Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: wvnSvtHk/TPNSmVsWU5+T4AnCovaLYrls2Bd7Wb7364=
Subject key identifier: BB:2A:A2:67:05:02:17:A1:7E:B4:04:0C:F5:B6:25:26:66:52:02:07
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 01A0D3F0558F54BAAC8ED864F39CECF65167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 15:02:18 +0000
Manifest this update: Thu 24 Sep 2026 15:02:18 +0000
Manifest next update: Fri 25 Sep 2026 15:02:18 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: XQLzXYBp5nOUWIFWg33KPsVG/X8oLX/dwacW6dcibrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:55:8f:54:ba:ac:8e:d8:64:f3:9c:ec:f6:51:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Sep 24 15:02:18 2026 GMT
Not After : Sep 25 15:02:18 2026 GMT
Subject: CN=bb2aa267050217a17eb4040cf5b6252666520207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:a8:1c:83:14:77:13:ec:ff:d5:50:d6:0b:
aa:11:9f:46:3d:eb:1a:43:36:4e:1f:17:22:28:66:
86:74:78:c5:6a:ac:8a:2d:2d:6c:6a:13:0a:e2:7f:
ef:19:3f:a6:06:75:39:df:d2:7e:33:14:bd:35:d2:
c9:34:23:fb:1f:57:54:81:5a:9b:62:f7:9e:bb:42:
13:1f:69:b0:bc:7f:6c:bb:ad:bc:26:9e:63:68:f3:
38:36:a9:ef:2d:dc:a7:2a:dd:39:98:0c:eb:d4:fa:
da:d7:f2:a8:3f:ed:f4:55:06:a3:7c:47:69:eb:76:
81:5c:bd:95:87:ba:9f:ea:1b:f2:7b:91:14:e5:b9:
17:34:b7:5c:bd:a1:51:95:04:d0:a5:11:b0:6f:ea:
7f:ba:b1:28:39:85:c6:73:b7:86:3c:80:55:6e:72:
da:ab:75:c5:a0:07:b0:ea:14:3e:56:c9:04:50:ca:
b0:42:e5:84:df:a6:9e:6c:21:45:21:45:5e:e3:27:
dc:34:1f:8f:07:8b:2a:55:84:d7:2c:07:35:6c:f4:
6b:7f:75:fa:31:3e:f7:cc:e8:ba:1d:b5:b9:f9:01:
54:36:9d:45:91:a4:6f:8a:21:b4:7e:7c:47:3d:ea:
ec:17:32:e9:b6:27:6f:f1:d3:5f:5f:d4:ef:97:55:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2A:A2:67:05:02:17:A1:7E:B4:04:0C:F5:B6:25:26:66:52:02:07
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a3:24:38:f4:25:d8:f9:55:35:e2:e5:bf:35:59:98:aa:55:
14:fd:33:a7:9e:2d:10:7e:54:c1:c0:39:c5:c0:88:83:a6:e4:
43:67:5e:ca:5d:36:ed:69:4f:78:05:65:6b:c9:ce:c3:1e:12:
fe:40:b4:b5:95:6f:37:f5:60:d8:a0:5a:9b:9e:d1:da:a7:0f:
76:aa:15:38:8a:ab:36:f0:6e:94:34:20:56:06:8d:77:a4:7b:
ef:0c:01:8b:f4:6e:4b:06:c8:3f:8c:d5:69:9c:ef:f7:fb:5e:
d6:be:7f:28:ed:ff:30:0b:b8:1c:4c:21:bb:a9:f9:9c:07:cf:
0c:51:1a:27:ed:2d:e2:82:08:3a:38:3c:59:6d:16:ca:5f:08:
e9:56:2e:55:f9:47:1d:52:70:d1:1a:5c:cd:3b:29:20:73:8b:
9f:66:04:aa:c6:3e:b3:e1:6f:e4:f2:06:b7:7c:1d:28:99:c8:
84:8f:53:49:38:0b:14:20:79:bf:7b:1b:36:a8:8b:66:c7:30:
0e:e5:0a:b0:88:85:e8:7c:17:8a:4d:3c:7b:7a:84:63:bd:f7:
6a:d4:68:83:ae:ed:2b:e5:d5:72:6c:01:24:a8:f8:2c:0e:f3:
8a:a3:39:a2:f7:cf:97:59:bd:9f:90:97:98:5c:54:56:cb:a9:
67:ad:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:57:53 2026 by rpki-client