Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: yvf0LsxAJFb1/ww0fhINYDpz2NzIaAvSh6/mrf+kFf8=
Subject key identifier: 68:84:18:33:53:74:84:F6:C0:CF:6C:2F:97:EE:71:2C:73:DF:17:FB
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 01A0CA0F7D7AE32AB2507337A7525EA3F743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 14B7
Signing time: Tue 22 Sep 2026 17:00:07 +0000
Manifest this update: Tue 22 Sep 2026 17:00:07 +0000
Manifest next update: Wed 23 Sep 2026 17:00:07 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: XcnLX8hi6PE8MNYl/AVTX8rmqPVJgkJ82KFZehDbVLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:7d:7a:e3:2a:b2:50:73:37:a7:52:5e:a3:f7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Sep 22 17:00:07 2026 GMT
Not After : Sep 23 17:00:07 2026 GMT
Subject: CN=68841833537484f6c0cf6c2f97ee712c73df17fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:58:26:2a:7b:13:a4:73:ac:d8:c8:77:22:
87:ef:c5:82:62:85:b7:2c:84:b3:22:8d:8d:22:c3:
d6:3f:4a:3f:07:f8:99:72:7e:23:c7:0b:80:3f:61:
6d:1b:cd:61:aa:92:16:4c:1a:d6:11:e5:29:b0:8d:
f0:6d:42:69:2a:b3:06:eb:df:c8:54:15:b7:3a:2d:
14:a4:d6:1b:0d:2b:c3:c9:23:97:9d:46:25:5e:40:
99:a3:8f:f9:9a:9c:02:48:2d:8b:b6:eb:da:94:fd:
44:d0:a1:bb:f6:53:0f:fb:40:a9:55:b9:77:e4:9b:
9a:0d:35:b2:34:4e:08:c2:b8:1e:6d:f0:75:2a:89:
53:27:11:e4:b5:fe:c0:38:17:20:16:43:48:9f:03:
cd:89:1e:a3:ec:b3:c9:f9:3a:1b:98:ed:97:74:3f:
b6:37:37:7c:f2:14:0c:2f:b4:b4:fe:46:cf:2e:52:
4c:e8:43:ab:c1:f3:79:ef:ee:bb:a8:5c:3b:36:64:
f3:57:ec:a7:da:28:ec:df:01:42:ef:61:88:11:c5:
34:b9:dd:6d:83:6a:25:4f:31:2b:76:1c:33:9b:d5:
46:18:af:7f:37:60:66:58:1e:75:96:3f:6d:ba:32:
09:2a:c2:a5:2d:48:e5:fb:f1:42:14:9b:13:96:4f:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:84:18:33:53:74:84:F6:C0:CF:6C:2F:97:EE:71:2C:73:DF:17:FB
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:16:f9:fa:21:0f:8b:00:2f:8b:a1:d0:ff:96:40:3d:31:c1:
67:cb:01:42:8c:8d:b1:7d:39:39:e4:cf:d2:a4:b2:a9:08:1d:
5e:09:b5:8a:43:dc:1e:4e:4b:2c:41:60:b5:41:58:17:e9:af:
61:20:e8:7f:b6:54:25:0a:72:bd:5a:06:68:eb:d0:35:9b:fc:
02:50:1f:de:d6:4a:4a:d1:a3:81:51:2d:92:64:e6:88:ab:23:
f2:b6:9d:55:c6:52:e4:c1:35:1e:00:cd:8d:30:bc:ba:5e:5a:
3e:15:b2:61:30:28:ef:6c:7b:dc:0d:03:2a:fa:14:ef:05:7c:
ac:7b:d5:e9:96:43:d3:d2:b9:e4:0c:63:25:74:43:9f:81:85:
a2:1c:99:f9:54:14:49:e6:69:82:08:9b:ec:ea:0f:91:57:fd:
75:d7:09:89:89:b3:78:e2:db:9e:84:be:0e:d0:5c:71:d6:0a:
aa:ca:5c:11:67:37:74:39:a4:c4:38:88:38:b1:f4:93:21:61:
40:7a:fe:40:06:08:2e:ab:76:ce:69:ec:07:54:d7:ec:0b:a3:
bc:0e:88:26:b7:07:4b:93:d2:60:ef:40:6c:0b:d8:1d:dc:7f:
e8:47:e0:7d:a4:65:19:61:91:4b:9f:8b:d2:97:23:7f:72:b8:
37:46:ee:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:22:51 2026 by rpki-client