Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
File: 8vigqhrtc_X7GDLsors1WkMrwDY.mft (raw, json)
Hash identifier: Satfl5wX0NpTRMl2qM2ka0IFNQNsSRipt10jlXoVVJY=
Subject key identifier: 71:55:E6:13:DA:2A:3D:94:54:AF:62:94:D8:F9:6D:AE:CB:F9:82:5A
Authority key identifier: F2:F8:A0:AA:1A:ED:73:F5:FB:18:32:EC:A2:BB:35:5A:43:2B:C0:36
Certificate issuer: /CN=f2f8a0aa1aed73f5fb1832eca2bb355a432bc036
Certificate serial: 01A12AD6A5805C3C57AFFCAC317EDB9B1BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vigqhrtc_X7GDLsors1WkMrwDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:01:12 +0000
Manifest this update: Sun 11 Oct 2026 12:01:12 +0000
Manifest next update: Mon 12 Oct 2026 12:01:12 +0000
Files and hashes: 1: 8vigqhrtc_X7GDLsors1WkMrwDY.crl (hash: vLum/SdTEUS6ljx97/rLlxFcLy94xArx2SbiXI3L/ow=)
2: h7--AovqPGK6NLh-jG9R8rSxBs0.roa (hash: UmwnctJBFA+ypMazpzLAxiY2TTny72pG2Vuqupg1Exg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vigqhrtc_X7GDLsors1WkMrwDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:a5:80:5c:3c:57:af:fc:ac:31:7e:db:9b:1b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f8a0aa1aed73f5fb1832eca2bb355a432bc036
Validity
Not Before: Oct 11 12:01:12 2026 GMT
Not After : Oct 12 12:01:12 2026 GMT
Subject: CN=7155e613da2a3d9454af6294d8f96daecbf9825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:94:33:0c:66:97:9e:40:71:ff:a6:b2:02:
c3:c9:49:25:7c:48:53:1e:41:a7:a1:24:d0:b2:e8:
0c:1c:83:f9:50:c7:fe:5f:23:9b:dc:77:62:12:a9:
e4:ff:54:23:c2:a4:e3:5d:22:10:51:2d:0d:7e:6e:
1e:dd:02:bf:f8:d6:2f:37:4a:f0:61:62:d2:c0:13:
15:6f:5b:71:95:43:62:ae:7a:fc:58:6c:82:72:c4:
5d:dc:3d:e0:78:69:83:ac:78:8c:4b:8e:6f:a0:83:
b7:10:24:4a:79:dc:e4:3e:bf:7a:2d:f3:fd:a1:cd:
22:6f:95:c1:e3:15:f3:eb:07:18:8a:f0:88:e8:01:
ad:1c:ea:3f:b6:ad:11:27:f7:e6:25:07:98:77:a5:
4d:70:df:bd:e2:ed:db:78:9c:9e:84:e0:96:1b:bc:
20:c4:a1:1f:e1:8c:8e:03:04:c9:25:91:23:aa:38:
a4:b4:0f:dd:a8:5f:13:91:d0:89:2c:6a:5d:f7:26:
f8:51:b5:52:3c:6a:4f:57:44:b6:94:0e:1e:3f:ca:
5c:68:e1:98:db:38:8b:c5:5e:3f:a0:71:3b:84:50:
c5:52:74:7e:05:23:ca:cd:d6:d2:4b:f9:03:89:20:
8a:18:ee:c5:dd:d1:e2:70:fd:46:59:d6:83:64:2b:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:E6:13:DA:2A:3D:94:54:AF:62:94:D8:F9:6D:AE:CB:F9:82:5A
X509v3 Authority Key Identifier:
keyid:F2:F8:A0:AA:1A:ED:73:F5:FB:18:32:EC:A2:BB:35:5A:43:2B:C0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vigqhrtc_X7GDLsors1WkMrwDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:da:9e:3e:fe:9f:5a:47:0b:d3:50:c4:25:9a:05:df:06:de:
6e:c2:4c:91:5f:05:64:8e:0c:60:01:59:fc:7f:42:58:2e:74:
91:a6:48:1d:30:28:57:8c:ea:27:24:8c:74:23:ce:62:95:19:
48:75:51:fb:81:bd:d0:69:bd:95:0b:51:41:fe:42:5a:59:79:
9c:ec:19:fa:7a:89:09:34:e2:de:66:12:b7:23:d5:2b:b7:15:
1a:fb:30:a6:e1:07:5f:cc:97:ec:7b:ea:ad:b8:78:36:35:31:
47:35:f7:f0:82:bb:f1:ca:66:c4:95:7c:ef:27:2f:40:9d:a9:
03:9e:02:26:8f:a0:af:52:b9:8b:98:e3:4b:dd:a7:d2:b5:5c:
c3:3b:78:bf:8c:a1:b4:45:25:8a:13:e4:4d:f8:ba:d6:43:d0:
83:83:06:65:1b:d0:8b:0e:57:c7:5e:f6:00:a1:d1:65:93:85:
51:57:b9:f0:4d:63:8a:f4:be:9a:73:77:9c:13:59:e4:7d:36:
22:5d:e4:a4:76:2d:1a:15:96:21:7c:b4:b7:48:8c:c0:fb:07:
64:1d:05:dc:48:e8:56:44:34:36:3b:93:2b:26:84:0b:57:24:
9b:e2:25:b7:43:8a:6f:a2:3e:3e:2f:da:16:41:d9:c8:07:67:
87:c8:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:58:09 2026 by rpki-client