Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: quDhYwOPO8P6HsChtCOs1BDnQkJ7GUvEBA2dR+bowyM=
Subject key identifier: 58:D0:25:87:9A:8A:33:F5:E9:4A:FD:BA:9A:C6:6E:E0:81:A5:AE:BF
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 01A1016D5AA28671D9B471AA886DAA5D0CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 04B0
Signing time: Sat 03 Oct 2026 11:01:46 +0000
Manifest this update: Sat 03 Oct 2026 11:01:46 +0000
Manifest next update: Sun 04 Oct 2026 11:01:46 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: H7/2V+XUL6bRMv1h8rkfgLLyP08Oq1h5uazEcKnRMSY=)
2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6d:5a:a2:86:71:d9:b4:71:aa:88:6d:aa:5d:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Oct 3 11:01:46 2026 GMT
Not After : Oct 4 11:01:46 2026 GMT
Subject: CN=58d025879a8a33f5e94afdba9ac66ee081a5aebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:61:34:d9:5c:7d:8f:e8:65:4e:55:2f:42:
4e:d6:cf:88:b0:c5:63:51:bb:f8:e7:63:f1:6a:0d:
c3:4b:6b:aa:c5:58:5d:7b:8d:e8:72:42:ad:9e:e5:
f2:18:6d:ad:7d:b1:68:84:d4:93:83:ae:2f:37:2a:
f9:52:f9:71:86:8a:ff:c9:74:e8:2c:5c:be:b3:c8:
4b:ad:2e:a4:a7:21:cb:36:fd:85:ce:47:22:47:d8:
44:8a:d7:b5:72:3f:08:e8:73:aa:a7:74:ba:75:d8:
5c:1f:71:b3:c7:28:fb:7b:98:27:1a:d2:b0:5c:70:
e6:a8:fc:8f:2e:4c:85:da:5f:a0:3d:6c:14:ea:35:
b1:57:53:8b:55:03:f5:6b:8a:65:96:f5:9b:1e:22:
ad:5b:62:22:9b:59:40:f5:6e:b7:41:d3:e3:16:f1:
e1:43:8d:c3:c3:81:21:3b:2b:6b:b3:b6:dd:15:1d:
79:6b:d2:4b:cb:de:6b:4e:8d:67:25:12:58:bb:b0:
8d:94:48:bd:12:85:21:c4:ff:b0:b8:62:d4:1a:11:
15:87:4b:76:0f:e2:ad:c8:46:0a:98:6b:1c:1c:b6:
82:18:8c:55:c7:11:31:7d:df:5e:3c:01:35:9f:d6:
d9:6e:c4:b7:f5:6f:63:92:23:1a:b3:4a:d1:ed:92:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:25:87:9A:8A:33:F5:E9:4A:FD:BA:9A:C6:6E:E0:81:A5:AE:BF
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9f:f9:af:5d:f1:a8:88:5b:80:52:31:43:53:10:22:70:a4:
eb:21:44:6b:33:6a:e7:81:cc:17:41:26:77:fe:a4:38:5f:0f:
42:1f:42:4e:01:1e:64:29:58:40:09:cd:96:20:87:cc:14:ba:
a5:58:87:b8:95:0e:0c:f0:98:30:72:9b:90:5e:e6:76:a9:ef:
75:e8:e7:f0:50:46:11:38:59:0c:84:f8:62:7e:21:00:7e:80:
94:af:94:66:1a:ac:f6:be:ab:07:52:40:d3:7d:03:72:b2:4d:
69:43:24:29:68:21:37:10:17:a9:fa:5e:fb:91:62:7d:57:c9:
e3:5c:d0:3c:81:a8:a4:1d:a5:97:cc:f4:f1:ba:cc:ab:a6:d6:
b6:cc:8e:84:d8:af:5c:e5:93:b9:2e:a0:87:3f:5b:b1:05:99:
8e:72:b4:ce:bf:ec:4e:88:85:ac:e9:99:8c:d8:c4:3c:f9:01:
64:16:89:83:b1:50:c3:15:f9:04:76:db:b0:27:e5:bc:74:f6:
ba:0f:21:b4:de:56:bc:87:14:23:71:8e:a1:b1:d9:72:f4:0d:
c2:34:01:70:03:af:e0:23:5f:f0:0c:de:1e:7c:67:51:d1:eb:
ec:1e:ee:12:4f:74:66:d4:a2:78:f6:c7:8e:50:d5:1a:9c:15:
e8:d7:83:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBbVqihnHZtHGqiG2qXQz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODY4MzJhZGRhNDBhOTdlYjg2M2E1YTY0ODJjOTQ2OTMx
YTY2ZWYwHhcNMjYxMDAzMTEwMTQ2WhcNMjYxMDA0MTEwMTQ2WjAzMTEwLwYDVQQD
Eyg1OGQwMjU4NzlhOGEzM2Y1ZTk0YWZkYmE5YWM2NmVlMDgxYTVhZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5shhNNlcfY/oZU5VL0JO1s+IsMVj
Ubv452Pxag3DS2uqxVhde43ockKtnuXyGG2tfbFohNSTg64vNyr5Uvlxhor/yXTo
LFy+s8hLrS6kpyHLNv2FzkciR9hEite1cj8I6HOqp3S6ddhcH3Gzxyj7e5gnGtKw
XHDmqPyPLkyF2l+gPWwU6jWxV1OLVQP1a4pllvWbHiKtW2Iim1lA9W63QdPjFvHh
Q43Dw4EhOytrs7bdFR15a9JLy95rTo1nJRJYu7CNlEi9EoUhxP+wuGLUGhEVh0t2
D+KtyEYKmGscHLaCGIxVxxExfd9ePAE1n9bZbsS39W9jkiMas0rR7ZLL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjQJYeaijP16Ur9uprGbuCBpa6/MB8GA1UdIwQY
MBaAFPKGgyrdpAqX64Y6WmSCyUaTGmbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80NWU3MzgtMjg2ZS00ZjlhLWJhMDIt
ZDk0MzExNDBlNmYxLzEvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80NWU3MzgtMjg2ZS00ZjlhLWJhMDItZDk0MzExNDBlNmYx
LzEvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5/5r13x
qIhbgFIxQ1MQInCk6yFEazNq54HMF0Emd/6kOF8PQh9CTgEeZClYQAnNliCHzBS6
pViHuJUODPCYMHKbkF7mdqnvdejn8FBGEThZDIT4Yn4hAH6AlK+UZhqs9r6rB1JA
030DcrJNaUMkKWghNxAXqfpe+5FifVfJ41zQPIGopB2ll8z08brMq6bWtsyOhNiv
XOWTuS6ghz9bsQWZjnK0zr/sToiFrOmZjNjEPPkBZBaJg7FQwxX5BHbbsCflvHT2
ug8htN5WvIcUI3GOobHZcvQNwjQBcAOv4CNf8AzeHnxnUdHr7B7uEk90ZtSiePbH
jlDVGpwV6NeDZA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 23:29:52 2026 by rpki-client