
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: CH7KKltXIqWDB4WFDcebhEL7/7cTpyHESzDUEfCUB08=
Subject key identifier: 0F:18:8C:D9:1F:91:BA:4A:50:72:5F:1C:45:37:D1:B6:5E:55:5A:37
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 01A002818A7C245DACB38C98859F6F655DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 10F6
Signing time: Fri 14 Aug 2026 23:00:38 +0000
Manifest this update: Fri 14 Aug 2026 23:00:38 +0000
Manifest next update: Sat 15 Aug 2026 23:00:38 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: 7NEKChoSbsg3kJv7wLvwRYVC6sbs6JvmObv5pMZBYAU=)
2: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (hash: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:8a:7c:24:5d:ac:b3:8c:98:85:9f:6f:65:5d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Aug 14 23:00:38 2026 GMT
Not After : Aug 15 23:00:38 2026 GMT
Subject: CN=0f188cd91f91ba4a50725f1c4537d1b65e555a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:f5:6f:97:45:b1:9f:7d:3b:d0:a8:35:f8:
0a:77:0d:ad:d2:d5:88:a7:0c:b6:e7:c4:9b:06:b3:
45:72:6a:7e:1f:b5:1b:e4:af:36:3b:ed:8d:ab:a0:
09:a5:22:b6:a4:64:34:3a:17:aa:1a:43:ab:20:44:
47:4c:09:fa:55:cf:06:7f:65:86:55:95:20:50:69:
60:b4:a1:cd:00:c3:a7:6a:2d:32:c4:1f:e9:36:65:
b2:31:66:0b:81:55:95:26:6b:0d:00:26:44:a4:9c:
25:d0:55:c5:13:27:4b:f7:a0:72:13:89:72:28:b7:
99:90:f1:d4:b1:f6:0d:bf:76:24:c8:e0:e7:f1:a3:
37:bd:09:3a:74:1e:cb:29:7f:34:4b:8d:4e:b7:e8:
c4:31:cb:8f:df:a5:9c:28:b9:25:c5:92:d6:39:5a:
64:1b:db:50:00:2d:85:34:0f:a1:b2:e6:68:69:6c:
6b:7a:5d:27:25:c5:c4:65:f1:2e:c5:e3:05:cf:5c:
ac:7f:86:88:a8:33:03:e5:c9:b0:9e:47:ff:41:dc:
c0:e3:58:02:80:1e:55:3c:b3:d8:fd:e5:ce:c8:41:
fc:90:a9:c7:20:15:94:63:31:0b:39:64:eb:81:ae:
f7:d4:0f:e6:69:1e:ef:85:d7:37:93:db:a1:4e:de:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:8C:D9:1F:91:BA:4A:50:72:5F:1C:45:37:D1:B6:5E:55:5A:37
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0e:0f:00:af:0f:78:93:43:0c:33:a1:26:b4:b3:ce:bc:0a:
82:b0:0e:09:fb:b5:cb:1a:9f:20:de:5e:5b:df:a3:38:65:91:
aa:97:ea:a3:2e:28:9a:2d:ce:4a:b6:88:7c:ad:59:45:ff:0a:
e9:34:80:61:c3:df:51:43:87:08:7d:7c:d5:62:79:20:25:5c:
b8:23:ed:c6:9c:34:06:10:cb:10:d2:f4:35:3a:dc:15:95:b3:
37:ef:8d:21:86:29:0b:14:fc:a0:56:66:47:ac:bf:4c:c6:50:
f4:5c:38:d3:a5:23:df:0d:a1:32:8b:8e:9b:85:bb:57:78:06:
24:df:d1:00:16:f3:49:8f:0e:3a:13:3b:e5:c3:97:f7:c6:08:
63:d9:fb:f1:44:5a:56:c7:02:fe:f0:1e:58:1f:1e:02:7c:da:
7b:c3:3a:71:bf:f9:48:5a:b0:23:e9:0f:59:1c:9a:ff:ba:b2:
ff:f4:e0:11:02:14:90:2f:2b:28:9f:4f:5e:d9:61:b8:d8:50:
4a:b7:81:b7:3d:4a:71:e3:2a:62:9d:b3:10:0b:0e:69:eb:ee:
7e:bb:42:b2:5d:09:e9:f0:55:c3:c7:2a:18:f3:f2:00:6c:8a:
2c:1f:01:3b:1a:9f:95:87:2c:57:23:24:84:7c:98:77:2c:9f:
ec:ca:21:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:04 2026 by rpki-client