Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
File: D06qexV9TCV1EB0q4i7uhcIuWEI.mft (raw, json)
Hash identifier: JDGFHk0L0u/8XKn43ys7nbQzmAa3qr4HJcy53D6085Y=
Subject key identifier: 8A:71:F4:BB:9D:38:B3:5F:E8:6F:65:0E:2C:63:0C:31:E4:48:64:A3
Authority key identifier: 0F:4E:AA:7B:15:7D:4C:25:75:10:1D:2A:E2:2E:EE:85:C2:2E:58:42
Certificate issuer: /CN=0f4eaa7b157d4c2575101d2ae22eee85c22e5842
Certificate serial: 01A040F2C7592B59602B001E5022D56C9887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D06qexV9TCV1EB0q4i7uhcIuWEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
Manifest number: 0158
Signing time: Thu 27 Aug 2026 02:00:47 +0000
Manifest this update: Thu 27 Aug 2026 02:00:47 +0000
Manifest next update: Fri 28 Aug 2026 02:00:47 +0000
Files and hashes: 1: 8jdCqTVjHLso8RGRhYig24As6Hw.roa (hash: 3D37NyFExPQXRihgpk761P7gkxTDxts0n/acpzT0qdo=)
2: D06qexV9TCV1EB0q4i7uhcIuWEI.crl (hash: WF9/fwvQId0yQFm7DwVatTGt24r5rRVCgI92JjjQOO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D06qexV9TCV1EB0q4i7uhcIuWEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:c7:59:2b:59:60:2b:00:1e:50:22:d5:6c:98:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4eaa7b157d4c2575101d2ae22eee85c22e5842
Validity
Not Before: Aug 27 02:00:47 2026 GMT
Not After : Aug 28 02:00:47 2026 GMT
Subject: CN=8a71f4bb9d38b35fe86f650e2c630c31e44864a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:13:11:6e:80:5c:d6:f5:97:37:7e:35:9c:
d4:20:eb:53:11:44:88:f0:23:bd:70:2f:d8:63:5c:
90:00:b7:0a:55:5c:d3:d1:20:a4:a8:55:23:f1:df:
ad:2f:ad:9d:67:67:a0:e5:97:9c:2e:41:df:3b:ea:
57:8c:01:a7:90:ae:50:16:0d:2e:26:43:92:a0:8f:
58:bc:c2:90:59:f3:bf:0e:09:6a:6c:6e:83:64:7e:
c1:82:d6:3f:d3:87:66:6c:41:3e:18:42:4a:c5:a4:
f1:56:11:c0:4d:4c:36:0b:ee:9c:8b:5e:7e:2d:40:
03:27:4a:79:22:ea:dc:63:15:62:9c:ce:fc:f4:e0:
d2:ed:de:a0:33:2f:e5:fc:79:f8:1b:2f:8a:0c:99:
47:60:54:ff:10:b1:56:76:13:67:31:af:72:6b:d4:
20:62:9f:e7:c4:0d:cc:05:1b:19:f9:0b:e1:ef:cb:
e2:a6:28:40:fc:c4:ee:3e:51:fb:76:49:4f:07:65:
66:b0:8e:f8:68:22:9e:62:e8:01:45:e1:67:99:24:
e5:11:c0:8a:de:86:26:71:a8:45:ee:cb:34:7a:84:
7e:a8:45:8d:eb:18:e0:bd:67:e0:8f:28:1d:bc:19:
0c:c6:9d:fe:48:2e:5f:e8:57:1b:3a:ef:b1:74:79:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:71:F4:BB:9D:38:B3:5F:E8:6F:65:0E:2C:63:0C:31:E4:48:64:A3
X509v3 Authority Key Identifier:
keyid:0F:4E:AA:7B:15:7D:4C:25:75:10:1D:2A:E2:2E:EE:85:C2:2E:58:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D06qexV9TCV1EB0q4i7uhcIuWEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1d:d2:7b:f6:15:74:a9:89:e2:29:16:cb:df:79:90:5c:71:
10:96:31:ca:1b:78:82:fa:5c:06:b9:be:3f:bf:fa:2d:9f:72:
7f:4b:3c:64:e8:e6:d6:c8:7c:33:53:31:d3:23:e9:81:aa:2a:
f6:c2:83:d3:19:9b:c3:52:74:8d:b7:c8:7d:ef:a6:0a:7b:32:
f5:b8:b2:a2:d0:34:53:fb:48:72:e6:38:96:c6:09:51:7b:c5:
f7:fa:7d:3d:9a:a6:62:5c:91:a5:65:f5:4a:6f:cf:d6:6f:b7:
53:69:44:bf:47:30:a6:f8:28:ed:07:88:b5:5e:f9:99:66:ca:
43:30:4c:e3:94:8e:3e:13:7b:45:2b:e0:1d:33:14:a4:a2:af:
39:d5:35:2d:e2:5a:4a:97:9f:d4:b3:58:c0:6d:e5:44:8a:21:
49:f8:9b:20:74:e4:5a:85:0b:4e:2d:c7:5a:af:29:bd:34:a7:
85:bf:f7:dd:05:98:a1:50:8a:c5:fb:85:06:2b:77:62:3c:29:
7f:6c:a0:e3:04:b1:f9:be:d5:02:f3:df:3d:d1:84:5c:db:1b:
db:13:07:7b:4a:2f:72:a8:cb:ad:72:f7:51:16:e1:19:0a:81:
1c:70:11:15:d2:ad:d0:53:10:5b:69:e0:9f:91:19:b3:12:af:
83:63:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:44:49 2026 by rpki-client