Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: 465s8z9gVt7PkqxOMgVuUSPPMM7iIjY8U5Oq/veiEtk=
Subject key identifier: F1:0D:73:F0:F9:22:A0:10:71:95:B5:53:B8:FB:17:3C:AB:AF:7C:97
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 01A0D6F0FF6A86DF20415FBE184F74A69D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 1164
Signing time: Fri 25 Sep 2026 05:01:53 +0000
Manifest this update: Fri 25 Sep 2026 05:01:53 +0000
Manifest next update: Sat 26 Sep 2026 05:01:53 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: 7+dJnlKnkmXvg2kBG6sit0tl41oW/JWjIhztCIwcYhE=)
2: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (hash: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:ff:6a:86:df:20:41:5f:be:18:4f:74:a6:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Sep 25 05:01:53 2026 GMT
Not After : Sep 26 05:01:53 2026 GMT
Subject: CN=f10d73f0f922a0107195b553b8fb173cabaf7c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:0b:20:46:52:a5:0a:5e:f1:f9:31:48:f3:
76:b0:e7:95:48:1c:ed:9c:78:91:94:09:9c:4c:de:
68:03:20:1d:ca:60:55:a4:ae:40:dd:b8:10:11:e3:
07:71:89:45:b0:c2:ef:b5:5c:a6:79:ef:6f:44:34:
90:e3:b0:c0:95:e9:d2:a7:e9:11:d3:17:10:13:d7:
f3:76:7c:13:67:9a:44:fe:3c:42:6a:15:5d:7d:61:
45:de:a9:9e:83:3c:20:58:e6:f3:81:35:4f:0e:79:
b3:0f:68:7b:dd:92:37:09:d3:fd:e5:c2:64:f7:a5:
bf:50:f3:d4:fa:68:77:a0:a9:c6:6c:8b:00:2d:96:
4c:6e:56:fb:04:2c:af:b4:35:53:e2:c0:33:e2:38:
ba:ff:cf:66:00:49:e8:f1:c2:c3:08:a1:27:b0:67:
9f:ad:74:56:11:9d:c6:45:db:94:be:da:35:d3:76:
dd:20:a6:94:ee:b6:6b:c1:9c:94:11:10:96:1f:b8:
81:d9:f5:ef:92:98:ee:e4:66:a3:5a:c1:7b:8e:67:
24:ab:02:66:5e:90:28:a0:89:a2:9b:11:a7:d7:18:
cd:81:96:e8:4e:a5:8e:2f:f5:fa:d4:7f:53:2e:13:
d3:3f:22:9e:7e:41:b1:6f:25:15:8d:b8:6b:4f:b5:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0D:73:F0:F9:22:A0:10:71:95:B5:53:B8:FB:17:3C:AB:AF:7C:97
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:88:66:a9:3a:87:2d:7a:d7:49:49:fc:73:21:0d:13:97:7d:
79:ee:70:49:e7:16:39:3d:8d:57:8e:11:c6:3d:ef:02:41:35:
83:7a:da:28:31:ed:19:b5:06:9f:04:99:11:98:82:96:e4:62:
b2:0e:c8:59:44:8b:c2:a0:e8:c2:41:a8:78:c0:e2:41:f1:54:
61:83:15:f0:92:fe:9a:c1:70:86:cd:ac:a1:ad:cb:43:8e:87:
bb:70:64:8c:dc:60:45:ff:0e:b6:bb:1e:b8:17:84:24:30:c9:
5d:f2:aa:84:24:00:21:91:73:e1:85:ea:53:a3:0e:c9:16:98:
da:8f:87:24:c7:50:e9:28:3c:65:fe:f0:9e:28:22:a6:bf:50:
19:51:33:df:04:92:3f:5d:c2:03:64:ea:de:37:ac:45:55:af:
e3:5d:d5:30:e5:86:51:45:4c:55:8a:55:ae:59:90:7a:3f:d1:
46:d2:aa:2b:0e:85:a4:af:d2:87:1d:f2:eb:13:e2:e7:43:8e:
d0:24:b0:f7:46:ed:d5:24:60:b2:80:1d:6e:71:d4:ba:a0:73:
4d:4f:78:df:77:73:a1:c9:99:e1:af:bc:ca:bb:6b:ce:a9:ce:
98:81:27:9b:57:3c:67:71:ad:1b:29:bb:24:04:e9:06:84:87:
3b:28:09:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:24:05 2026 by rpki-client