Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File: K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier: e0o++FMrpkFe5T5gssqzB3coSkwmPc6KR8rpxaWkcWM=
Subject key identifier: 6A:0F:70:FC:DB:3E:BD:B5:2E:BC:0C:53:65:B5:A5:91:92:63:6E:90
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 01A0D0489ADCF3D7005CB312801C953E4F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number: 1A80
Signing time: Wed 23 Sep 2026 22:00:14 +0000
Manifest this update: Wed 23 Sep 2026 22:00:14 +0000
Manifest next update: Thu 24 Sep 2026 22:00:14 +0000
Files and hashes: 1: 5CrZJSgU3umnhBpv3SBW8GVEgqE.roa (hash: 2gixcHV7KBq6bvuQpRe8OX0ebav7J2q4kd7P6HGr740=)
2: 66eo3bJdi9RGbEdDXS4tD5cqq_o.roa (hash: 5t8peN4WCQBgYdxTrPyY0DXm3aBeHyQsSo4GmYIKBxg=)
3: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: G2MI7/crx5ztvp7IRZ14hCo+XHLjElYtnPBE8Qxye48=)
4: K_ZSiUHd1rB1pcqdi19och0DGOM.roa (hash: 8mJ7F1VxOqtPJAA3HEixFXJNyvdHfHViy/fRZXdsxig=)
5: QPcZtk0DXKyMJbNEz2ZuJuMfm00.roa (hash: umOLljeZUfmplY2DajwQdgANFJvFzfTBHi6UK1dXAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:9a:dc:f3:d7:00:5c:b3:12:80:1c:95:3e:4f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Sep 23 22:00:14 2026 GMT
Not After : Sep 24 22:00:14 2026 GMT
Subject: CN=6a0f70fcdb3ebdb52ebc0c5365b5a59192636e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:3a:22:2e:67:5c:29:7d:d9:c6:cd:14:18:
df:de:5e:50:5d:46:de:74:57:3d:11:02:34:7b:a0:
ab:3d:f4:72:fc:a6:a1:de:38:16:a7:01:5d:df:ba:
45:31:02:ed:17:f4:46:c1:77:ee:42:04:83:20:e9:
13:8d:ae:b4:2a:11:58:8f:c4:5f:55:e7:35:9f:dc:
ec:ba:ed:b0:f6:2f:05:6d:68:72:b6:51:7f:ed:ae:
09:0c:39:e3:6c:fe:27:2f:76:01:f7:51:aa:38:dd:
87:14:83:a1:43:99:fb:98:b1:a6:4c:b3:ed:51:9e:
8d:9a:98:8f:eb:6c:45:42:1a:3b:62:11:a8:f9:a6:
f5:71:60:84:25:c6:59:c7:5c:65:68:31:b6:1f:7f:
84:83:05:82:74:a5:a5:d5:0f:29:da:bf:d8:ce:5f:
7c:2e:dd:b8:23:79:9d:d8:9d:5a:ac:13:03:9d:78:
0f:01:7d:86:3f:e0:7e:0e:64:32:d8:71:bc:0a:db:
67:30:0e:19:ca:3b:73:05:e5:bb:22:95:e3:00:70:
7a:05:52:54:db:17:f8:51:71:d9:03:f1:39:48:98:
0c:23:b1:49:69:45:ec:34:90:a2:4d:2c:dc:7d:5f:
1f:ce:ca:bf:cd:95:a5:08:ea:59:97:fa:0d:47:64:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:70:FC:DB:3E:BD:B5:2E:BC:0C:53:65:B5:A5:91:92:63:6E:90
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:49:d1:7c:4a:5d:54:7d:45:a5:61:67:1e:3c:26:0b:68:ae:
7b:fa:4d:7d:ed:79:b7:f8:de:ad:64:a5:93:42:43:5d:0d:be:
4c:32:85:e5:ad:00:51:5f:b3:c2:ae:66:36:f8:9e:28:38:1c:
ef:09:e3:ee:97:e8:37:7a:00:0d:23:75:14:1c:f4:c6:ba:45:
7f:46:81:58:fd:7d:31:92:b1:8c:18:13:f9:bf:72:01:c3:fb:
57:52:e7:7c:5e:46:09:42:3f:76:72:22:cc:a4:c8:68:6e:d2:
5b:80:cb:e5:94:5a:6a:d5:75:16:d5:1b:35:e6:88:4a:04:4d:
87:31:f4:e0:57:b0:14:36:21:1a:7b:c9:45:cb:97:2e:71:5c:
64:69:df:47:27:18:2e:31:08:23:ec:1e:ff:96:3b:11:5e:11:
ef:f4:f0:bb:96:de:63:7a:84:d2:14:0e:99:b0:ba:ff:35:8d:
c8:48:a9:db:77:60:fc:f6:dc:b6:66:61:9d:cb:d7:1e:dc:59:
20:ba:2a:e1:fd:0c:85:6a:ce:27:51:be:45:b9:3c:00:c8:81:
d6:ff:23:5d:b4:1c:b0:c0:fc:de:d5:14:64:50:05:fa:90:3c:
15:41:9a:a9:45:d8:02:af:85:40:ae:6d:fa:80:19:6c:16:3e:
d8:6b:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:25:35 2026 by rpki-client