Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: 8rwltLMKZAgzXCSeHNltGSAfrO+hOrdSwmrRBxH2J4U=
Subject key identifier: 00:BC:99:D4:12:90:D5:5B:85:15:AB:2F:F7:23:19:0D:7B:9D:B8:4B
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 01A12C204062AA26CF1F1FE9B9B4AAFAB237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 0EBE
Signing time: Sun 11 Oct 2026 18:01:13 +0000
Manifest this update: Sun 11 Oct 2026 18:01:13 +0000
Manifest next update: Mon 12 Oct 2026 18:01:13 +0000
Files and hashes: 1: HLxK0SHaAN4A3oDtW-6ynwZMoGM.roa (hash: cKsTdXMzCKVpvlljEBVOuNNhrA+YItiJ4O+zqqSok5Q=)
2: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: B2mOTCZsN1O62H1kbeNVW9gFy7+6PE2ftWnHkBVs7Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:40:62:aa:26:cf:1f:1f:e9:b9:b4:aa:fa:b2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Oct 11 18:01:13 2026 GMT
Not After : Oct 12 18:01:13 2026 GMT
Subject: CN=00bc99d41290d55b8515ab2ff723190d7b9db84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:5b:90:e5:43:b4:e4:36:a1:2c:2a:23:72:
1f:b0:e8:94:84:5e:d2:65:2a:d8:c4:82:a4:33:6a:
52:32:78:09:87:6b:38:7c:fb:91:c9:ab:f3:b6:d7:
c1:29:ee:f7:66:58:32:78:b3:e0:6d:d5:40:51:60:
cf:70:37:53:05:a4:d6:29:a6:5e:36:1b:59:a8:5a:
44:79:ec:b2:28:81:5e:e3:80:d5:0e:b4:d7:67:db:
5d:6e:72:5e:aa:5f:fc:fb:06:f1:95:09:f8:56:34:
3f:a1:23:66:c2:85:6b:55:98:cb:8f:49:a7:58:93:
f4:24:29:ed:e3:b3:b9:75:02:80:58:b9:5e:d4:fd:
f8:24:22:4e:86:c4:9b:36:74:ee:35:73:5d:21:2a:
12:7d:18:0f:58:8a:03:95:16:85:ea:62:d1:c6:f8:
8b:ba:93:ac:e3:fc:2f:fd:3f:c4:43:ff:1b:8f:9c:
5c:18:03:c7:7a:14:38:45:ac:eb:9e:ee:5b:b8:d5:
a8:23:e5:b1:87:b0:19:aa:b1:5b:c1:e3:e6:f0:63:
e6:18:4c:64:29:03:6c:9f:aa:f1:bd:30:d7:e1:05:
ee:16:a1:9d:00:5e:e9:22:dd:33:42:92:ca:95:58:
dd:01:26:af:0d:96:aa:f3:85:23:4b:f8:ec:a6:2f:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BC:99:D4:12:90:D5:5B:85:15:AB:2F:F7:23:19:0D:7B:9D:B8:4B
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:c5:8d:bb:e5:c8:86:09:9e:ff:9c:86:cc:95:a5:0c:ab:
e7:21:37:ac:82:6e:ea:b7:2e:45:75:33:8b:e0:96:45:8d:fa:
be:da:fd:0d:d5:bd:1b:0b:dc:db:df:42:30:15:03:3e:bb:60:
ca:4c:ed:73:28:4a:63:19:7d:81:e6:89:9b:28:92:c3:e3:b2:
33:5d:5d:31:cf:45:8b:1e:ad:c9:8f:ee:c8:f0:79:a5:41:03:
82:42:a9:8e:4b:a5:46:47:83:be:10:83:c4:0b:32:9f:43:4a:
5a:b3:5b:81:5d:c8:a1:72:fd:f0:2a:7c:aa:e9:53:c1:d4:9a:
d0:82:e9:19:80:34:ca:14:47:72:0c:1f:03:4b:66:c1:9f:89:
50:59:86:3a:88:93:e5:38:82:9e:a1:6b:54:a4:02:d5:ae:31:
d6:97:de:1b:cd:47:2b:91:d4:d3:55:e8:71:ba:ec:0b:37:8b:
99:bd:6d:70:44:14:b7:5c:f7:bd:14:c3:cc:1a:d1:b3:e0:41:
fb:5e:9b:18:9e:ae:cd:1b:a5:80:c7:b7:9a:89:94:27:e5:1b:
f8:1c:89:69:d0:ed:8f:73:15:d4:15:6b:82:5f:99:76:73:bc:
cd:ae:b1:aa:3d:40:8c:35:7e:da:2d:4f:15:41:c0:43:02:7b:
80:a1:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:00:41 2026 by rpki-client