Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
File: 8oS7eVhYemBZneFztOhaDJSRoaQ.mft (raw, json)
Hash identifier: DWqOlOcQN8vPLn1MgynOBPnZrnR2ZdsgcJ54RhM6h7s=
Subject key identifier: 9F:BA:81:D3:AE:CD:AD:45:38:CA:ED:B3:98:2B:07:BA:E9:B4:51:C3
Authority key identifier: F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
Certificate issuer: /CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Certificate serial: 01A1366CFC67778E1D8AE7B6E55F1771EA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
Manifest number: 011A
Signing time: Tue 13 Oct 2026 18:01:14 +0000
Manifest this update: Tue 13 Oct 2026 18:01:14 +0000
Manifest next update: Wed 14 Oct 2026 18:01:14 +0000
Files and hashes: 1: 8oS7eVhYemBZneFztOhaDJSRoaQ.crl (hash: 1Zq3C1xAbZBNE9PhOi/ZftDRWzSfFzRznCg0BJb+2H4=)
2: IVY6iWcM0h4WNsuJ0C_dYZMPbEY.asa (hash: vJRxB/YA0VSs2+csKGJpplBLmMHFGaBIIWUMdGp+a7U=)
3: t3aKyQAZqp0JpNY9WkTBO5wmV88.roa (hash: 2JKrAMaSBOfAdSssyHnAfVhbKUiXcGPrBZgPHZSrc8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6c:fc:67:77:8e:1d:8a:e7:b6:e5:5f:17:71:ea:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Validity
Not Before: Oct 13 18:01:14 2026 GMT
Not After : Oct 14 18:01:14 2026 GMT
Subject: CN=9fba81d3aecdad4538caedb3982b07bae9b451c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:d0:88:14:f7:fa:ef:45:96:80:f0:4c:28:
6a:23:4b:01:43:25:d8:96:42:35:0a:b9:23:2c:c7:
1a:86:86:87:49:60:0a:56:af:11:fe:e7:55:23:07:
4b:e9:d4:e6:84:76:f8:8d:f2:60:24:12:5f:e8:b9:
6f:7b:0b:ff:3e:38:ac:35:6a:f9:39:e0:3a:e5:02:
d6:e7:bb:49:73:bd:77:80:f5:d4:98:08:82:df:ea:
6e:7b:28:de:79:1f:48:34:c8:12:84:d4:16:ff:1d:
21:c2:a0:d7:a4:08:10:3e:13:a9:9f:13:b5:5e:06:
5e:68:3a:6e:c0:5e:5e:68:34:0a:5b:10:08:3c:e4:
bb:7e:ee:4d:42:a3:17:fa:14:69:43:f3:e4:c7:da:
0a:2d:f6:c5:af:2d:82:93:3b:d9:b5:36:45:66:61:
4e:94:67:16:a3:0d:4b:c7:f9:30:ab:ec:62:a9:3e:
9c:a2:bd:c9:97:2e:46:f2:c5:4f:cd:05:f0:e0:21:
6d:58:03:30:14:d2:89:27:23:48:1c:a8:96:f3:f5:
3f:23:79:81:cb:62:2c:c7:76:14:7f:d1:64:48:42:
e2:a6:c4:0d:04:48:ca:be:fe:dc:d8:c6:1d:56:f2:
62:87:63:22:6d:80:5b:0e:e7:7c:c5:b4:ab:37:b4:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BA:81:D3:AE:CD:AD:45:38:CA:ED:B3:98:2B:07:BA:E9:B4:51:C3
X509v3 Authority Key Identifier:
keyid:F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5e:c4:d4:cd:6f:8a:c7:ba:93:d3:f5:22:75:3b:fa:9c:e8:
66:16:e2:eb:06:7d:99:69:88:da:1c:d0:06:c0:db:c8:93:24:
9d:26:ab:d4:e3:db:3e:24:3c:d2:0c:c0:8e:85:d8:4e:9b:82:
fb:34:db:40:86:a1:06:aa:b0:6d:60:2c:5b:af:9b:99:0d:0a:
27:0f:1c:ab:48:f5:cf:3c:82:f0:7b:b3:18:fe:5a:1c:96:9d:
c3:e2:25:15:4c:f1:39:ac:4e:9c:1e:e2:44:ad:24:2c:74:cf:
f1:b3:e5:cd:98:47:f7:50:09:8f:f7:f9:6e:11:0d:2e:30:39:
d6:8f:04:b6:f1:5b:b5:84:d0:6f:f2:1a:8a:56:98:d6:8a:79:
07:5a:d7:3b:8d:a2:ba:93:30:26:ea:7e:95:d8:66:32:7d:fc:
e7:28:1f:2e:3b:44:85:03:68:11:f4:cb:dd:58:52:ce:34:35:
5a:24:15:8d:6a:e3:fb:7c:a2:ca:76:fb:62:0c:18:18:f3:e4:
0d:33:86:e6:9d:9b:8d:2f:ff:e0:35:42:09:16:33:a5:5e:00:
87:09:bd:9c:3f:a2:29:ec:01:cb:09:89:39:59:29:d3:a9:23:
62:18:9e:55:a9:a4:9c:88:6f:0a:b3:36:29:31:e4:cd:c3:f1:
20:91:d9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:59:11 2026 by rpki-client