
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: evk+yYCa0mOLE13Sm+/w2pgYwq0DA2lZZ2ubqRicOZk=
Subject key identifier: CC:41:3F:49:1A:DA:43:8D:B7:53:C8:94:4F:43:D1:60:6D:56:5B:57
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 01A0DCBB5E8BED058F0B59AC85FBA0085D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 151C
Signing time: Sat 26 Sep 2026 08:01:02 +0000
Manifest this update: Sat 26 Sep 2026 08:01:02 +0000
Manifest next update: Sun 27 Sep 2026 08:01:02 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: p0Q2WnzBKbYSex4y9sB1xSY2KX+7J1JyLIXkqReljLQ=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:5e:8b:ed:05:8f:0b:59:ac:85:fb:a0:08:5d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Sep 26 08:01:02 2026 GMT
Not After : Sep 27 08:01:02 2026 GMT
Subject: CN=cc413f491ada438db753c8944f43d1606d565b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:1c:77:cc:bc:05:ee:9d:d0:dd:e3:62:dd:
f7:82:cb:e3:52:5f:81:a0:90:05:04:74:93:ee:d5:
32:8a:03:4f:a1:ec:49:29:11:cc:dc:15:ea:0e:19:
be:b4:ac:ce:3e:bb:31:bf:6a:cc:c4:50:7d:1f:87:
94:fa:39:53:6c:07:17:91:b5:f4:18:09:d2:de:1b:
27:3b:73:d7:89:67:64:0a:5a:cc:fd:63:dd:91:a4:
4f:f0:e2:4b:ae:7b:e7:b4:ae:5d:a8:29:76:5b:68:
87:85:35:9d:01:a5:0c:c4:ad:e6:36:56:54:e9:e5:
d4:f4:b8:79:38:ee:e9:a4:99:99:ac:2d:5d:26:75:
08:be:5a:1f:98:1b:7f:bd:7a:a2:73:c4:4e:25:cc:
e7:bf:65:57:9f:ae:5d:ce:e1:ed:ca:2a:5b:fc:be:
03:8c:45:6e:dc:00:fc:4a:a4:85:a1:5a:0b:22:6b:
06:13:3c:2d:76:0d:26:71:90:66:ac:c2:39:cd:6b:
7f:04:0d:5d:05:60:2a:f1:2e:ed:93:ae:9f:98:9d:
ba:56:6e:03:23:f6:a3:db:8b:d0:e6:93:03:13:f0:
52:66:03:dc:70:b5:bb:99:a2:7a:8e:de:63:8c:38:
ea:4a:52:10:f3:10:e1:b8:be:f0:66:6e:69:59:0e:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:41:3F:49:1A:DA:43:8D:B7:53:C8:94:4F:43:D1:60:6D:56:5B:57
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c5:ac:9d:51:5a:f4:47:c9:d7:e2:3c:f8:cf:59:39:3d:d0:
29:26:b4:c1:65:d8:58:8b:46:6a:57:76:ba:a9:e1:8e:35:ee:
9f:43:2f:6c:bd:3b:ea:df:c2:f4:bc:45:72:aa:ca:25:2c:6a:
c1:dc:ab:d3:21:02:ea:75:66:5a:a8:e5:37:e3:7e:15:ff:ef:
08:4a:0d:7b:95:d9:26:fd:9b:09:74:1a:e7:2b:0d:7a:9c:12:
5c:35:a3:61:7e:14:e6:96:f7:c9:af:2e:ce:2c:f5:97:59:d8:
89:c7:c7:db:54:45:23:0d:c9:5b:be:12:ba:b8:b8:fa:1f:3e:
8f:16:ab:a9:8f:ba:fd:a7:06:dd:05:3a:3a:9b:83:cc:d2:92:
3b:a8:96:7b:ab:59:bc:cf:de:8d:66:7b:41:1f:f0:8f:0c:3e:
b9:a4:d5:5a:68:7c:83:c2:9f:c0:cf:d2:fb:2a:bb:00:72:c5:
67:3b:1a:22:ba:c3:c6:5e:b0:00:1a:61:aa:89:73:82:10:ae:
e8:bb:ee:c3:ac:cf:75:1a:16:e2:d4:7e:b9:74:c1:1a:19:56:
ba:c1:a5:f5:bb:11:2f:8a:90:7f:a7:08:51:22:df:30:96:f6:
0d:0c:c5:05:6e:92:76:51:b9:e7:96:00:60:fc:aa:8f:0d:eb:
10:cb:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:02:33 2026 by rpki-client