Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: N6fQqIYNT+uN0U4tXQOBU1E16TogDDvChwNRvRd53b0=
Subject key identifier: 59:21:CC:24:77:17:F8:26:0C:1F:73:B4:23:1A:47:67:B1:B4:A4:61
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 019CAC470EE860B0FAD269FD7C024CBA0235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 0F40
Signing time: Mon 02 Mar 2026 02:01:03 +0000
Manifest this update: Mon 02 Mar 2026 02:01:03 +0000
Manifest next update: Tue 03 Mar 2026 02:01:03 +0000
Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: eCHCv2js2Rg0brAptqN68FU7D4w6eC+KNCx9Swb3d6I=)
2: foPJ5M9ZOVkGAWVnVqDC4Cs4-NU.roa (hash: 1DlyQW+RNTimUxXGNa+g3AQuv/uMpZoTB33IBxZu3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:0e:e8:60:b0:fa:d2:69:fd:7c:02:4c:ba:02:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Mar 2 02:01:03 2026 GMT
Not After : Mar 3 02:01:03 2026 GMT
Subject: CN=5921cc247717f8260c1f73b4231a4767b1b4a461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:94:19:ee:ac:57:fa:88:8e:ec:ee:17:48:
ea:c5:01:2d:63:60:0e:2f:91:9c:c5:80:da:80:66:
33:6c:f3:28:11:d0:9d:ab:e4:1c:2e:1e:3a:99:5f:
dd:47:ae:67:8f:42:9e:ba:fb:74:54:f2:da:8d:f9:
ae:0e:1b:95:47:95:00:07:d3:83:b2:c9:ac:61:46:
cf:be:a5:25:d1:0c:b9:b8:3d:23:40:84:4e:c8:f6:
f0:a5:d8:f3:1d:93:26:6f:de:b5:11:67:c4:e4:ab:
53:aa:b7:99:cc:b4:16:e7:11:09:60:8a:34:f4:cd:
ac:4d:5c:fc:2f:8a:50:ff:cf:ba:64:d5:67:d3:1a:
ae:55:fb:50:f2:12:2e:57:7a:cd:57:0d:e6:d0:51:
a4:7c:08:67:35:6e:06:5e:ec:30:60:e4:9d:cd:d5:
ee:75:dd:9f:dc:4a:83:56:75:37:fd:99:6d:68:69:
98:79:00:7c:7c:bc:20:f0:de:a0:7f:09:4d:64:9d:
67:ba:35:7a:73:89:91:4b:4c:71:ca:d6:c4:c6:35:
6b:b3:9d:15:9a:10:52:c9:c1:fb:85:62:e7:17:6f:
27:e9:54:ec:ba:23:42:c4:89:bc:3c:ae:2e:9c:45:
76:e8:18:f9:88:7c:96:fe:13:bc:5c:55:0a:82:80:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:21:CC:24:77:17:F8:26:0C:1F:73:B4:23:1A:47:67:B1:B4:A4:61
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cc:18:c7:f1:bc:a2:15:19:0c:76:02:67:e5:34:ff:e7:a6:
97:bb:68:db:89:9c:00:31:7d:31:fe:e2:e9:bb:08:85:d1:74:
52:32:12:4f:91:20:75:71:0c:e1:97:99:22:14:0d:36:0b:60:
0a:30:a0:2c:74:a0:9b:96:35:d9:30:a7:b2:90:c6:f8:64:6d:
8c:55:fb:5c:5f:e3:ac:0f:2c:22:5e:2a:7f:41:09:cf:9f:72:
64:dd:91:74:dd:1b:63:b7:a8:42:3e:ca:99:27:de:f3:21:b9:
9d:d8:37:42:ef:ef:6a:6c:d9:6d:52:2a:9e:89:b4:8e:15:29:
25:c8:b0:ba:56:42:95:fe:ea:0c:0c:81:0a:94:4b:cb:34:4c:
21:84:99:a7:d0:eb:92:41:0f:9b:61:65:08:a7:b8:35:9c:c3:
6b:0b:c7:42:f9:59:65:af:1e:ff:28:11:4c:3b:9d:bd:d3:d8:
87:09:30:66:57:3b:13:6a:4b:29:46:5a:c1:8a:9b:fe:56:78:
00:7f:9e:2f:7e:db:f2:15:e2:24:f5:df:df:0f:1c:95:5e:61:
7d:81:f3:0f:17:20:28:61:f9:d7:05:f5:b8:08:2d:82:9b:6e:
2e:12:52:3c:ba:0d:74:6f:bf:a7:29:fd:e3:a6:1f:23:05:16:
de:3e:89:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:55 2026 by rpki-client