Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: hKVPL+2B9IPF44hxwbUVe0ijTkKk4mJjz9GS40n9c+w=
Subject key identifier: 81:EE:F5:03:32:5F:23:22:17:43:97:1C:3A:44:15:85:77:41:02:FD
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 01A12F211B176BB047FAA95FCB5A86FC3E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 0D8F
Signing time: Mon 12 Oct 2026 08:01:01 +0000
Manifest this update: Mon 12 Oct 2026 08:01:01 +0000
Manifest next update: Tue 13 Oct 2026 08:01:01 +0000
Files and hashes: 1: dOj9E6FS6DEoaUcEFe4gpHgcFuo.roa (hash: dnfO9626LH91ChjEi8apYPGETS9gQAIqmrEgki3RmE4=)
2: s8k12EMWos9WpllXttebevgRpwc.crl (hash: E5nn+pPJNnigiX/znEd9Hemp+921i/cvlVKpJZ5zGOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:1b:17:6b:b0:47:fa:a9:5f:cb:5a:86:fc:3e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Oct 12 08:01:01 2026 GMT
Not After : Oct 13 08:01:01 2026 GMT
Subject: CN=81eef503325f23221743971c3a441585774102fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:7f:06:59:8e:05:4a:66:4c:4e:05:dc:2d:
2c:3e:97:67:81:b8:b4:c8:55:44:2a:ba:81:fc:70:
09:05:63:31:ba:68:54:58:35:f1:93:12:29:2e:2a:
e4:76:61:39:13:e4:77:04:14:09:6b:06:5c:ca:b8:
0e:ca:89:12:8a:46:a2:02:7e:a7:f2:9c:9f:dc:c9:
06:29:49:39:0e:cd:19:11:0f:f1:5a:12:52:a3:2d:
20:35:e8:ee:ea:c1:c4:be:b8:a8:85:4d:fb:4c:0d:
94:8c:47:aa:f6:cd:37:2b:1d:61:51:96:8e:45:9c:
b4:16:a9:7c:a3:bb:9b:65:81:a3:f0:24:60:df:f4:
d9:2f:47:1d:3e:9d:4e:21:d1:9a:e9:12:cc:d9:5d:
4f:19:b7:8a:69:c6:a1:2f:f2:ec:9e:ce:fc:36:84:
8c:83:83:1b:b9:27:0e:a5:73:27:8e:8d:d9:fe:74:
61:ea:8b:97:a2:75:2f:f1:bc:6b:07:91:10:d8:d5:
6a:c0:e5:b4:5a:f4:13:e9:2c:80:f2:b6:a9:ee:ae:
cd:e5:d6:38:1b:e0:e5:89:2c:a7:b3:1e:f6:a2:a5:
5d:46:45:b8:94:8a:d5:c3:02:6e:58:3c:cb:17:0e:
b2:64:5b:5d:7d:2e:49:3f:ab:d1:9c:cf:07:48:b6:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:F5:03:32:5F:23:22:17:43:97:1C:3A:44:15:85:77:41:02:FD
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:06:62:68:bf:35:37:78:e8:ea:9d:3d:48:30:91:03:40:05:
00:01:03:ef:09:bb:e8:4b:a1:cf:ad:92:a2:e7:6c:72:de:e1:
98:ef:74:7e:16:56:3c:0a:e9:c7:b4:d6:7d:65:d9:3e:87:2d:
5b:61:8f:f3:68:da:2f:35:2e:b9:fb:4a:2b:9f:4c:6c:35:2c:
14:ee:03:6d:4f:51:43:d5:dd:e9:f8:d1:02:64:5b:2a:9e:8a:
3f:c2:cd:d5:c6:23:ae:70:7d:60:4f:61:20:2f:e6:86:26:5c:
31:7f:29:89:dd:56:46:69:ab:52:a0:73:69:08:98:08:ba:86:
9f:e1:af:68:d0:62:74:94:09:82:08:2a:8f:17:d4:46:73:dd:
a0:d1:9a:3a:82:62:7f:2b:9c:5d:4e:4e:fd:ff:6e:8b:e4:58:
fc:5d:d9:99:70:10:3c:a3:71:4b:85:3c:4f:e8:c8:fa:5c:7e:
f3:83:52:64:d3:4e:5e:ca:62:90:cc:3a:7a:0e:65:2a:33:76:
7d:f1:5b:64:6b:42:2a:1f:d3:f7:a1:e5:e0:f5:84:cd:e4:8c:
74:f1:f3:db:c0:a5:00:ee:22:58:85:77:c7:c2:9c:14:a1:7b:
b1:42:8c:03:ab:34:47:a6:8e:b3:9b:7f:6e:b3:c2:1f:fb:29:
80:dc:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 11:51:44 2026 by rpki-client