Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: Kwuk6bx0cOHq21XYtpKy79AEs4IewlC5npTvnKqZxZU=
Subject key identifier: D8:E2:B5:B1:6B:70:63:D8:F1:AD:45:C0:98:B7:D8:DC:28:D1:23:9D
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 01A0024ACE574A1F7EF6F710E0E6231A17A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 16EF
Signing time: Fri 14 Aug 2026 22:00:51 +0000
Manifest this update: Fri 14 Aug 2026 22:00:51 +0000
Manifest next update: Sat 15 Aug 2026 22:00:51 +0000
Files and hashes: 1: 2pSmfbphSDb9Cqxh8NYcKQtlp1o.roa (hash: maKyyaI7uWNQa13JatdDTrRmvHHlkhB9HEz590CRzd8=)
2: PKe_nWV1WYC8Uvt43EaI5fhEWf4.roa (hash: g4HBduXvot1icWiBeoL6eHjklTg5kzpXp411yBBYwAU=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: XXlNE8mISflJBzHXQlX4euFKFpphkl22cgYcEjoeKjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:ce:57:4a:1f:7e:f6:f7:10:e0:e6:23:1a:17:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Aug 14 22:00:51 2026 GMT
Not After : Aug 15 22:00:51 2026 GMT
Subject: CN=d8e2b5b16b7063d8f1ad45c098b7d8dc28d1239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:f6:0b:70:76:8e:40:ab:0c:4f:39:d0:d7:
59:3c:a6:d3:1a:b5:08:28:2c:85:27:6c:e1:85:7c:
d9:17:76:ab:5b:b4:88:bd:ff:aa:0a:a7:4c:65:b8:
a3:9f:04:fb:61:37:48:a0:f7:a9:3c:7f:9e:95:6a:
37:c4:58:10:9e:1b:8f:1a:34:3f:a0:2d:ba:93:a5:
39:ed:6b:e5:d0:13:1e:66:b4:31:a2:67:a7:e4:00:
7d:a5:8a:df:07:c4:96:10:a0:25:65:1b:52:25:f4:
2a:8a:7e:88:c9:6f:29:c8:b8:4b:5b:02:bc:f9:9b:
a4:ab:19:a0:5c:a2:2e:27:ef:84:94:9e:c3:cb:8d:
23:b8:6b:67:ff:a3:b1:74:45:31:53:14:84:d8:95:
a2:bc:c4:07:27:a9:53:a9:10:54:74:a7:d6:79:55:
5d:27:ef:08:12:ad:88:16:1e:7f:c7:fb:03:26:41:
11:b7:02:ad:a4:3d:35:66:e7:24:75:3e:8e:a7:e0:
2d:92:96:93:8c:69:86:ec:9a:e7:77:45:23:19:0e:
13:af:8f:17:cf:6a:63:07:f5:9a:c5:d7:75:21:bf:
f9:0f:65:34:5c:8d:bf:5f:06:85:82:a4:5a:0b:ab:
04:24:62:32:1b:74:f6:c8:f6:8b:e4:08:cf:39:88:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:B5:B1:6B:70:63:D8:F1:AD:45:C0:98:B7:D8:DC:28:D1:23:9D
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7e:91:3e:5c:f8:cf:5d:21:f4:54:4a:ae:32:ad:30:d9:43:
e6:f4:4f:c5:90:8e:59:dd:df:5b:b3:76:14:ba:43:ae:bd:c3:
09:07:ab:8f:cc:28:0f:0d:8e:d8:9a:db:07:02:9a:5f:71:17:
53:13:ef:6d:5c:00:84:15:eb:b8:d9:a4:63:da:c2:a4:c8:83:
0e:7c:37:7f:cb:7a:63:6c:3f:00:05:86:1e:22:cd:f6:cc:ba:
b2:74:bc:8d:96:09:94:e4:ea:c3:b1:e2:b7:a7:f5:71:31:67:
b9:ee:8e:7e:dc:44:66:2c:a0:c0:5b:3a:40:ad:cb:3c:ea:5c:
e5:bf:17:47:9e:a7:63:61:2b:2b:99:ad:4a:94:21:5a:02:27:
a1:30:32:69:ee:e8:34:57:50:b7:cc:54:f1:f4:f3:f5:ac:46:
02:50:43:d6:31:b5:69:cb:29:29:d3:a8:28:03:98:f8:91:d9:
63:96:0a:d2:65:a2:4e:cf:ba:ca:b0:07:62:67:58:40:f9:81:
cc:f4:5c:6c:37:f6:de:05:d5:d8:a8:dd:9b:88:c6:25:4b:f4:
78:50:a2:fe:7a:27:e7:1e:31:e7:86:96:68:1b:2b:15:47:57:
b7:22:23:52:e6:33:9a:30:40:cc:0e:9c:0d:60:a8:36:d9:95:
ee:22:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:55:52 2026 by rpki-client