
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: 9PshfmRxkl1NeP78T36p0Xun24vclgYmf1KMYXX3exg=
Subject key identifier: DC:98:AD:E1:0E:87:97:8C:1B:E5:FF:73:82:E4:D8:3F:17:F5:50:83
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 01A00137DDA470BE6D3D495706B5E0E48119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 0A9F
Signing time: Fri 14 Aug 2026 17:00:33 +0000
Manifest this update: Fri 14 Aug 2026 17:00:33 +0000
Manifest next update: Sat 15 Aug 2026 17:00:33 +0000
Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: kCJen4VjtSDIKN3W5ZQ5ZoDwOAHCrnhMlRfyqoJotOw=)
2: CbmENpJLaG0YX9_Gx0vq5uAUoqE.roa (hash: 6zLFAdu+7Zk1blKU97MMoM4dLWkBF7BLSH6EDDgIK/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:dd:a4:70:be:6d:3d:49:57:06:b5:e0:e4:81:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Aug 14 17:00:33 2026 GMT
Not After : Aug 15 17:00:33 2026 GMT
Subject: CN=dc98ade10e87978c1be5ff7382e4d83f17f55083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:09:d7:2c:8d:ac:31:3f:e5:00:da:28:dd:
6e:ba:80:f2:f7:67:cf:3a:1b:7d:cb:b4:7d:fa:61:
79:74:1c:7b:07:c5:a7:cc:f0:4a:38:aa:4d:ab:d5:
d1:aa:03:a0:e7:90:19:3b:70:28:92:32:35:f8:28:
38:f4:e5:05:35:c9:ff:f7:1e:ad:b8:b9:65:f6:c4:
24:2d:16:05:33:fd:0b:d3:6b:86:f7:99:97:a4:3c:
07:4d:9f:9b:70:cb:fc:1a:05:cd:11:12:b1:4b:b4:
9f:f0:d9:ac:83:a6:06:9d:f1:0f:96:4a:46:81:bb:
5a:a2:74:f8:b4:6e:35:19:9d:4e:e3:e7:de:61:fb:
b7:87:44:a5:fb:9b:e8:27:6e:ef:cc:56:24:e9:72:
74:e6:b1:d2:bd:74:da:1b:6b:73:8c:42:7e:12:8a:
97:b9:22:29:f9:5c:2e:23:7d:53:27:0b:4a:47:59:
2b:f4:c4:df:44:8e:23:91:a6:fa:64:f5:80:df:23:
69:83:31:4d:5a:3d:71:59:0b:9b:8f:c9:7a:85:fb:
b1:07:38:02:d6:ac:35:8d:ea:71:70:cb:d9:76:4a:
71:3d:b7:11:b0:cb:82:60:e8:85:e7:5e:d3:e1:23:
ce:23:e7:70:7c:b3:1e:60:dc:f6:50:86:bf:00:5b:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:AD:E1:0E:87:97:8C:1B:E5:FF:73:82:E4:D8:3F:17:F5:50:83
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ea:61:99:49:2d:9a:8f:53:60:83:59:eb:1f:2d:3e:af:73:
82:7d:a4:d8:11:a1:9b:46:e8:e1:ff:1c:8d:44:6b:a0:fe:5f:
59:14:17:30:67:2f:c1:24:bf:d2:23:3d:c7:60:47:49:f2:6f:
83:c6:2f:67:94:9c:ff:a9:fb:b9:51:0a:00:62:f9:6e:c2:c2:
25:cd:34:07:80:96:22:87:c0:b9:a2:64:0b:2f:5f:3e:2a:1c:
f6:c8:49:bc:4d:28:53:d5:6b:10:79:c7:6d:40:8b:8c:87:bf:
e0:1b:15:f1:c2:86:e8:20:9e:65:66:0a:75:4b:4c:36:8a:64:
b5:86:19:7f:67:c8:a3:9a:2b:d4:9a:44:1c:0c:c9:21:c3:0a:
a7:bb:3d:39:66:b2:c8:63:e5:df:f3:4f:1e:8a:cc:cf:04:43:
32:ce:3e:c4:b1:ab:07:ac:cd:2d:ab:7c:a1:e0:22:9f:63:78:
fb:25:da:c0:8d:db:3e:c8:ee:bd:74:1f:08:0f:7e:53:46:6f:
e4:69:5a:c7:3a:5c:64:30:cc:ba:53:93:48:c7:64:4e:50:ba:
27:be:3b:fe:f6:e0:08:dd:48:1e:ac:a8:23:0d:f0:a2:05:da:
f4:21:89:57:e3:d7:97:0a:e8:5d:a5:d0:fb:06:20:35:18:58:
6d:9e:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:15 2026 by rpki-client