Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier: t/hHDJwxzaG17OlYQQWZFwgi8SiGLeVSxTui20fbdG0=
Subject key identifier: D4:94:75:50:E0:EE:02:09:D9:55:0D:66:43:13:F6:AE:AE:F4:6D:EF
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 01A0DC85734997C40673C11E96B78E6E614B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number: 108F
Signing time: Sat 26 Sep 2026 07:02:08 +0000
Manifest this update: Sat 26 Sep 2026 07:02:08 +0000
Manifest next update: Sun 27 Sep 2026 07:02:08 +0000
Files and hashes: 1: p8Q1T6owao0UtFaI0uzL9fVOIDk.roa (hash: ETVPkMleWg5Tmk9ZZqBQNGmyAM72infgVzIH2DgSiBI=)
2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: OoYGA/Jp2rmBy720n2Ki5YBsGIGUbLcSzlFXLjDmCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:73:49:97:c4:06:73:c1:1e:96:b7:8e:6e:61:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: Sep 26 07:02:08 2026 GMT
Not After : Sep 27 07:02:08 2026 GMT
Subject: CN=d4947550e0ee0209d9550d664313f6aeaef46def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:a4:0b:26:0d:f5:c2:80:68:58:f6:78:f6:
1b:5b:e1:fb:56:a3:7b:d2:f0:d6:0f:98:7d:99:50:
c8:1d:87:7c:5d:cc:82:39:cc:8f:69:9a:22:74:f0:
c4:20:c6:6f:9c:e0:a2:32:a8:02:f0:90:20:63:c8:
fb:cb:2f:ba:86:51:be:c8:42:e5:5c:59:9b:ea:f2:
4d:04:9c:00:53:08:ae:48:82:25:1d:be:04:12:d6:
c1:50:1e:58:a0:e5:d0:3a:2d:1d:26:18:4c:55:21:
16:9b:f0:d4:d4:3c:1d:4c:ba:af:4a:e5:8e:03:79:
4f:e1:04:33:b4:c1:0b:dd:62:4f:85:7b:cb:38:42:
17:21:d7:f8:66:50:b8:ed:f7:9d:3a:c3:56:41:e4:
72:3f:a4:82:7f:72:f1:1a:2d:e4:26:94:b0:d5:2b:
f2:a0:99:82:60:c3:c4:02:ab:db:41:e0:cd:50:7d:
8a:90:c9:7f:88:8e:e0:cf:a5:a1:0a:74:51:21:74:
bf:fd:13:a4:42:46:ec:cf:fc:41:80:77:ca:fd:95:
64:8f:97:b5:70:b8:70:01:ef:87:c5:71:ca:4b:dc:
aa:20:6f:bf:d0:72:03:77:af:ff:a7:b4:4f:e1:6b:
20:5c:50:8e:10:be:d8:1e:0f:63:87:9f:c3:e1:74:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:75:50:E0:EE:02:09:D9:55:0D:66:43:13:F6:AE:AE:F4:6D:EF
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:dd:9d:39:a7:ce:7c:7f:54:f7:8e:e7:29:b4:13:b2:28:fb:
eb:a1:8d:cf:62:e1:90:fd:f8:44:f6:e2:69:83:99:d0:d7:8f:
c0:16:c5:ee:ce:c9:b4:24:58:18:3a:21:b0:a5:7a:9a:ba:37:
58:73:aa:a2:79:8f:a3:c5:ff:38:74:93:76:a1:cc:c7:5c:38:
43:09:c5:7d:a1:11:31:95:07:f9:75:b3:3e:47:6b:24:92:a1:
bc:69:17:5c:e5:50:52:12:ed:20:45:72:ae:a3:6d:de:74:4c:
14:b0:dd:64:44:3a:c3:4c:a3:66:dd:7d:27:ce:69:6b:f0:ae:
39:73:2b:39:98:73:19:9f:a2:a4:af:39:20:8d:12:a2:7b:c1:
4c:b5:9e:99:d6:2c:65:75:82:73:6c:96:dd:f5:28:e8:52:28:
d3:6c:45:33:87:58:c2:2e:ac:a4:dd:7d:08:ce:74:06:6f:3b:
ad:94:71:37:15:7f:ce:2d:79:13:4e:a8:b1:d6:01:74:34:d3:
17:51:05:69:73:26:08:e1:ee:ab:b1:51:7b:ee:3d:08:6c:0e:
dd:82:e1:91:30:02:b7:6f:f2:6d:81:fc:9d:1e:63:22:76:31:
06:cb:ce:2a:7b:0a:cb:e5:86:c7:2d:52:32:6d:a9:86:cc:39:
11:c8:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:59:14 2026 by rpki-client