Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: 4nfMjj2UPs1MSXurbjpA+JRVJo2azV6Ci5LBcSd+Pvg=
Subject key identifier: C8:5F:16:92:1F:01:C3:84:A1:9B:94:BE:EC:8D:3F:E3:F8:6E:89:E3
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 01A0C2564D0D42CE006147AD42500CAA7D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 14B3
Signing time: Mon 21 Sep 2026 05:00:30 +0000
Manifest this update: Mon 21 Sep 2026 05:00:30 +0000
Manifest next update: Tue 22 Sep 2026 05:00:30 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: uoSzOMgNfaWtll9fjyXlc+NKQXSL4eAP2usUkkzTPaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:4d:0d:42:ce:00:61:47:ad:42:50:0c:aa:7d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Sep 21 05:00:30 2026 GMT
Not After : Sep 22 05:00:30 2026 GMT
Subject: CN=c85f16921f01c384a19b94beec8d3fe3f86e89e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:f8:2b:ce:9f:ed:46:05:53:51:09:1a:1f:
bb:31:b7:5c:db:be:dd:6c:70:a9:fa:46:67:72:9e:
d1:10:5b:b1:99:d8:a1:8c:df:34:13:0b:f8:f2:26:
99:bb:f8:4b:76:fb:dd:b9:01:52:58:12:6c:34:08:
49:fe:f1:a4:84:2d:49:d8:cb:b4:ec:32:6c:13:81:
80:5a:a9:ae:a2:18:20:cc:6e:47:ae:6b:0a:45:6d:
c8:ef:a1:56:15:fc:fb:8a:5d:f6:3e:2b:4a:84:af:
bf:8d:a0:5c:69:ce:e4:be:0a:13:ab:84:13:cd:50:
a3:03:e2:6f:1f:f6:7d:c9:56:7a:7f:7e:2d:55:a7:
b6:4d:17:5c:dd:87:f8:74:43:3f:4d:d2:22:45:61:
96:4c:cf:0b:a9:2a:96:53:2f:17:f4:de:fe:09:48:
88:c4:c6:8c:69:84:07:03:7a:3e:d2:df:db:84:7b:
15:e1:92:e1:5c:d8:e4:b1:b6:48:bb:ab:bb:29:19:
5b:b7:d8:c6:12:5b:83:4c:59:3c:2a:64:9a:07:f4:
fd:9c:c8:bd:c9:bd:a6:11:ff:9a:31:d9:ef:4a:d5:
3a:82:c2:b4:0f:8e:70:7b:8d:af:d6:40:07:94:b4:
fd:fb:e3:26:bc:6c:f3:64:16:cb:c3:d5:25:fc:e4:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5F:16:92:1F:01:C3:84:A1:9B:94:BE:EC:8D:3F:E3:F8:6E:89:E3
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fa:a4:1d:4e:ba:28:2b:13:05:67:8e:f3:88:03:02:6b:93:
25:af:4b:13:4e:19:99:21:81:ca:45:b3:54:f8:f8:58:ba:c2:
f1:71:20:61:34:c1:c7:bb:e4:a1:e3:f9:26:b8:65:0a:65:0c:
30:34:8e:23:44:c7:fe:54:a8:ff:19:0f:cd:48:15:04:76:09:
ae:aa:ed:cd:38:54:d2:c6:ff:49:6d:c6:14:ce:d2:59:60:f3:
74:c0:33:05:fd:71:65:b6:bc:ff:e9:4d:b4:aa:76:74:91:fd:
ba:5f:02:1b:f7:2c:c0:57:3e:b9:4a:81:e2:3c:34:34:51:79:
45:cd:61:f4:5a:ac:5d:c5:5c:7d:e7:25:a7:da:a9:c7:75:ee:
cf:b0:93:9d:43:05:98:cf:77:5e:35:53:e2:3d:85:37:6c:27:
0a:eb:c2:de:18:f6:31:d0:a0:7b:7d:02:a3:63:9f:72:b6:94:
e0:40:bf:82:5c:67:b9:7c:1d:40:56:c6:2d:35:58:f7:1b:90:
a8:cb:e7:2d:45:0a:34:48:84:1b:d0:f5:51:4a:49:3b:64:02:
aa:2a:ff:26:85:bc:49:fe:b2:19:ba:4a:67:34:aa:28:1f:d6:
b3:4d:80:ec:9e:40:9a:15:16:cb:6e:c9:46:32:36:01:0a:65:
05:a5:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:35:58 2026 by rpki-client