Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: ZzzjzxbUHHw91Mh2Rzzkk2y6pcf+D7cJp0lOBBm3g7w=
Subject key identifier: C9:D6:8B:07:AE:1E:2D:8E:B7:8E:01:3F:C2:68:AA:31:59:70:00:2A
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 01A00100EDE22D2D98D40C88EAFBD933345A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 080F
Signing time: Fri 14 Aug 2026 16:00:33 +0000
Manifest this update: Fri 14 Aug 2026 16:00:33 +0000
Manifest next update: Sat 15 Aug 2026 16:00:33 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: s0sal1fRbLz3kqNwiqldLtYZj/CzBKANEdqJg4+Z38g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:ed:e2:2d:2d:98:d4:0c:88:ea:fb:d9:33:34:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Aug 14 16:00:33 2026 GMT
Not After : Aug 15 16:00:33 2026 GMT
Subject: CN=c9d68b07ae1e2d8eb78e013fc268aa315970002a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:bf:98:33:f4:09:b1:1d:5b:bc:a3:fc:41:
f2:13:55:1b:09:7e:83:20:99:7a:46:1c:88:b5:d3:
e5:79:22:8f:3b:cd:36:10:65:c0:98:61:ee:c3:c3:
21:0a:53:99:7f:c6:d5:ba:f3:3c:27:6a:94:80:0d:
7d:9c:40:53:c8:4d:1d:90:55:42:bf:90:6f:4e:c2:
fb:28:75:e9:66:7b:10:54:3a:55:91:a7:38:8e:4f:
0f:d9:5e:24:30:40:b7:fd:3e:a0:14:d6:d1:5a:79:
42:02:43:88:b1:9f:7b:38:03:bd:3b:51:63:34:26:
8b:dc:de:c4:c3:21:b0:a9:c8:21:e4:cd:7d:f2:16:
6c:2c:77:ef:56:a2:19:08:be:72:23:94:23:c7:48:
06:96:6f:40:80:74:1b:ee:2c:de:bc:38:4d:3e:31:
1d:6a:83:10:38:8b:54:74:a6:5d:60:91:fc:0d:15:
84:b8:bf:36:7c:59:7e:4e:58:8f:ee:26:8a:64:c7:
e9:a6:08:21:b3:58:03:85:8f:ff:01:2f:14:90:2b:
ce:b3:a2:0e:19:da:6e:a2:fc:d8:f6:ab:13:da:9b:
70:a3:49:b7:a8:d8:41:e4:a1:68:30:ea:ea:d6:28:
c9:82:a6:7a:84:e4:ac:6e:8c:fd:cb:37:6d:26:3e:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D6:8B:07:AE:1E:2D:8E:B7:8E:01:3F:C2:68:AA:31:59:70:00:2A
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f3:67:9c:5e:c4:13:50:a6:19:ef:a3:a6:74:61:15:10:41:
ea:cd:10:a6:5f:43:e2:5c:87:97:ab:c4:23:74:68:0c:3d:f4:
99:f1:12:42:15:db:c0:3f:cd:ee:61:f9:33:44:8f:27:85:e1:
14:2e:0d:44:a0:6b:79:61:4b:1b:b3:36:e5:28:d5:a3:d4:04:
46:4f:be:d6:b3:20:8e:49:f3:fa:40:78:46:9d:87:ee:e2:dc:
4c:ae:af:ad:7e:d1:1d:41:49:b4:70:86:51:7f:59:0c:5b:71:
49:5a:7b:48:22:40:c0:b1:a9:42:43:1f:ae:50:ba:77:fa:37:
4a:1f:61:b2:10:9a:72:58:47:0c:39:cb:70:be:b3:6d:6e:e0:
b7:9c:4d:5e:27:2c:89:e9:aa:28:02:39:89:40:9a:45:c3:f9:
00:44:ef:ea:01:5a:19:8b:d4:b5:45:96:2c:7a:2a:6f:06:4b:
25:56:25:d5:f9:87:4b:5f:bb:5a:d9:2b:47:0a:48:c4:42:2d:
96:b7:3d:66:a9:21:83:83:9c:4c:26:7a:0f:fd:d4:88:63:36:
01:e9:8f:15:a1:60:12:59:12:3b:6d:cf:bd:cb:ed:a4:d7:e8:
fe:cf:bf:78:31:04:33:fe:10:f2:c8:5c:7a:2d:5a:04:5e:f5:
e0:91:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:00 2026 by rpki-client