Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: 71T36gzswmsI5KSzKbTvfcvBc/XsK/pIq73bihONrvk=
Subject key identifier: D2:76:0A:E9:AB:69:8C:15:D5:4E:09:38:CC:5F:37:82:BF:36:21:32
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 01A0E7AE7210F1D0694B3CDC57F5F5F8DF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 0D6A
Signing time: Mon 28 Sep 2026 11:02:44 +0000
Manifest this update: Mon 28 Sep 2026 11:02:44 +0000
Manifest next update: Tue 29 Sep 2026 11:02:44 +0000
Files and hashes: 1: dOj9E6FS6DEoaUcEFe4gpHgcFuo.roa (hash: dnfO9626LH91ChjEi8apYPGETS9gQAIqmrEgki3RmE4=)
2: s8k12EMWos9WpllXttebevgRpwc.crl (hash: 0MIMiGaJPSKfXB55l0s+E0gKUKpZLn1HuPCsgzi84xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:72:10:f1:d0:69:4b:3c:dc:57:f5:f5:f8:df:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Sep 28 11:02:44 2026 GMT
Not After : Sep 29 11:02:44 2026 GMT
Subject: CN=d2760ae9ab698c15d54e0938cc5f3782bf362132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:ad:31:52:b2:6f:93:1a:21:dd:b2:b5:2c:
15:10:9d:05:af:2b:b4:34:7b:8d:8a:ff:ad:48:b1:
af:f8:14:6d:43:d0:dd:08:5d:75:6f:fb:6a:2e:ec:
d1:f5:db:c6:5a:4f:36:03:0b:a9:97:5d:09:f7:0a:
4a:20:33:9c:b9:6d:79:58:ad:fb:9e:e1:34:75:51:
d5:86:2e:f4:75:eb:0d:03:b1:d6:1f:89:4a:33:6b:
d0:e1:4b:5a:d6:4c:64:6c:04:35:5d:1f:6d:54:51:
8d:da:36:ed:50:df:59:78:79:fa:90:6c:63:cd:2d:
5a:17:f9:df:93:ed:ae:8d:02:e8:e0:b3:8f:d7:b1:
b2:51:28:e4:79:a1:d5:db:8a:eb:70:8e:13:58:68:
2c:32:eb:c9:aa:5c:24:2d:6e:68:88:db:53:8f:d7:
75:d9:3c:1b:1c:7c:70:ae:7a:e7:6a:87:b0:a8:18:
ba:5f:b1:21:45:7e:16:c1:1e:f6:7f:34:30:c3:24:
55:90:68:80:ca:87:14:c3:11:ca:d7:e4:18:cf:1b:
42:54:2b:a5:03:d5:b1:56:f5:b4:0a:b9:c4:ab:3b:
be:e2:88:22:d6:b9:11:61:e4:18:30:cc:6d:bd:7f:
f8:fd:1f:43:53:3e:04:98:ac:a0:32:f2:34:2a:aa:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:76:0A:E9:AB:69:8C:15:D5:4E:09:38:CC:5F:37:82:BF:36:21:32
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:43:55:0b:c2:d5:45:61:03:28:f2:cc:f1:d6:fe:25:9d:b8:
a9:cc:82:d7:01:e9:14:36:ba:2f:9b:c7:0c:46:d7:54:73:a5:
a0:7b:9c:09:93:8c:64:11:80:59:9c:21:41:a2:3c:38:49:d7:
9e:b1:c8:00:27:5b:81:db:66:f9:fe:fb:fb:c9:5f:3c:0b:71:
6c:c2:5d:b1:b8:34:e1:9e:bf:25:ec:02:1d:ae:bd:6c:ec:af:
49:e6:b4:de:b1:35:05:59:0a:6a:38:a2:c0:8d:12:93:93:ea:
7c:a3:b0:68:b1:fd:09:63:55:1d:f4:2e:95:45:cc:ed:f3:20:
b7:ae:45:ff:5b:3a:9e:03:51:c2:aa:30:3e:83:ef:e3:55:36:
df:18:24:31:8e:64:06:e8:5c:23:74:a5:e1:9c:41:55:f6:07:
e2:83:a2:49:38:92:02:19:d9:5e:c4:98:ba:aa:5c:c3:09:2e:
4f:0e:97:d6:69:44:cd:d5:6a:f0:d1:b1:5b:ad:48:fa:fb:b4:
cc:83:70:80:b9:26:1b:2c:88:b4:fb:9e:85:06:8e:16:8e:89:
7e:9a:1c:8c:44:1c:35:30:6b:f2:3f:64:a0:a2:bf:8d:db:23:
23:15:62:43:64:1b:9f:e2:bb:28:8a:a3:a4:db:ba:e6:44:45:
86:6b:3a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:09:30 2026 by rpki-client