Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: 1dP+wU5brEv7T2wN2Mh+NMldR2yIWU0Zp5NbifNil60=
Subject key identifier: 68:25:0D:F4:B7:79:1A:DA:4A:B7:4C:BB:56:F9:43:26:37:C7:7B:66
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 01A0D614BCB57764921C5A8CD4D5D826B4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 14B8
Signing time: Fri 25 Sep 2026 01:01:18 +0000
Manifest this update: Fri 25 Sep 2026 01:01:18 +0000
Manifest next update: Sat 26 Sep 2026 01:01:18 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: Mb6vFPKZo/g0iO04q0CG+Mx0gDZcuTAzqHqrI3OAVMI=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:bc:b5:77:64:92:1c:5a:8c:d4:d5:d8:26:b4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Sep 25 01:01:18 2026 GMT
Not After : Sep 26 01:01:18 2026 GMT
Subject: CN=68250df4b7791ada4ab74cbb56f9432637c77b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:24:1b:18:77:55:1e:33:f6:b5:fb:99:f0:
dc:08:56:84:a0:ae:57:9a:e7:6a:67:6d:bf:06:56:
0c:fd:ce:e7:6c:ee:71:bf:e6:58:55:ab:56:ba:cd:
0d:c5:98:7c:4b:c9:cd:14:ce:13:eb:2e:44:1b:f6:
30:e7:30:ff:3c:20:da:a2:e1:eb:5f:7d:f3:8b:eb:
55:e4:f5:96:1f:3f:c5:5a:d1:63:37:64:27:d1:4b:
05:c4:bd:b5:43:d1:14:40:7d:a5:57:94:b8:c4:37:
f5:49:d8:bd:85:61:59:67:83:99:9f:d1:b2:a7:ba:
39:5c:e3:1b:73:84:11:14:2f:8c:88:b0:91:75:be:
11:02:6b:74:55:4f:50:7d:52:b7:fb:c4:20:4f:17:
6f:cd:01:5f:84:41:d5:cc:d4:23:b5:f6:a7:d7:ba:
d4:70:1f:6b:71:d2:94:a1:0a:c7:f1:e3:14:80:37:
7d:52:80:4d:c8:cd:c8:ff:4b:85:84:68:98:8b:9f:
50:f3:01:d5:62:23:29:94:71:12:8a:db:c4:d2:8e:
87:d6:a0:6c:ea:1f:b3:10:be:af:63:14:9c:23:51:
2c:77:ef:fc:c4:71:fa:06:14:bc:1a:d7:cd:29:93:
a1:7f:5f:54:a3:1c:8b:75:6a:63:a2:07:04:c3:e9:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:25:0D:F4:B7:79:1A:DA:4A:B7:4C:BB:56:F9:43:26:37:C7:7B:66
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3c:f2:56:2b:1f:44:6c:f7:54:a9:a3:a1:31:f3:17:2b:a7:
40:18:16:15:80:fb:f3:79:d4:e9:e9:eb:b3:a4:11:b7:db:3c:
d7:5d:ca:52:ed:85:c8:a8:f5:e6:9d:00:2e:01:5c:aa:7d:7e:
43:a4:b8:1a:c7:ec:77:5b:30:45:48:cc:77:4e:7b:85:2d:ab:
b0:24:1e:d6:49:1e:26:4b:cd:ca:1f:e7:4d:7a:bb:71:7e:c0:
01:df:00:96:84:b4:a5:02:b8:89:90:60:08:16:3c:13:bb:31:
01:9a:39:19:52:43:5d:d7:ec:eb:61:b3:ad:8c:48:9e:0b:24:
14:e8:7a:b1:01:09:d2:c1:bc:9b:2c:dc:14:c4:6b:5c:4d:e6:
85:ff:00:27:ed:aa:76:26:ed:78:da:3f:40:a6:90:4d:50:ec:
9b:a8:18:77:52:e9:9e:cf:01:a4:34:ab:10:dc:af:ec:89:1b:
39:dc:02:ad:3b:39:2a:59:17:0c:94:a2:43:cb:e0:91:6e:57:
b1:b0:7f:d0:3b:ae:93:55:6e:50:78:d3:04:9c:d8:27:3a:46:
17:c9:65:34:a0:af:9a:0c:56:cd:83:28:ee:ae:72:c8:df:e7:
ea:77:f1:5f:21:00:e6:06:f5:77:f0:d9:ac:98:67:c2:9e:83:
df:39:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:10:50 2026 by rpki-client