Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: vqvWkb+jeIV6BiiupeAQjPCOrJrMYpLjW4FjLT0AoN4=
Subject key identifier: 40:C0:E6:7C:E3:23:B2:7F:62:7B:A0:35:84:C4:E4:45:B8:05:FC:83
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 01A0CDB5E6BF7672162F4E653466694A28E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 15AB
Signing time: Wed 23 Sep 2026 10:00:45 +0000
Manifest this update: Wed 23 Sep 2026 10:00:45 +0000
Manifest next update: Thu 24 Sep 2026 10:00:45 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: 7pOdd1uq4lPJdIqtPGLz4WULqTqizl8EZIUjAFq7Dp0=)
2: EMaV_sDtEC3ONnRr_ZacRZkjYek.roa (hash: uEhrTJgtxikjiJZwpMeYSv1aaXx9clVq4b4CFPBvQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:e6:bf:76:72:16:2f:4e:65:34:66:69:4a:28:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Sep 23 10:00:45 2026 GMT
Not After : Sep 24 10:00:45 2026 GMT
Subject: CN=40c0e67ce323b27f627ba03584c4e445b805fc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ad:39:df:33:bd:f9:6c:6d:36:57:4e:42:fb:
91:b9:54:e4:93:fb:e6:fb:ad:8d:01:0e:2f:9c:2f:
3a:3a:24:6c:b0:70:15:d2:bb:97:e3:86:a5:2b:4c:
ec:1f:9b:2b:ad:41:01:2a:bd:67:5d:85:32:70:4e:
bd:49:b4:41:8b:5c:35:e5:53:48:e7:f9:fe:5d:3c:
db:b1:c7:54:ed:e4:94:84:c9:57:08:6f:a3:c5:5f:
d5:10:b7:71:dc:a1:77:1e:b9:07:8f:0a:f5:7c:b8:
3b:75:1d:f3:0d:80:0e:d9:2b:45:68:49:d6:ca:67:
e0:06:14:78:15:66:b0:ec:57:7c:e2:d8:fe:04:e6:
b4:d8:a2:0c:46:17:d2:ee:45:76:b3:d6:1b:b7:3e:
b3:d8:ea:90:0c:3c:49:f0:62:52:b8:90:3d:75:b2:
61:88:23:78:43:7c:b2:c6:18:d5:37:ff:ab:03:6b:
08:d8:ce:84:57:f6:72:97:89:dc:34:5e:eb:98:3f:
c1:98:e6:83:4a:45:24:a2:87:55:73:e1:3d:90:f4:
3a:3d:b0:d3:d1:d0:a7:f0:dc:a5:6b:bf:66:a2:55:
dc:15:e8:34:92:95:9d:08:82:14:43:2d:39:6d:b4:
98:34:f6:a4:0a:d0:b4:8d:bd:99:0b:33:ae:1f:11:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:E6:7C:E3:23:B2:7F:62:7B:A0:35:84:C4:E4:45:B8:05:FC:83
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1f:8d:6d:18:a2:65:f6:4b:45:6d:9e:d8:24:a0:00:8d:36:
e0:23:f4:27:9d:7d:ae:80:98:e6:11:89:a2:4c:81:11:f7:4a:
ea:49:b3:a3:dd:aa:70:ab:fc:f6:c1:c9:da:e0:bc:41:3d:61:
c9:39:b8:59:ef:25:f2:16:81:1e:3d:22:df:50:84:77:5e:93:
f5:a4:24:f7:af:e0:05:0d:be:22:b5:4d:f1:64:14:0a:97:fd:
99:86:20:31:0e:a1:ea:46:55:41:10:71:c9:80:73:a7:85:88:
e7:46:38:9f:a4:d0:91:0a:69:a9:05:64:cd:92:b1:87:55:d1:
a6:fd:41:e9:93:79:8b:5c:ed:c7:0b:96:29:9d:30:bb:4a:ce:
0f:3e:97:b5:23:04:de:22:92:b2:38:39:8c:5e:bc:81:ea:a6:
d0:95:2c:8a:d0:dd:0d:b9:7f:12:98:f8:c3:8e:29:5b:3c:82:
c5:d2:92:41:0d:d6:4c:bb:0c:2f:9c:56:2a:e3:5a:43:cf:e4:
8d:ee:2c:0d:19:22:cd:c3:86:26:0b:9e:e2:04:c0:8b:78:c1:
be:59:1b:92:07:0b:fa:4b:94:48:0c:b7:33:af:48:92:88:b3:
82:72:9f:04:31:88:f0:f8:53:c9:bf:86:f1:10:de:14:0e:7d:
4a:70:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:04:57 2026 by rpki-client