Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a2f736-3378-4948-ba5a-5ad88b2743f7/1/8wfW7k3NIfqvdtsyR6dCOxStvGQ.mft
File: 8wfW7k3NIfqvdtsyR6dCOxStvGQ.mft (raw, json)
Hash identifier: JREuf4+0mR4nPS2fKv4xvTcCns6zMFt4LiA8U2limK0=
Subject key identifier: 3D:1B:81:3C:AF:03:1D:5A:0A:85:3C:87:B7:08:7C:55:09:99:8F:C0
Authority key identifier: F3:07:D6:EE:4D:CD:21:FA:AF:76:DB:32:47:A7:42:3B:14:AD:BC:64
Certificate issuer: /CN=f307d6ee4dcd21faaf76db3247a7423b14adbc64
Certificate serial: 01A0D7CC33EED9D33CA79CCF968ABDA93A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wfW7k3NIfqvdtsyR6dCOxStvGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a2f736-3378-4948-ba5a-5ad88b2743f7/1/8wfW7k3NIfqvdtsyR6dCOxStvGQ.mft
Manifest number: 0194
Signing time: Fri 25 Sep 2026 09:01:19 +0000
Manifest this update: Fri 25 Sep 2026 09:01:19 +0000
Manifest next update: Sat 26 Sep 2026 09:01:19 +0000
Files and hashes: 1: 8wfW7k3NIfqvdtsyR6dCOxStvGQ.crl (hash: cBF+0q6OsNbn8443TDHFROODE3bOXeNLxXqGGKqdZvY=)
2: gHfOZupBu0TEQs2TjKUjpYcKRic.roa (hash: MxTDZG/P4/uUhVb1MJj7wxash7iK6Yw2LptivHrbExo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a2f736-3378-4948-ba5a-5ad88b2743f7/1/8wfW7k3NIfqvdtsyR6dCOxStvGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a2f736-3378-4948-ba5a-5ad88b2743f7/1/8wfW7k3NIfqvdtsyR6dCOxStvGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wfW7k3NIfqvdtsyR6dCOxStvGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:33:ee:d9:d3:3c:a7:9c:cf:96:8a:bd:a9:3a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f307d6ee4dcd21faaf76db3247a7423b14adbc64
Validity
Not Before: Sep 25 09:01:19 2026 GMT
Not After : Sep 26 09:01:19 2026 GMT
Subject: CN=3d1b813caf031d5a0a853c87b7087c5509998fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a0:fb:ae:94:26:a7:4c:8b:73:53:06:6c:bf:
f7:6e:14:15:be:e8:7d:7a:cc:af:9d:de:69:7a:71:
90:69:a4:fe:26:1f:72:a9:c5:a7:52:2d:54:96:fd:
6b:b9:a9:51:b4:fa:45:1a:59:10:f1:a1:d4:ec:91:
64:60:c3:98:72:97:02:a8:93:64:58:ed:fa:49:7e:
66:07:73:e4:e7:90:b7:b9:87:64:db:b7:05:7f:80:
40:f7:fc:eb:df:3c:ae:7c:fd:39:44:50:d2:32:cc:
1b:d5:23:29:2c:b3:b4:ba:50:00:5e:b2:35:3b:ee:
da:c9:41:f4:03:30:67:5b:69:d4:6a:ff:10:5c:85:
53:8c:fa:c0:b7:11:fa:b5:8e:f7:fc:ce:6c:94:98:
6d:46:2b:e8:93:30:e3:30:7c:71:42:ef:dd:b3:4a:
4c:94:27:ce:82:6c:25:91:b2:e2:c5:73:5a:3e:c6:
a8:0a:ee:27:7e:e8:ac:83:bd:4b:4a:d8:e8:df:76:
d8:a1:8e:79:ab:7f:4b:03:08:4a:2d:70:ab:3d:ab:
26:3b:bf:dc:f2:c6:4b:5e:e0:3f:e6:e4:f4:b1:e0:
00:0e:b6:c0:46:ac:a3:87:6b:b1:88:95:56:00:12:
f1:0f:fb:ab:e1:16:c2:84:28:72:65:1c:c4:b1:51:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1B:81:3C:AF:03:1D:5A:0A:85:3C:87:B7:08:7C:55:09:99:8F:C0
X509v3 Authority Key Identifier:
keyid:F3:07:D6:EE:4D:CD:21:FA:AF:76:DB:32:47:A7:42:3B:14:AD:BC:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wfW7k3NIfqvdtsyR6dCOxStvGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a2f736-3378-4948-ba5a-5ad88b2743f7/1/8wfW7k3NIfqvdtsyR6dCOxStvGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a2f736-3378-4948-ba5a-5ad88b2743f7/1/8wfW7k3NIfqvdtsyR6dCOxStvGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:be:38:8e:08:ee:86:aa:f2:f6:0a:d8:2e:b3:7e:a2:06:3f:
b9:fc:b9:00:89:e1:6b:61:17:92:35:39:83:9f:7f:53:fb:73:
2a:e0:5e:b8:00:3f:ef:65:94:92:05:d3:f5:40:1b:75:a5:27:
91:dd:31:b3:73:28:d0:24:ef:0e:88:af:e6:d9:55:c8:62:ae:
44:7c:0a:36:52:cc:b6:0f:21:b9:c3:45:42:49:14:64:8a:a8:
7e:a0:25:f4:9c:44:6a:81:00:3d:2b:ce:2d:06:e2:b7:d3:e3:
83:67:3e:c2:6e:4a:29:fb:f5:13:55:d1:e1:4b:60:62:d8:6a:
a2:7a:91:71:48:6d:0e:94:c8:37:da:9c:ea:cd:a0:bf:5b:db:
2d:61:6a:29:f9:c7:2c:a4:c6:f3:71:d4:d8:87:e4:d4:c2:3b:
d2:dd:b9:83:6e:e3:a6:31:15:77:95:0b:9e:e0:79:6e:e6:ed:
28:94:d3:ac:ea:2d:5d:81:84:c8:05:46:6b:96:65:7c:63:14:
5d:7e:47:39:de:27:76:26:0f:b6:59:73:0e:2c:c9:c7:d4:49:
c7:5f:c4:03:54:1e:9f:14:e6:bc:10:79:c0:27:ea:40:de:17:
0c:d3:f5:9a:3d:ce:54:03:75:6c:f4:52:90:51:6e:84:fb:f0:
db:4d:fd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:05:20 2026 by rpki-client