Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File: rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier: oI8/EPMlazCEwnmcm3O3zjjq8ulOWNCHlCWqaD2JhqU=
Subject key identifier: 3A:C4:C9:E0:1E:FA:31:A7:F7:25:11:5E:8C:A3:1A:FF:DE:81:66:80
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial: 01A0E7AF42A7D216E673FDD71F4607EAF398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number: 15B5
Signing time: Mon 28 Sep 2026 11:03:37 +0000
Manifest this update: Mon 28 Sep 2026 11:03:37 +0000
Manifest next update: Tue 29 Sep 2026 11:03:37 +0000
Files and hashes: 1: 9RnRKei6gl9oZHVCyn4kDQqzyTg.roa (hash: R/Nz+fq8qLQCR73Ef868dsOsi+wbzZuFNF938QY3new=)
2: IgdPfhPl1P3iT1FWrsiJPEWiUf0.roa (hash: qJpCjPIGc1MaV9L1dwnXjXWQ+qoYXiY/1KG2OSBZzVg=)
3: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: +lb1CwNl7uPf25WhrvPNu73x+0fd1VS+LTxLWQ8VRcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:42:a7:d2:16:e6:73:fd:d7:1f:46:07:ea:f3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
Validity
Not Before: Sep 28 11:03:37 2026 GMT
Not After : Sep 29 11:03:37 2026 GMT
Subject: CN=3ac4c9e01efa31a7f725115e8ca31affde816680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:52:34:69:e5:86:00:a8:6e:f3:90:98:82:
87:ea:d7:57:e1:0b:24:65:19:21:5a:e2:d1:ba:4b:
60:63:13:a2:94:03:41:c0:0e:37:94:7d:82:84:a9:
f2:de:a1:94:0b:c6:26:2f:bf:00:c4:42:65:a1:86:
32:0f:60:17:d1:cf:5c:50:93:b9:87:49:67:00:ab:
e1:2e:e1:cd:6c:4c:a9:f8:e9:e9:58:be:4b:dd:a9:
a1:2c:f1:07:7f:89:ce:86:8a:a5:a1:9f:01:8c:8a:
04:72:1a:ae:cc:5e:6d:c9:e8:80:bf:7c:95:da:15:
38:77:11:a1:0a:fe:c7:1f:fa:eb:24:ac:c3:c9:75:
44:92:56:f9:c4:71:1e:b1:6f:26:39:06:7d:98:db:
c3:09:99:e9:a1:e3:0f:75:b2:3e:3c:4a:1d:96:51:
1b:6c:f6:dc:d5:8a:08:d1:df:60:f7:e3:5e:1e:c2:
d0:dd:29:52:f3:43:f1:b3:c2:49:71:e2:31:2a:e0:
40:f8:bc:33:2c:0d:87:81:01:3f:20:68:3c:59:82:
35:f0:3b:43:4f:95:46:d0:49:64:95:7e:20:96:3f:
c7:b9:1b:65:12:25:69:55:d1:de:44:54:67:dd:57:
d2:c8:2a:93:40:a4:af:66:c2:ee:e1:68:0b:21:8d:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:C9:E0:1E:FA:31:A7:F7:25:11:5E:8C:A3:1A:FF:DE:81:66:80
X509v3 Authority Key Identifier:
keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9d:5c:ee:ad:34:18:61:10:d1:76:d7:e1:37:a4:7f:fb:22:
40:d4:ff:80:48:61:e6:34:f0:be:4d:32:75:df:e0:7a:d9:66:
36:76:48:31:20:b5:95:98:01:f2:ca:a8:19:29:43:59:b9:ad:
55:6e:61:ce:87:de:75:fa:39:9e:a7:09:47:13:d2:4b:eb:40:
3c:f1:53:fc:a2:47:d8:86:c5:10:c4:d7:c8:fe:81:93:d6:1f:
7a:2a:fa:14:21:d4:ab:62:dd:b6:37:10:0a:79:d1:19:7b:45:
f4:1a:84:c2:5c:1b:7e:1d:63:5f:b8:66:50:fc:06:90:95:5c:
87:52:76:fc:a5:90:40:14:01:c8:39:7c:8c:0e:5d:74:f0:59:
16:49:cd:6a:da:37:74:d3:8d:55:7b:e6:da:cd:f1:aa:c7:9d:
63:8e:24:26:9a:76:1e:01:be:4f:27:23:7f:bf:03:a4:62:d4:
a6:2f:ff:c0:a8:66:1d:2e:10:31:c9:0c:a3:fe:7b:e0:af:72:
de:9a:d2:27:64:54:99:89:09:ac:29:f4:3b:a5:bc:d8:0c:32:
73:f5:d9:39:73:6f:7b:e4:20:9c:fb:01:4f:85:79:09:f0:b1:
61:ef:f1:d8:a5:b1:27:88:8c:76:87:08:a6:f4:51:31:92:ac:
a7:fe:1d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:47:26 2026 by rpki-client