Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: AxGdSkCPWZa/iHi59yrV3KILMbbSdDal7Lh2s3Dv52o=
Subject key identifier: 47:AA:08:73:39:F7:0B:45:84:58:88:29:10:AC:E6:A9:4D:B1:A7:0D
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 019EBF5AA6F26FE44CEFAF06D81954B7B5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 1053
Signing time: Sat 13 Jun 2026 05:00:49 +0000
Manifest this update: Sat 13 Jun 2026 05:00:49 +0000
Manifest next update: Sun 14 Jun 2026 05:00:49 +0000
Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: PMS5tuY8i4wY1PBwSNXBwoQxQ1Hi293rtRJszvKaQQ8=)
2: foPJ5M9ZOVkGAWVnVqDC4Cs4-NU.roa (hash: 1DlyQW+RNTimUxXGNa+g3AQuv/uMpZoTB33IBxZu3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:a6:f2:6f:e4:4c:ef:af:06:d8:19:54:b7:b5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Jun 13 05:00:49 2026 GMT
Not After : Jun 14 05:00:49 2026 GMT
Subject: CN=47aa087339f70b458458882910ace6a94db1a70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:e3:c2:ac:31:75:be:9b:59:18:8d:6c:f3:
8b:74:2f:28:4a:78:64:6a:cd:f6:b2:3c:d7:f0:4e:
50:32:27:95:f3:76:30:99:6f:d0:e9:42:0b:9f:55:
f6:e9:69:ec:9b:e6:cd:63:4e:71:26:e2:f0:dc:79:
53:5c:a5:c4:bc:8b:7a:a2:a7:4a:1a:bf:9a:7b:20:
50:ab:a9:b2:94:26:57:a7:19:8f:72:cd:92:b2:93:
75:3c:72:06:bb:c2:2f:1c:39:36:13:18:f1:5e:43:
79:e1:4a:53:59:c5:11:30:23:15:dd:3e:f1:cc:bd:
6f:a6:02:bc:97:82:18:4d:48:1c:c6:11:f7:74:8c:
b3:0d:89:02:25:60:3b:cc:97:2d:fd:0a:b6:69:d0:
0c:d6:bc:d2:68:6d:a1:73:1f:ab:5f:2d:af:d6:80:
1f:92:1e:0e:81:3b:3c:e7:90:88:c3:4a:77:a1:cb:
22:78:1d:74:c5:a4:57:28:dc:eb:00:26:fc:2e:a9:
68:f8:f7:7d:0a:09:7c:25:58:4e:e7:eb:76:79:e8:
b3:82:e2:0a:72:82:24:2a:5b:9e:82:d0:f4:79:4c:
1a:0c:7b:50:4f:70:27:e1:f1:7a:c7:87:ce:06:cb:
98:6d:f5:6a:6c:25:de:86:6c:7d:64:d1:40:5c:95:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AA:08:73:39:F7:0B:45:84:58:88:29:10:AC:E6:A9:4D:B1:A7:0D
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:07:5b:fd:2e:ab:b7:fb:da:46:b4:a8:4a:1b:f8:39:6e:53:
e3:a6:43:24:a0:68:fe:e2:d6:d2:43:a0:aa:ac:94:01:cc:6c:
c3:14:e7:b5:df:fc:4c:99:91:c3:e3:bb:6e:88:e0:6d:4e:84:
5c:9c:48:71:46:b9:20:ae:a9:5a:7f:86:9c:84:21:ca:c2:66:
3d:fa:73:c2:cc:55:25:a3:bb:ab:ce:47:2f:28:cf:b1:fb:73:
c4:fd:c8:23:41:cb:c6:f0:3d:3f:8e:3a:dc:58:2d:79:5e:88:
1a:20:e1:fe:08:96:e4:1e:08:47:55:c8:56:b4:03:ab:b6:80:
ca:87:b6:e3:fe:2c:e2:78:f8:94:8a:2e:f6:41:fb:e3:b5:c8:
9a:43:55:b5:e8:7b:75:04:31:bf:2d:42:7c:1d:9b:b3:a8:8e:
48:f2:58:b9:4a:c6:c1:25:ab:48:91:97:e5:cb:ce:32:f4:df:
c1:5d:b8:88:b1:2f:39:26:dc:7f:0d:95:89:11:d0:6f:fe:1a:
75:4f:43:63:c5:6e:62:57:0a:2c:0c:8d:13:b8:cc:28:65:43:
8d:1c:6a:05:0b:d2:9e:99:ed:bd:0c:c7:db:8e:d8:d9:9a:fb:
9b:c2:75:57:ee:f1:06:39:4e:ef:7c:37:cf:02:87:df:c9:d7:
4a:00:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:21:12 2026 by rpki-client