Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: R+KYIl6rVC5GpyxJVt9sqlw01odBhKT5vwKGnaVuDxc=
Subject key identifier: A3:A0:A4:12:13:C1:6A:F8:CD:C6:E4:6E:1D:42:B4:A4:6D:EC:D7:07
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 01A0EBF9B474D681FCB27628D251D9291660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 09FA
Signing time: Tue 29 Sep 2026 07:03:25 +0000
Manifest this update: Tue 29 Sep 2026 07:03:25 +0000
Manifest next update: Wed 30 Sep 2026 07:03:25 +0000
Files and hashes: 1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: D3av9vsMlnWKIaN0arZQYOZz3SzkcdB8WaQGM0jXrMs=)
2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:b4:74:d6:81:fc:b2:76:28:d2:51:d9:29:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Sep 29 07:03:25 2026 GMT
Not After : Sep 30 07:03:25 2026 GMT
Subject: CN=a3a0a41213c16af8cdc6e46e1d42b4a46decd707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:73:78:e6:98:45:aa:9f:37:b4:81:02:34:
b3:ed:c3:8c:8f:0a:be:d8:4f:66:92:5e:c3:49:57:
4a:82:3f:81:bb:b6:d4:37:47:d1:42:31:08:ba:1b:
fa:8a:b0:a3:06:6d:15:4b:1d:01:67:e2:f0:55:ab:
2d:5d:80:a8:c8:e7:b1:50:41:2a:20:e1:1f:51:d4:
c7:37:ac:94:76:68:8b:30:2a:0a:e6:a5:8e:ab:8c:
40:e3:3b:ee:73:bd:60:ed:e3:a1:56:3f:88:11:25:
87:0d:52:0f:3a:80:46:ef:79:21:5e:c0:7e:6d:c2:
e8:93:57:83:00:d0:12:ab:c5:c1:9f:3f:55:61:6f:
6f:9d:4c:f1:f8:46:50:45:73:5a:80:4e:4d:2b:34:
cd:69:aa:ac:5d:c0:8b:47:30:80:fc:71:89:55:81:
fa:f5:b2:77:a9:55:b1:3e:c5:ff:82:c0:53:b1:aa:
1c:4d:0b:92:b1:b2:5d:5e:04:fa:e2:b8:5c:68:f6:
b0:e1:ac:11:d7:95:73:42:ef:74:86:16:ed:9e:cb:
00:44:95:0a:6e:e3:9d:99:07:d7:cb:07:ed:bc:cd:
df:f6:19:b1:7f:9d:e2:33:cc:3a:e6:b0:0e:1c:a7:
fd:2a:ca:9c:f2:e8:cd:b0:4b:f0:09:63:9c:85:e4:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A0:A4:12:13:C1:6A:F8:CD:C6:E4:6E:1D:42:B4:A4:6D:EC:D7:07
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fb:d9:1c:66:a8:1a:5f:ba:b9:6e:01:d0:75:c4:38:e0:a5:
c3:18:cc:27:df:8e:23:7e:e0:0f:59:d6:23:f2:d5:bf:9a:c7:
67:43:0f:3b:bd:ce:d0:b6:b0:fb:8d:ff:53:9e:c8:6c:ab:2a:
76:a3:84:15:13:a2:1a:da:69:08:50:c7:fa:95:35:5b:05:88:
a7:a0:19:7c:02:26:87:d7:c7:57:f2:66:41:3c:41:d7:cb:18:
1e:fd:c0:5a:47:c2:b4:96:08:41:b2:b5:ff:bc:59:53:a5:f0:
0b:ad:d6:3d:82:c7:20:c1:c7:bc:a3:1d:a5:d7:cb:73:08:df:
e5:f8:48:c1:41:ed:4a:19:79:91:20:b6:05:76:90:f6:89:61:
9b:69:21:f6:5d:86:ab:03:a1:83:79:ee:6b:ae:40:75:d0:be:
cb:a2:94:80:05:f0:e9:2a:1b:1d:87:87:17:8b:48:49:07:2a:
57:c3:39:cf:6b:68:9b:c8:41:59:d9:9a:f0:46:d1:fe:5e:49:
bc:8c:bc:ce:85:90:97:98:c8:0e:03:ae:9d:7e:aa:8e:21:79:
13:92:85:93:1e:98:f1:7d:8b:59:05:c9:b9:20:02:fa:89:e6:
b8:86:b0:17:72:36:c5:f2:9f:e2:a9:9f:d4:52:f1:63:ce:67:
aa:6d:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:56:40 2026 by rpki-client