Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: ELsLKM/uwdjjtGu/7t2T0vv7oHWvGuR0PopiR5t5Vdo=
Subject key identifier: DA:99:08:A3:AE:7D:62:02:FB:8D:01:51:C1:7D:95:BC:4E:8A:52:3F
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 01A00025AE58ECD713B2F7FBA8E7595EDFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 12F5
Signing time: Fri 14 Aug 2026 12:01:04 +0000
Manifest this update: Fri 14 Aug 2026 12:01:04 +0000
Manifest next update: Sat 15 Aug 2026 12:01:04 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: /HW+pJ2uCQMc3+eAD9PIyhNhZxB4UEJ2OTCL8agozd8=)
2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:ae:58:ec:d7:13:b2:f7:fb:a8:e7:59:5e:df:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Aug 14 12:01:04 2026 GMT
Not After : Aug 15 12:01:04 2026 GMT
Subject: CN=da9908a3ae7d6202fb8d0151c17d95bc4e8a523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:28:9e:32:75:70:26:00:8d:6f:10:23:a2:
7e:0c:72:ce:21:45:0b:89:b3:a2:68:33:ae:3b:ba:
9d:2b:da:9b:55:cb:bf:fb:84:01:d4:ee:e7:d2:6c:
de:44:21:69:c0:51:4e:44:af:64:a6:b2:56:2b:4a:
45:69:be:6b:e6:c5:89:24:7c:97:1e:e4:5e:86:cc:
47:b2:19:c8:4d:e8:37:65:58:66:30:99:c9:26:b2:
ea:b5:8c:08:0e:b5:1e:cd:c4:52:9f:ed:74:40:26:
ec:2d:43:a8:e0:b0:c6:44:7f:da:ad:64:1c:d0:10:
64:6a:1a:3b:2f:60:80:7a:83:63:cf:ec:52:ea:36:
0f:c3:f3:b1:4e:c2:67:92:b7:53:22:14:aa:eb:10:
00:0a:4c:c5:04:a2:01:b4:d2:a3:35:ae:f6:11:32:
be:d4:6d:16:15:80:02:49:5c:eb:fa:a9:b1:8c:1c:
af:0c:80:82:9b:09:a8:19:ed:e1:38:7a:b6:6d:ff:
6e:2f:88:00:04:4f:c4:51:5e:8a:05:ad:6d:8d:a5:
6d:1a:71:78:23:cd:d7:9a:22:f4:4a:c2:37:e3:ae:
a5:fd:39:7b:35:c5:af:d9:7a:cb:74:73:f2:45:31:
30:c5:20:37:85:6e:49:eb:a7:fa:f6:4f:27:23:ad:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:08:A3:AE:7D:62:02:FB:8D:01:51:C1:7D:95:BC:4E:8A:52:3F
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a2:32:4b:1e:d5:04:a7:41:82:aa:e8:73:9e:c7:9f:5e:80:
ad:1a:31:26:2e:fd:bf:11:dc:48:7b:6d:97:40:d4:e3:5f:17:
b1:a6:56:21:b5:57:a9:94:da:0e:3b:f9:2f:f1:16:e1:05:47:
d0:5e:75:70:04:a8:ac:73:35:55:d6:df:01:97:ba:b9:f5:40:
66:14:27:05:57:ab:bc:9c:fc:22:b6:5e:4c:51:95:7c:92:57:
24:00:51:4b:71:db:ec:dc:af:2d:62:a3:25:f9:0c:2f:b8:e3:
5d:ae:39:6d:9c:a1:85:4f:5d:0b:19:9d:88:18:e7:e2:fe:ec:
d5:b0:21:e7:d9:12:ba:a0:05:6e:4a:a7:b3:38:28:87:d5:a9:
f0:f7:56:28:5e:9f:36:d3:e7:8e:5b:1d:87:15:e0:9d:85:47:
f1:52:2c:48:1b:4a:7c:c4:c5:b7:c7:4a:82:af:20:3f:1e:e4:
53:1c:cc:5f:0e:7e:2c:a1:3d:d2:fe:21:e3:a4:9c:3a:93:c6:
d5:18:a5:b9:97:ec:3e:c9:6a:7d:17:a1:cf:db:db:22:6f:bb:
9b:0a:e3:de:f2:17:03:5b:93:f3:46:3e:7f:4d:55:4e:94:ba:
e2:2f:a9:ac:d0:fa:6a:52:52:cd:02:e2:a9:45:48:b4:70:8e:
9b:9b:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:25 2026 by rpki-client