A:BD:58
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 01A0208C2E38B1FB8BA6C82F61035D45D4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 1A11
Signing time: Thu 20 Aug 2026 19:00:52 +0000
Manifest this update: Thu 20 Aug 2026 19:00:52 +0000
Manifest next update: Fri 21 Aug 2026 19:00:52 +0000
Files and hashes: 1: LcqefA0kElh8JewV5kCSLGG-J5k.roa (hash: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: 6bL/lgUjFGPQ7t2yw0FiVPnYxqwslPnyqOlbL034rK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:8c:2e:38:b1:fb:8b:a6:c8:2f:61:03:5d:45:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Aug 20 19:00:52 2026 GMT
Not After : Aug 21 19:00:52 2026 GMT
Subject: CN=c196df69c0e1851666006a61d77c8efd964abd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:56:41:17:51:17:57:e4:63:f5:96:2e:65:
06:0b:d9:ba:75:9a:df:c9:8c:01:db:12:1a:6a:ef:
6c:42:2a:50:da:dc:76:78:da:88:b5:3e:84:2f:32:
dc:34:1a:1d:40:71:d4:eb:df:35:85:21:97:f1:3e:
9a:a8:4c:eb:c3:bc:e0:40:c4:32:50:ec:18:a5:fc:
2b:44:25:c4:17:f0:7c:75:e8:b1:9b:29:5a:f0:66:
45:68:55:67:75:c9:70:5c:7d:94:20:3a:e8:97:f6:
fc:c7:1c:32:97:0e:bd:39:dc:c2:ca:ac:f2:5d:d5:
be:3a:42:17:f6:a2:90:12:03:98:e8:70:34:c5:9a:
65:65:cc:94:e3:51:79:2f:9b:fc:fe:c8:f6:dd:d1:
3c:cc:9e:0c:a9:23:2e:07:6b:83:cb:94:ae:f2:1f:
64:d0:db:b7:81:51:49:7a:18:b9:40:e1:62:76:9a:
b2:ef:db:c5:12:76:c4:94:29:78:76:4b:5b:9d:0c:
09:13:e9:58:e7:7d:e8:d3:b9:1f:9d:9f:ed:01:53:
b4:4e:14:a7:a8:7e:98:38:f1:86:62:a4:cc:47:a5:
81:43:82:7f:28:f4:56:db:6c:3d:ee:79:16:a5:3f:
be:67:16:42:8b:48:f2:b9:e8:96:1b:91:ab:df:ab:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:96:DF:69:C0:E1:85:16:66:00:6A:61:D7:7C:8E:FD:96:4A:BD:58
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:83:5a:d5:86:d3:87:88:1a:1e:b6:e4:ee:26:98:f6:5b:69:
d3:b6:84:00:63:ee:1b:72:70:fe:04:96:08:b9:bf:53:fd:f1:
12:91:e7:a6:43:20:1a:12:ba:fb:c8:dc:be:c4:4a:65:32:ec:
18:9b:78:ed:6d:ca:93:e6:71:d4:2d:3e:5b:84:ea:e0:d6:cd:
64:14:a3:5d:6a:29:0d:ef:3a:47:6c:af:eb:93:4b:bf:ea:95:
3e:bd:b1:8d:27:ba:3b:09:15:fd:b6:1a:84:61:63:20:25:6c:
3b:46:98:3e:ad:86:cb:7b:e1:00:2f:bb:bd:0f:67:2d:ea:ce:
ef:1a:db:9c:a9:8e:a6:59:ce:f4:0d:27:df:ae:6e:1c:c7:ae:
f5:e9:14:d6:d9:82:2f:34:f3:5e:85:bd:5b:3d:ea:46:1f:99:
72:dc:ab:a5:4e:9b:1a:73:02:14:62:c7:d0:2d:1b:91:14:ca:
02:61:dd:01:c8:fa:e5:7d:4c:3c:9d:15:e0:b6:93:d0:6a:0a:
54:21:f9:2e:7c:a6:a9:0b:e4:c6:e5:f1:fa:6a:39:9b:3f:64:
68:e6:65:fd:d5:9f:c3:32:d8:f2:9d:73:95:20:fe:53:a1:6a:
10:1d:a6:9d:6c:55:84:06:2c:d8:c0:83:3d:eb:ec:43:e3:55:
bf:b6:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:25:34 2026 by rpki-client