Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: +leI0WQWDNL1t+FS/SYtXKqMzlpEjuT9o9CIZDxLaWQ=
Subject key identifier: 92:B8:95:4B:74:62:23:9A:45:06:DE:8B:46:F5:DF:0E:B6:02:39:68
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 01A133A2E7223A64B73ACD1991D347EAF516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 04CA
Signing time: Tue 13 Oct 2026 05:01:16 +0000
Manifest this update: Tue 13 Oct 2026 05:01:16 +0000
Manifest next update: Wed 14 Oct 2026 05:01:16 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: B/8oL1ha4Gyum8f7MLZuCtLjfCrbwnJu7d6nrseQz/E=)
2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:a2:e7:22:3a:64:b7:3a:cd:19:91:d3:47:ea:f5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Oct 13 05:01:16 2026 GMT
Not After : Oct 14 05:01:16 2026 GMT
Subject: CN=92b8954b7462239a4506de8b46f5df0eb6023968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:84:b7:c3:a8:5f:63:8e:2c:ad:cd:6a:9b:
0c:3e:c2:a2:19:44:74:44:5d:80:76:28:4e:fb:68:
e1:a0:11:d7:98:9d:bb:76:de:65:6e:c8:92:5f:b1:
15:96:bd:05:62:43:c9:17:f2:24:ae:24:12:57:5f:
03:dc:fe:32:fa:f7:c3:63:28:5d:c5:47:bd:70:64:
8d:f8:d3:11:0c:c4:2c:b4:90:19:4e:fa:a9:49:8a:
e5:69:08:93:1d:45:d5:f2:2a:3b:88:48:db:4a:53:
9f:cc:55:27:b3:d8:6d:06:62:29:ff:ff:7b:40:32:
e2:1f:ea:be:16:e8:b1:90:11:38:1a:91:16:79:a5:
45:f2:eb:ee:2a:b9:81:ff:bc:ee:70:0d:bd:d4:68:
ae:f6:08:8e:74:e3:bd:0d:eb:e6:eb:48:0e:a7:95:
72:30:f2:e5:00:02:db:67:65:ea:24:8e:4a:7c:cd:
0c:f7:f0:7f:4c:50:01:41:3e:d8:b0:2d:62:48:d6:
5e:6a:5f:aa:92:b4:f9:9c:3e:e0:2f:22:7a:97:a6:
41:5a:31:34:96:b6:cc:b9:77:3b:a4:53:7b:3f:93:
3b:7a:22:d2:5c:0b:d8:67:67:6a:be:d0:8e:b0:b7:
db:05:2b:f1:a6:e9:25:99:e5:fd:21:53:44:60:7e:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B8:95:4B:74:62:23:9A:45:06:DE:8B:46:F5:DF:0E:B6:02:39:68
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:af:eb:e0:b8:6e:e9:8b:d5:7b:f2:88:29:f2:ed:da:a9:93:
ef:95:73:bd:7a:ca:8a:9d:5f:5a:55:da:b8:26:ff:52:ef:5e:
23:eb:06:a1:ba:39:db:bf:a1:0d:5e:ab:4d:49:3e:9b:cd:89:
9a:d8:1d:c0:bf:8c:c9:2a:26:a9:52:d1:7c:f3:30:45:1a:fa:
da:c6:7e:d4:42:31:3e:bb:d8:da:18:a7:77:cd:2e:d4:36:90:
b6:0f:23:e4:f3:1e:71:e4:05:f7:0b:6f:6e:13:66:a7:87:04:
dd:c1:ed:ed:d5:42:e5:14:3a:fd:9b:aa:3e:b2:fd:f0:95:c8:
01:25:03:63:a7:16:6a:ec:8d:39:08:19:51:a7:00:41:4f:87:
58:51:24:31:5c:37:b4:22:2a:87:76:ee:fa:62:a5:af:07:01:
b7:1c:b7:44:da:da:2a:72:2d:8d:46:fb:20:e4:a4:65:4d:b8:
63:b0:cf:02:ae:56:63:39:aa:3e:48:22:19:02:62:f3:cb:15:
7f:58:7d:a2:5b:ec:3b:52:17:04:9a:b8:28:e1:5d:91:83:b8:
3a:79:e8:b5:6e:9c:ad:ac:48:d2:23:82:e4:c2:04:ad:2e:6d:
e2:07:03:f0:35:cc:21:aa:26:9d:de:5f:05:bc:52:25:b8:26:
8e:05:dd:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEzouciOmS3Os0ZkdNH6vUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODY4MzJhZGRhNDBhOTdlYjg2M2E1YTY0ODJjOTQ2OTMx
YTY2ZWYwHhcNMjYxMDEzMDUwMTE2WhcNMjYxMDE0MDUwMTE2WjAzMTEwLwYDVQQD
Eyg5MmI4OTU0Yjc0NjIyMzlhNDUwNmRlOGI0NmY1ZGYwZWI2MDIzOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFeEt8OoX2OOLK3NapsMPsKiGUR0
RF2AdihO+2jhoBHXmJ27dt5lbsiSX7EVlr0FYkPJF/IkriQSV18D3P4y+vfDYyhd
xUe9cGSN+NMRDMQstJAZTvqpSYrlaQiTHUXV8io7iEjbSlOfzFUns9htBmIp//97
QDLiH+q+FuixkBE4GpEWeaVF8uvuKrmB/7zucA291Giu9giOdOO9Devm60gOp5Vy
MPLlAALbZ2XqJI5KfM0M9/B/TFABQT7YsC1iSNZeal+qkrT5nD7gLyJ6l6ZBWjE0
lrbMuXc7pFN7P5M7eiLSXAvYZ2dqvtCOsLfbBSvxpuklmeX9IVNEYH5OWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK4lUt0YiOaRQbei0b13w62AjloMB8GA1UdIwQY
MBaAFPKGgyrdpAqX64Y6WmSCyUaTGmbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80NWU3MzgtMjg2ZS00ZjlhLWJhMDIt
ZDk0MzExNDBlNmYxLzEvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80NWU3MzgtMjg2ZS00ZjlhLWJhMDItZDk0MzExNDBlNmYx
LzEvOG9hREt0MmtDcGZyaGpwYVpJTEpScE1hWnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALq/r4Lhu
6YvVe/KIKfLt2qmT75VzvXrKip1fWlXauCb/Uu9eI+sGobo527+hDV6rTUk+m82J
mtgdwL+MySomqVLRfPMwRRr62sZ+1EIxPrvY2hind80u1DaQtg8j5PMeceQF9wtv
bhNmp4cE3cHt7dVC5RQ6/ZuqPrL98JXIASUDY6cWauyNOQgZUacAQU+HWFEkMVw3
tCIqh3bu+mKlrwcBtxy3RNraKnItjUb7IOSkZU24Y7DPAq5WYzmqPkgiGQJi88sV
f1h9olvsO1IXBJq4KOFdkYO4OnnotW6craxI0iOC5MIErS5t4gcD8DXMIaomnd5f
BbxSJbgmjgXdPw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:17:29 2026 by rpki-client