Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: fMiFjnNGYjpUWr08IyzuMbrpGOKuSPVMseY58vCtZtA=
Subject key identifier: 97:98:58:26:F9:52:BF:02:85:FF:7B:1B:62:A7:77:89:82:3E:FD:00
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 019E1D2282D8D103796EE41666AF933F7F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 0FFF
Signing time: Tue 12 May 2026 17:01:01 +0000
Manifest this update: Tue 12 May 2026 17:01:01 +0000
Manifest next update: Wed 13 May 2026 17:01:01 +0000
Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: PmZevyvLdr8WDcFLxQf61mAVf3WRBT8PueNFxQwbRiI=)
2: foPJ5M9ZOVkGAWVnVqDC4Cs4-NU.roa (hash: 1DlyQW+RNTimUxXGNa+g3AQuv/uMpZoTB33IBxZu3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:82:d8:d1:03:79:6e:e4:16:66:af:93:3f:7f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: May 12 17:01:01 2026 GMT
Not After : May 13 17:01:01 2026 GMT
Subject: CN=97985826f952bf0285ff7b1b62a77789823efd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:46:0f:68:af:45:a6:e5:19:64:c6:e8:6a:
cd:36:6a:94:4a:c0:3d:86:f6:2c:86:a6:a9:9f:3d:
6e:a7:40:69:60:5d:d4:af:e7:ab:0a:75:75:29:0f:
4d:59:ad:d6:c2:07:ad:6b:30:53:13:66:1c:98:e2:
33:80:33:47:d7:9a:f4:cb:d5:9f:00:76:ee:63:28:
df:f9:58:b3:e6:ae:92:38:90:ba:4a:89:22:e6:ee:
cf:49:10:f4:c3:59:65:67:dd:61:49:c4:6f:5e:eb:
01:5b:09:3c:bb:3b:7d:81:3b:ce:8e:b8:e7:c6:a1:
e8:cb:e1:16:1a:05:82:62:fe:97:d4:5a:6b:e4:f7:
40:d3:1e:46:9f:3c:73:89:cb:62:58:70:bf:8a:62:
3d:71:52:2f:f6:ba:3f:b5:39:35:a4:4f:1d:de:49:
be:6a:01:f1:6b:02:e3:65:22:83:c2:ac:4e:39:dd:
a0:8d:56:3a:16:9b:2b:bd:22:32:53:d4:13:37:e1:
e4:34:f6:6f:dc:3f:b1:a8:e7:2d:54:8f:df:f4:d8:
51:e5:b4:60:06:4a:56:14:db:9d:37:1b:7a:39:e8:
88:a5:f2:66:d4:ce:9e:45:52:13:ba:89:7a:44:3d:
15:22:89:4e:ea:b0:2e:7f:a6:f7:18:de:4f:df:c4:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:58:26:F9:52:BF:02:85:FF:7B:1B:62:A7:77:89:82:3E:FD:00
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:55:aa:1e:c8:0d:90:a4:9f:35:01:1c:88:76:b6:e5:a3:a5:
48:42:b1:bd:fa:52:38:dd:d1:2c:f2:b9:84:d3:e2:83:82:55:
fe:02:7e:fb:d0:b3:88:b7:f0:5b:01:cb:7e:74:ff:64:ca:12:
d9:2d:70:41:cc:08:db:9f:ed:fb:78:65:98:f7:19:0b:a3:26:
09:1b:cd:4e:84:f4:f6:24:54:4b:c7:c0:28:cf:87:96:a2:d0:
4f:d5:77:90:a6:26:04:2c:d7:65:e8:e8:af:08:76:2c:23:57:
a8:f6:0a:2d:ac:a7:5d:31:52:f1:a8:04:d6:b0:07:0e:9f:9e:
c7:e7:c3:a6:a8:7b:9f:57:1a:8a:2a:c1:23:8c:77:83:ab:85:
65:c7:23:35:0e:77:11:9a:b3:1d:a4:3e:d8:72:14:3b:ba:7a:
98:4d:20:ff:80:bc:78:d8:02:48:4d:5b:86:48:c6:26:30:4f:
83:7a:0a:33:44:47:43:2c:dc:20:87:d9:71:e8:b1:ba:7a:52:
ff:b0:ae:3d:96:8b:77:ad:04:51:36:f9:33:a8:54:9a:f5:f7:
cf:6a:a6:b8:a6:01:9b:bb:d8:c8:12:56:8d:7e:e6:23:3b:08:
aa:5b:57:00:69:6f:6f:32:7a:fe:ce:06:88:47:21:04:4c:07:
9a:92:50:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:57 2026 by rpki-client