Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: xqTH6PDu/fg2TL1f8p/zPrGtIRqkysouKZ5iMM7Y7rQ=
Subject key identifier: 51:28:C1:0B:74:90:0D:1A:68:A2:06:67:B2:9F:78:FD:06:80:81:88
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 01A0CD4788A9BAD01801457312244EDF2EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 1514
Signing time: Wed 23 Sep 2026 08:00:12 +0000
Manifest this update: Wed 23 Sep 2026 08:00:12 +0000
Manifest next update: Thu 24 Sep 2026 08:00:12 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: eiDRJIk9QizbiObKk/FS/Ea9sRSE86Rh1uPSZxS5UsQ=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:88:a9:ba:d0:18:01:45:73:12:24:4e:df:2e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Sep 23 08:00:12 2026 GMT
Not After : Sep 24 08:00:12 2026 GMT
Subject: CN=5128c10b74900d1a68a20667b29f78fd06808188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:4a:a6:c5:9d:73:fa:db:64:a1:11:d8:e7:
9f:a3:0d:e4:9e:27:e0:b0:a9:71:1b:fd:4b:c8:73:
4a:aa:ae:d2:6f:23:f8:73:31:a5:d2:ad:ca:12:d8:
1d:9b:b5:26:09:4c:81:16:19:f5:f9:c9:c0:e2:a6:
18:b2:15:8c:df:8b:03:df:87:65:09:74:72:4c:8d:
ac:26:07:bd:e1:13:3c:ea:ec:a7:22:e1:65:ab:a3:
8f:a0:fa:c9:56:03:e4:f9:90:92:c8:21:e6:7b:6d:
8d:64:4c:30:03:a6:a7:57:e4:39:5b:74:6b:97:45:
dd:9f:ab:6b:73:cc:35:57:2c:cf:ee:f2:be:07:87:
93:af:f8:5e:04:9b:59:70:a4:c2:43:a4:61:c1:08:
53:33:b1:e3:92:23:f5:16:42:e7:b2:04:fb:43:c0:
72:1b:34:e7:db:2e:a1:e4:a3:6f:b3:bb:23:a4:a4:
08:bd:36:ad:e7:b0:14:d5:9e:98:71:44:76:87:32:
21:b5:28:3c:fc:f1:b3:2a:92:35:b5:b1:28:f3:8d:
ef:bb:d4:db:78:01:0b:40:79:72:b5:8c:44:da:3e:
de:6a:5e:36:9f:61:d5:19:07:5e:98:e4:5b:3a:fb:
29:7b:f3:da:d2:91:38:de:e5:a5:42:9b:d7:70:0f:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:C1:0B:74:90:0D:1A:68:A2:06:67:B2:9F:78:FD:06:80:81:88
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:34:45:6a:7f:28:48:fd:00:48:79:b3:89:27:a5:70:e2:55:
a1:b5:e9:1e:44:26:fe:b4:89:a5:be:7d:12:4f:2b:5a:ad:84:
5a:c7:27:b0:a9:e7:af:f7:4e:30:07:fd:cb:bc:a1:d9:17:07:
d4:82:3f:1a:f5:0c:cb:09:3e:91:d8:2b:9a:61:98:26:e9:44:
32:af:8e:1d:02:7b:66:f3:18:7c:1c:50:c3:7c:d7:ac:58:1a:
fe:aa:c2:60:9c:c7:43:77:d7:35:90:5e:40:91:27:38:1c:46:
ae:1b:09:cd:74:5e:21:c3:e5:5c:ca:3a:e2:43:9d:0c:fd:21:
57:0a:80:fe:bc:a3:63:bc:2d:1d:e9:cf:ec:89:c3:63:91:d8:
f6:d6:00:bb:ef:f5:d3:5d:78:db:73:20:dc:17:cb:54:98:4d:
0e:6c:45:ee:bc:ed:82:81:c0:32:11:75:9a:2c:07:28:2e:c9:
54:e1:29:e6:11:cb:14:40:3d:3e:cf:34:bf:43:70:39:0a:74:
5d:22:66:81:b8:9c:3b:5c:b7:d7:a7:95:13:ba:c2:a7:39:68:
42:59:08:a1:33:11:ed:21:fe:90:cb:80:39:4f:d7:b2:44:10:
91:0a:1d:90:36:9b:b0:ad:d8:31:9c:d5:0d:9a:fb:98:fe:cb:
30:0b:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:35:08 2026 by rpki-client