Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: HzaVsh2B2KRi8GYWJXEfqip37ScDicgstdQA0d9iOOU=
Subject key identifier: FF:8B:A0:81:56:C6:12:B6:A1:59:00:E8:2D:17:24:8F:13:7F:6A:BE
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 01A0BF8C79C1BA0DAD3B3875FBA1F3A6BECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 08CC
Signing time: Sun 20 Sep 2026 16:00:49 +0000
Manifest this update: Sun 20 Sep 2026 16:00:49 +0000
Manifest next update: Mon 21 Sep 2026 16:00:49 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: d9Q7RZT5VaQJmLnszFMQiwOwBNU1gKauZLRse848U+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:79:c1:ba:0d:ad:3b:38:75:fb:a1:f3:a6:be:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Sep 20 16:00:49 2026 GMT
Not After : Sep 21 16:00:49 2026 GMT
Subject: CN=ff8ba08156c612b6a15900e82d17248f137f6abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:25:ec:08:33:f7:ea:65:e3:92:fc:fe:a9:
04:28:18:48:38:74:13:82:5c:8c:50:9a:96:ac:2b:
32:cb:44:bc:78:83:15:e7:77:6a:f0:45:9a:a6:3b:
43:81:2e:86:3b:58:77:c0:ae:57:a8:7f:03:80:0b:
73:c9:44:26:18:73:88:fb:d7:a9:81:11:89:11:5a:
b6:f7:a6:75:aa:8d:ba:9f:f9:d4:ef:06:f7:22:f2:
3b:09:33:f6:43:bd:8f:87:9e:07:45:7b:87:9d:64:
e7:7a:50:32:a7:ac:52:8a:4b:a4:e9:98:bb:14:b4:
60:49:e9:4a:ec:18:ea:54:56:07:95:88:b3:d7:f2:
08:66:16:ea:5c:94:b9:98:2f:f4:37:16:e2:6c:2e:
f1:75:bb:bb:0b:42:79:18:49:46:e5:c9:64:35:a4:
35:41:c5:d0:b3:b4:90:1e:2f:36:1a:66:e6:97:99:
2d:bf:fa:9e:37:7f:15:18:51:ec:60:1f:b5:2e:90:
03:99:a6:9a:61:0f:02:04:80:8e:e1:27:4d:d3:32:
ac:86:3f:c8:de:de:22:f5:c2:be:15:19:6a:0d:1e:
1e:f1:bf:8a:15:e9:7d:f4:c8:93:23:2d:a3:81:f9:
df:0b:3f:48:36:ba:27:21:f0:9c:f1:b7:fa:d8:b3:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8B:A0:81:56:C6:12:B6:A1:59:00:E8:2D:17:24:8F:13:7F:6A:BE
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:51:21:b5:75:57:f1:b6:62:73:4b:62:01:07:d4:6c:0a:0d:
6d:64:46:b1:46:d4:3c:d1:1b:a8:33:a4:ae:62:56:1c:7f:96:
63:a3:13:f0:5a:7b:0c:8b:45:18:ee:56:17:1d:57:cc:eb:eb:
96:40:c1:0b:82:14:eb:9c:3b:e6:d3:a9:a0:98:14:cb:52:47:
7b:f6:72:77:c5:f7:f1:8e:50:0b:83:00:8f:7e:a8:be:7a:b6:
73:e1:98:b9:ec:03:b7:92:3b:3c:69:7b:66:64:0e:20:b8:50:
58:0d:b4:97:75:80:ec:00:71:f8:68:6f:aa:7b:da:f1:09:7d:
df:20:56:5e:5c:c7:3b:38:9b:05:41:c1:25:23:99:52:0a:fb:
92:84:e4:67:79:7a:61:fc:15:69:9f:a7:25:fc:16:b7:dc:d8:
e3:52:a6:95:e5:ad:ee:39:ff:f6:c7:2f:92:30:83:62:ad:3b:
3b:8b:32:26:fc:5d:f7:3a:15:03:00:e9:e7:60:67:c8:37:cb:
1c:5c:11:f7:ab:7f:55:8e:13:0a:0b:aa:0e:60:a5:58:c8:a4:
28:ac:35:a0:c4:96:b4:27:55:b9:0f:60:1b:01:7e:72:d8:5e:
01:a1:63:a0:fc:5d:59:31:ba:23:dd:ce:dd:95:b3:08:99:72:
83:c5:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:19:04 2026 by rpki-client