Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: d6gtfFnUtTNRfD3GLjGTH4EXJtEGZws3u/szAwMVPAg=
Subject key identifier: F9:76:1F:EC:A0:CF:8A:10:B2:03:A5:09:F9:C7:4B:24:C9:B2:D5:52
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 01A0CA46B06C9B643BD20F479A0C6B8F4377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 18:00:25 +0000
Manifest this update: Tue 22 Sep 2026 18:00:25 +0000
Manifest next update: Wed 23 Sep 2026 18:00:25 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: R8xpwBD/HH5SUAOqnfaigjTVfYEAChYaXOE3G7xoe1k=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:b0:6c:9b:64:3b:d2:0f:47:9a:0c:6b:8f:43:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Sep 22 18:00:25 2026 GMT
Not After : Sep 23 18:00:25 2026 GMT
Subject: CN=f9761feca0cf8a10b203a509f9c74b24c9b2d552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:99:7a:b8:bc:51:e7:09:9f:94:c8:41:0b:25:
36:94:bb:30:eb:f7:f4:b5:86:17:0e:d6:e6:c3:06:
7e:73:ae:7e:31:11:18:5d:28:92:d4:6e:43:9b:28:
ad:33:93:b5:ec:6d:8a:1d:01:33:55:29:fa:8b:ed:
65:b6:68:00:a0:23:d9:7e:e3:54:79:ec:70:d8:c9:
bc:68:1f:fe:fa:43:a4:a5:7c:f6:93:77:1c:a0:97:
09:09:20:67:66:db:d3:e6:76:d4:bf:32:5a:63:3b:
d3:8c:de:6c:1f:c6:61:49:ca:5a:93:42:e5:89:fb:
7a:d0:d9:4b:ec:19:49:b8:69:fc:f9:6c:d8:ca:c2:
61:0e:42:28:fe:0a:81:2b:17:f0:b5:c8:87:47:5f:
e1:a6:29:25:af:93:a5:5d:89:82:a2:69:d2:fe:c2:
d1:37:53:15:e1:49:75:db:b8:e5:5d:dd:fb:32:a2:
61:f0:ad:4d:4f:bf:b3:58:61:ad:57:0b:4b:45:89:
0e:c4:f0:19:76:d5:af:a3:43:ff:38:d5:12:f5:8d:
b0:28:c7:93:35:f9:86:86:2f:3c:ec:1e:76:4a:53:
1a:8f:3a:40:5d:ab:f2:52:64:54:99:2c:8e:67:6b:
f4:a5:05:6d:d1:41:3d:08:82:c5:a0:bd:6f:fa:29:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:76:1F:EC:A0:CF:8A:10:B2:03:A5:09:F9:C7:4B:24:C9:B2:D5:52
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:ae:bf:3f:78:ce:6a:1a:2e:63:10:99:82:9f:83:23:f9:b3:
e7:6e:ee:30:5f:c0:bc:25:eb:88:c9:1e:20:ec:18:ae:d8:51:
21:f9:67:1d:01:af:d2:8b:06:40:34:0d:d0:77:1f:16:85:f9:
df:89:f5:40:02:ec:f2:72:80:ef:38:c1:ca:f2:81:be:6c:a8:
91:de:14:a5:37:78:5c:7a:89:0d:02:64:11:19:bd:5b:51:1f:
3e:7d:20:a9:71:e7:bc:1e:a3:5e:f3:77:59:f3:0f:4a:54:4f:
80:60:b7:df:07:0c:1b:55:d6:87:e2:00:70:ed:42:5e:c4:43:
e4:77:39:51:93:b0:2f:47:3f:34:15:ee:25:21:7c:68:9a:a1:
7c:5c:70:a3:c5:02:87:e6:f9:00:83:04:a1:6d:5d:8e:eb:53:
ee:be:a4:94:00:99:bb:22:42:1f:14:9a:81:8e:8c:e6:e7:b8:
8a:b0:ae:30:4a:fd:b5:55:7a:ee:f7:c6:a6:18:cc:f8:61:a0:
7c:7d:8c:e3:b9:cd:3b:df:e3:64:de:31:09:88:1e:f1:20:72:
57:30:b1:80:66:1a:93:bb:6c:61:17:11:90:ad:52:b0:4e:8f:
66:00:0f:4a:5a:e8:e3:89:e1:9a:88:54:91:a8:4b:d5:f6:7c:
6a:11:79:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:47:03 2026 by rpki-client