Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: P+f1M2gzsgjB2xTn7ODXFPkFr1tnAycMlE3rowBg0p0=
Subject key identifier: 85:7B:60:16:73:63:DD:26:6F:19:97:0F:03:32:A6:72:CC:23:36:79
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 01A13D49DE68F606D799D3CD633090592FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 1199
Signing time: Thu 15 Oct 2026 02:00:13 +0000
Manifest this update: Thu 15 Oct 2026 02:00:13 +0000
Manifest next update: Fri 16 Oct 2026 02:00:13 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: 3H8lgxwpaD/QCPHq9C4PujivGx3Bc+Ty7LEkfj1qi9k=)
2: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (hash: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:de:68:f6:06:d7:99:d3:cd:63:30:90:59:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Oct 15 02:00:13 2026 GMT
Not After : Oct 16 02:00:13 2026 GMT
Subject: CN=857b60167363dd266f19970f0332a672cc233679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:08:59:a2:2b:33:9b:32:a8:a1:4f:b2:5f:9e:
48:ec:4d:8c:75:09:aa:90:c2:46:3a:1d:5e:62:f8:
ad:51:00:f1:a4:b5:62:7a:05:38:c4:9e:0a:f4:a8:
75:3c:53:a4:ca:69:c6:99:e1:b7:8d:8f:bc:35:1a:
bf:01:08:e5:31:98:ab:13:71:c9:cc:ab:9f:72:32:
0f:30:30:3a:18:37:ec:1e:af:81:13:68:e2:7e:65:
81:78:26:db:80:a0:bf:24:21:cf:15:55:c8:f7:dd:
6a:af:0f:70:17:2b:7f:c4:ea:a3:d9:c8:7d:e4:7f:
20:f6:6e:ed:3f:1d:1c:f8:fa:23:b1:82:2d:ed:6e:
2e:97:70:b2:1d:ba:46:f1:39:90:86:6b:07:a6:9a:
53:10:61:8e:6e:a2:5f:24:69:4d:8f:37:d3:12:36:
1d:e1:c2:c8:f0:b5:65:e0:49:65:a4:7f:10:cd:ff:
22:d8:e3:34:99:74:48:e8:fe:99:b9:bd:19:f4:32:
0f:44:ae:67:4a:c2:9b:b9:d1:f1:67:91:fe:1b:ac:
2d:dc:1d:bc:a4:d4:80:dc:41:88:90:d5:6d:cd:5f:
38:3c:5e:6d:e0:57:84:9e:75:fd:4a:6b:6e:39:0d:
c1:83:d7:e4:d1:18:d8:99:97:c1:9b:cc:75:48:f1:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7B:60:16:73:63:DD:26:6F:19:97:0F:03:32:A6:72:CC:23:36:79
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8b:da:3f:b6:81:2d:b3:b1:de:32:5c:56:41:9e:d8:5e:c9:
84:86:23:7a:fb:e4:18:75:54:bd:a9:b0:8f:66:47:43:6e:b1:
ca:c5:13:41:ea:e8:9b:88:e1:45:9c:85:b0:78:f2:bf:25:b1:
64:c5:a2:95:aa:14:11:99:ed:3c:1e:dc:87:95:71:69:1d:c5:
ba:96:41:ae:2a:9c:02:68:63:db:0e:da:0d:f7:81:d9:6d:b6:
e8:34:7f:1f:e5:04:9d:73:6d:e5:ea:09:41:a7:04:5c:27:3f:
8b:0f:73:d3:27:6e:5e:06:59:92:13:3a:95:32:e0:bf:82:66:
51:40:81:7f:9d:ac:df:85:64:a8:27:d3:b6:54:18:4f:50:cc:
f0:f0:74:31:fa:76:ea:0d:b7:b1:37:1d:a3:43:76:b7:45:d7:
ad:fb:68:e8:3e:a6:0f:48:9e:54:07:24:5f:14:9b:ee:f6:21:
b0:3d:cb:e1:9d:6b:cf:3a:f9:c8:c2:ee:d7:59:c0:da:1d:4d:
d9:ac:ab:14:6e:a3:84:7d:23:06:a4:6d:e0:ed:3c:f4:66:27:
7e:e0:a7:a4:11:e6:e1:97:82:4c:09:c6:39:ac:bb:bb:54:9f:
13:73:75:28:04:9d:4f:39:c4:7a:66:94:14:32:d7:ac:12:ef:
04:d5:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:52 2026 by rpki-client