Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: VcjScjlh1jVsrU1nvbW1NtLvAF4zfYHHMqcZT64DSXI=
Subject key identifier: 5F:59:6E:66:61:BA:CB:FF:0B:94:35:37:8B:C5:CE:5F:88:A2:E4:10
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 01A0CBFE4F3F6B20C30C24E528466873F5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 0A6F
Signing time: Wed 23 Sep 2026 02:00:36 +0000
Manifest this update: Wed 23 Sep 2026 02:00:36 +0000
Manifest next update: Thu 24 Sep 2026 02:00:36 +0000
Files and hashes: 1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
2: 5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa (hash: MY4vTmIm6iMkCfXRGy7HULVmNJlJMi1dSNNh0tuV34c=)
3: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
4: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: uc0TRVFCoxnO6G0UrUruIw5gwlTP6zR/HQnFOK6nYEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:4f:3f:6b:20:c3:0c:24:e5:28:46:68:73:f5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Sep 23 02:00:36 2026 GMT
Not After : Sep 24 02:00:36 2026 GMT
Subject: CN=5f596e6661bacbff0b9435378bc5ce5f88a2e410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:8b:51:e2:a4:26:72:1a:d6:b8:1d:a6:2b:
3b:79:fa:c4:6a:ec:f1:98:2f:de:8c:2e:f4:2c:5e:
56:6f:c7:ea:e7:06:d4:98:fe:ee:f6:67:c0:c9:77:
61:89:73:dd:a5:b0:2d:62:c5:5b:9a:b2:ea:6d:bb:
04:78:40:84:29:49:c5:87:f5:49:76:d9:74:e8:b9:
80:02:71:d7:cf:7c:ca:4e:14:02:9d:ec:b0:ed:b7:
4c:70:19:77:10:f4:96:07:28:83:7f:8f:e3:ba:f9:
6f:a4:97:d6:1d:cf:07:5a:37:d1:35:98:c0:56:8e:
23:8e:0d:d9:70:aa:a4:bd:87:02:e4:9c:48:93:c4:
dd:47:b1:cf:3a:c6:a0:df:01:77:34:27:66:d9:c1:
70:0d:70:1c:df:b1:af:91:e1:09:e5:7b:73:52:38:
b9:56:e8:a3:40:c5:34:53:e1:5c:bf:88:da:78:49:
64:7b:25:37:d5:1c:70:f3:b1:62:94:a9:d4:7a:47:
51:e3:cc:00:4e:b9:5c:a9:2f:55:13:35:02:1c:99:
e2:95:d5:0e:1e:34:75:df:b8:cc:1f:d3:2d:87:43:
2c:32:9f:58:b4:b2:1a:69:24:a4:5f:27:90:30:b8:
30:30:99:0b:3e:84:8a:bd:a9:6f:ac:64:fa:2f:e7:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:59:6E:66:61:BA:CB:FF:0B:94:35:37:8B:C5:CE:5F:88:A2:E4:10
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4b:a9:ff:cd:f8:0e:5d:13:b5:a9:cf:0c:1f:f4:ad:b5:a4:
af:d2:78:61:8e:52:c4:56:90:c1:fa:43:b0:a5:bc:3a:4e:4c:
d7:6d:9f:94:34:38:58:7c:1b:3f:12:f2:b1:43:a4:62:32:99:
09:80:d3:4f:41:79:f4:0b:4a:19:50:d6:47:34:97:6b:0b:69:
be:b2:a7:94:7f:12:3e:7b:c6:a5:cf:44:73:e1:70:4e:65:3d:
2c:cf:0d:48:cb:c4:2e:95:ef:9e:6c:91:6a:eb:ff:51:80:9e:
bc:95:e0:f5:57:cc:22:b7:50:f5:ad:12:ac:3f:df:a7:53:0b:
aa:6a:b5:75:b3:c0:ac:83:8a:96:96:87:94:c6:b6:c1:d6:f0:
90:48:99:a7:35:f5:88:26:77:37:88:6d:a2:3a:84:9b:c2:9e:
48:d0:3e:af:55:d1:54:96:be:b3:22:fa:6a:0b:d0:28:ab:4e:
a9:eb:b2:58:9b:08:f5:b6:8e:5e:e4:5b:b0:37:3d:6f:f1:9f:
cf:c2:14:60:98:34:2a:32:b5:d4:44:5d:f8:be:dc:80:71:d8:
6e:26:f8:c3:94:29:bd:e0:22:76:22:b8:f9:ea:ec:dc:32:9f:
09:36:3c:85:0a:9f:76:6e:6a:9b:b1:f0:91:6a:75:2b:60:ed:
1c:3e:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:57:48 2026 by rpki-client