Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
File: 8jhsPFHpFWdv2RMCrLncu5no8Uw.mft (raw, json)
Hash identifier: 3KViJRi+YCa7hC4exIS10OKvF8GlfU6Z65cr4ehDoMQ=
Subject key identifier: 34:1B:C2:9A:C3:06:09:99:BB:28:43:44:68:66:38:36:6B:9B:EC:AE
Authority key identifier: F2:38:6C:3C:51:E9:15:67:6F:D9:13:02:AC:B9:DC:BB:99:E8:F1:4C
Certificate issuer: /CN=f2386c3c51e915676fd91302acb9dcbb99e8f14c
Certificate serial: 01A0CD47D96123F2E5C54ADB69A1BAA015E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jhsPFHpFWdv2RMCrLncu5no8Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
Manifest number: 01C4
Signing time: Wed 23 Sep 2026 08:00:32 +0000
Manifest this update: Wed 23 Sep 2026 08:00:32 +0000
Manifest next update: Thu 24 Sep 2026 08:00:32 +0000
Files and hashes: 1: 8jhsPFHpFWdv2RMCrLncu5no8Uw.crl (hash: NA/YVlGc47bS8D/mfrIjTT2H6usy1RvHqKG2dMcnyj4=)
2: ljZjgEZ9hW8cqxzlDtOAe4H1ql4.roa (hash: Z1WL6d9QfuUEoOquGksnlFUMW7fVN0+PQc/OczyRZHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jhsPFHpFWdv2RMCrLncu5no8Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:d9:61:23:f2:e5:c5:4a:db:69:a1:ba:a0:15:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2386c3c51e915676fd91302acb9dcbb99e8f14c
Validity
Not Before: Sep 23 08:00:32 2026 GMT
Not After : Sep 24 08:00:32 2026 GMT
Subject: CN=341bc29ac3060999bb284344686638366b9becae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:d7:2d:2c:9d:e9:3d:1d:3f:23:41:71:c0:
2b:0e:1c:f9:cd:29:57:00:fd:4d:8f:f6:60:4f:89:
2b:17:2f:14:c1:be:55:d8:f5:98:ee:3c:71:eb:b6:
5b:f7:a0:cf:50:8b:d1:e4:97:81:b4:19:a3:03:9b:
38:6f:5e:ec:eb:71:35:b1:22:1b:d9:9c:f0:90:3b:
d5:ef:15:0c:30:d8:3e:96:e0:ea:ee:9a:47:af:cb:
f2:dc:c3:97:60:ce:0c:95:63:57:7c:62:16:92:2b:
b2:50:8f:c8:4d:22:d8:e2:65:40:ac:aa:80:97:7a:
e2:3f:6f:f4:57:bb:8f:d7:48:79:e3:b6:cf:fe:e6:
d9:f1:9f:47:d4:e5:f6:05:9c:7d:2c:13:75:3c:96:
2c:ac:94:95:02:cd:21:e9:b0:a3:7b:f3:c1:61:94:
7f:db:e2:6b:0b:7c:21:d0:bc:55:68:0a:3b:41:d7:
5d:c8:2b:79:d5:59:2a:5a:12:10:f0:34:1a:2a:fb:
95:3b:8b:ec:52:b6:79:d7:c3:8e:db:a0:80:55:3c:
b4:9c:62:c9:6a:fd:2a:29:91:51:89:c3:83:90:99:
52:06:eb:06:2e:f0:d2:6c:90:c5:65:cc:ae:ab:c1:
05:65:fa:e5:7e:d1:0e:1c:69:c3:37:50:83:32:a8:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:C2:9A:C3:06:09:99:BB:28:43:44:68:66:38:36:6B:9B:EC:AE
X509v3 Authority Key Identifier:
keyid:F2:38:6C:3C:51:E9:15:67:6F:D9:13:02:AC:B9:DC:BB:99:E8:F1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jhsPFHpFWdv2RMCrLncu5no8Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f1f385-aeaf-4875-b4f5-d21c5fd73532/1/8jhsPFHpFWdv2RMCrLncu5no8Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a0:86:4b:45:10:8d:5d:d3:a6:32:00:7f:07:6f:e4:3a:a9:
e9:46:32:97:b3:c9:c1:c8:70:fa:92:fa:54:fc:0a:d8:ad:67:
2e:23:35:ea:7e:41:42:16:fb:e1:12:22:2a:c1:ed:e3:94:47:
63:d3:ad:63:34:76:4f:30:4b:1e:25:a3:d6:a8:1c:fe:c9:80:
2f:7c:34:2b:35:90:ca:93:f6:b5:76:09:c7:c5:8e:c6:0e:5a:
97:e3:dc:cf:b5:b2:24:8a:2d:33:55:c1:fe:89:8d:9d:ef:68:
6e:87:02:2e:4f:d3:16:c1:b7:fc:bc:d1:2c:9d:d6:fb:06:6b:
14:93:89:1b:86:29:61:f3:48:02:03:52:69:05:1c:56:9d:a9:
9e:f9:79:f1:36:82:40:50:42:51:1f:b7:fc:d6:32:0d:67:ee:
21:45:e4:3f:16:4a:89:05:d0:90:f8:dc:18:29:8f:fd:7e:46:
8d:e3:8b:a7:c2:66:4a:91:ef:45:05:36:65:08:55:26:03:6a:
30:d3:0f:c4:b2:16:36:51:b2:11:2b:42:35:ab:3c:a4:05:10:
70:c0:e8:ac:b0:b7:2b:c5:1f:38:e6:d4:3e:3c:20:20:9c:f4:
26:ec:d7:39:b8:83:7f:7b:b0:2f:1c:65:33:09:ef:23:bc:c6:
4b:df:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:34 2026 by rpki-client