Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: kO11Tt1FESZhpAB5fWFOtE8Dz9wml95nTijE4xV+Otc=
Subject key identifier: 16:BD:68:91:EF:6C:76:F2:A5:95:E8:A6:3C:A2:13:6A:A5:B9:F0:4F
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 019F8F476A05A158C1B787A43F6B036DDB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 1414
Signing time: Thu 23 Jul 2026 14:00:49 +0000
Manifest this update: Thu 23 Jul 2026 14:00:49 +0000
Manifest next update: Fri 24 Jul 2026 14:00:49 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: t2O7PTcd/G8fa7NhHlXIrkxwpGQfHspzz96h2+DfXy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:6a:05:a1:58:c1:b7:87:a4:3f:6b:03:6d:db:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Jul 23 14:00:49 2026 GMT
Not After : Jul 24 14:00:49 2026 GMT
Subject: CN=16bd6891ef6c76f2a595e8a63ca2136aa5b9f04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:03:60:6b:a7:37:65:ff:bf:78:ec:ca:5d:
4e:8b:b3:15:83:9d:c2:b2:b2:29:48:03:6b:fa:7a:
58:c0:34:10:91:ac:92:94:ca:12:db:be:64:f7:61:
d3:69:4c:05:3d:2f:c4:2c:0c:69:85:c8:94:c5:78:
1f:64:4b:1f:e8:98:f8:e1:78:ce:54:c9:08:2c:5f:
f4:53:39:29:9e:46:7b:aa:c5:7b:9b:74:bf:1c:e4:
3b:aa:ef:02:fd:88:a4:b4:6f:63:8f:fb:2e:15:87:
5d:12:da:e5:88:75:24:c4:c2:91:f5:3f:69:bd:71:
af:83:1e:76:bd:8c:6e:3c:7d:9f:c4:e7:ac:da:56:
91:9e:fc:87:7f:79:be:fa:8f:97:ba:73:db:88:c6:
e1:f5:fe:46:57:45:25:07:a6:3c:d8:cd:cf:b2:18:
29:30:0c:36:58:00:16:52:2d:1c:e5:28:9a:4f:58:
56:85:27:85:58:10:43:c0:de:a8:e8:ff:2f:87:20:
bf:09:a1:fa:ba:37:2b:14:4e:b7:85:d2:25:d5:6f:
56:3c:4e:62:25:03:8a:d2:ee:80:d8:bb:af:58:ad:
47:f5:90:c7:66:70:da:3b:ae:be:4c:fb:3b:59:ce:
04:16:4b:c1:e3:d1:1b:d8:06:eb:88:7f:76:e1:bc:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BD:68:91:EF:6C:76:F2:A5:95:E8:A6:3C:A2:13:6A:A5:B9:F0:4F
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a0:fa:74:cb:b1:67:e6:f2:db:9f:98:14:20:e8:f7:e6:15:
c4:60:90:4b:47:57:4f:83:31:90:41:c6:6d:d6:a7:55:6f:7b:
eb:67:77:6c:1b:0b:00:83:7f:e5:53:44:ad:6f:d2:79:9e:49:
d2:f4:e7:63:c6:b5:de:af:00:4f:c5:f7:b6:9c:50:b1:16:d9:
02:35:db:24:67:a1:01:04:86:c7:a6:98:af:c2:99:2f:00:25:
ad:ee:2f:e8:be:29:0e:89:b0:f0:b6:ea:9e:f1:12:9c:27:fa:
a9:e2:9f:ae:71:78:55:73:c7:23:7f:b8:d7:60:0b:66:7b:f9:
85:14:86:f1:b0:03:83:a3:8d:5f:9c:4b:9f:8a:07:37:e9:0f:
31:fc:c0:cf:2a:d4:f3:d5:06:94:69:e4:1c:5b:ef:ae:67:2a:
a3:7e:97:0a:2e:e4:d7:ab:ab:60:f9:b6:81:b0:0a:01:fb:0e:
2f:34:44:5f:18:1b:06:a8:fd:4d:16:09:6b:67:be:f8:8e:6d:
a4:af:c7:23:09:23:d8:f3:e2:99:c0:ae:07:db:61:91:bf:3f:
55:95:13:3b:bd:ae:71:36:76:12:fd:d2:16:e7:9d:26:44:1f:
61:66:55:69:33:fc:d4:b0:a7:20:12:77:b2:68:05:64:b5:97:
d3:fb:81:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:07 2026 by rpki-client