Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: a3w4Kk+TNS0DpPe98qgTi81GCt/Tht2apOt20GNoFBI=
Subject key identifier: 2A:9C:C4:18:7F:A1:54:68:6D:1D:0F:88:D3:C4:32:4D:B4:10:82:1B
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 01A0DFF40E5B6473011A4A1B6F9608358447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 16E8
Signing time: Sat 26 Sep 2026 23:01:48 +0000
Manifest this update: Sat 26 Sep 2026 23:01:48 +0000
Manifest next update: Sun 27 Sep 2026 23:01:48 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: W7xtgreDHlSxvHxASjkF6rc87WzvYJx7I2MY68T+1eo=)
2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f4:0e:5b:64:73:01:1a:4a:1b:6f:96:08:35:84:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Sep 26 23:01:48 2026 GMT
Not After : Sep 27 23:01:48 2026 GMT
Subject: CN=2a9cc4187fa154686d1d0f88d3c4324db410821b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:c2:90:d4:35:d2:34:da:41:3a:29:5b:00:
e4:04:57:f0:7b:35:1b:86:a3:d7:d7:48:7b:8d:07:
3a:c6:23:44:7e:02:8e:ec:7f:5f:2a:cd:21:ff:e3:
15:53:d4:24:0c:ad:9d:8b:5a:16:99:51:5a:08:7b:
6a:96:b2:23:38:74:6f:f5:f8:b9:4b:7d:b1:8f:c0:
33:f8:a4:74:9c:01:43:38:cd:a7:5f:f7:6b:bc:41:
78:40:23:7c:39:05:94:49:70:ff:9c:f0:04:6c:12:
b0:64:9b:0a:87:e6:6b:74:76:fb:5f:13:45:96:62:
67:fc:0b:ab:50:ae:69:31:c2:a7:a7:35:2d:be:3a:
bb:16:fc:0f:7a:95:a3:f8:f1:fd:56:8f:cc:9d:92:
67:c8:4a:78:f9:97:e7:69:c5:b3:85:1e:12:5e:ad:
71:ff:61:87:f2:5b:96:7c:5e:b4:5e:21:a1:47:77:
0c:6e:00:40:db:a4:15:e9:8c:6a:62:86:0c:af:df:
cf:02:6b:9f:68:e2:ea:24:f5:a7:34:5e:8e:69:bf:
0b:12:8a:cf:25:cb:30:8a:e8:ac:8e:70:f3:39:af:
0b:66:e7:0a:48:9a:02:37:87:d5:3f:b4:97:d6:4f:
ae:56:74:5c:45:38:7e:e7:55:a6:98:61:f7:f4:c4:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:C4:18:7F:A1:54:68:6D:1D:0F:88:D3:C4:32:4D:B4:10:82:1B
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2d:d1:34:1c:32:3d:b4:e6:73:17:1d:92:40:9a:65:3f:e6:
88:b6:90:fb:9b:0f:ae:e1:c6:7b:ce:a2:ab:0d:61:a7:72:5a:
7e:87:33:1b:60:81:9e:24:a4:40:6d:79:81:d5:3e:64:41:9f:
09:80:0d:a1:11:f4:5d:e1:bf:17:81:81:b9:3c:5e:1d:01:87:
82:c8:43:f6:62:73:d0:56:42:cd:99:67:1a:d3:8f:4f:f9:9f:
95:24:09:22:ed:4a:c9:77:6a:6d:75:45:3b:dd:f6:de:ec:5e:
8e:7c:64:30:9b:29:15:3b:44:12:81:6a:63:62:2e:7e:10:24:
0e:f4:81:4f:7e:1f:64:4d:a6:72:3c:83:ba:a8:03:1c:e4:29:
02:4b:56:ec:f9:df:13:07:1c:35:40:e5:ab:9e:fe:69:93:2f:
7c:4c:97:46:72:e3:8e:c6:64:ca:9c:57:51:3c:55:da:07:75:
c9:63:f4:fe:d8:ed:df:6c:c6:43:ef:c0:c1:25:f7:e1:52:7c:
4e:9c:c6:70:6a:c3:b8:84:74:0c:84:28:72:8d:3b:c2:91:24:
9d:48:fa:ce:b6:fa:54:c5:9d:5c:a3:33:7e:33:dc:77:6f:5e:
28:e5:9c:b0:a0:f7:bb:17:3f:54:8f:2a:ed:64:1a:2c:ef:7f:
b1:5f:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:36:02 2026 by rpki-client