Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
File: C8GL1hWeK7Ynx1zW76Ue657koRw.mft (raw, json)
Hash identifier: jP37orW3iGN2pSQ7KlfYOAqiFGWfYIomlfHdGpapmq4=
Subject key identifier: E5:87:C9:73:1B:4A:A9:67:9E:6D:34:27:77:78:7E:D1:42:6D:21:5D
Authority key identifier: 0B:C1:8B:D6:15:9E:2B:B6:27:C7:5C:D6:EF:A5:1E:EB:9E:E4:A1:1C
Certificate issuer: /CN=0bc18bd6159e2bb627c75cd6efa51eeb9ee4a11c
Certificate serial: 01A0CDB5EB869EAF9AA94B631C950248B09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8GL1hWeK7Ynx1zW76Ue657koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
Manifest number: 01A1
Signing time: Wed 23 Sep 2026 10:00:46 +0000
Manifest this update: Wed 23 Sep 2026 10:00:46 +0000
Manifest next update: Thu 24 Sep 2026 10:00:46 +0000
Files and hashes: 1: C8GL1hWeK7Ynx1zW76Ue657koRw.crl (hash: XPJTevCSclUyT03GsJxQoWe1gLI102ys3UcSc1e+oAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8GL1hWeK7Ynx1zW76Ue657koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:eb:86:9e:af:9a:a9:4b:63:1c:95:02:48:b0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc18bd6159e2bb627c75cd6efa51eeb9ee4a11c
Validity
Not Before: Sep 23 10:00:46 2026 GMT
Not After : Sep 24 10:00:46 2026 GMT
Subject: CN=e587c9731b4aa9679e6d342777787ed1426d215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:eb:0c:26:26:a4:5a:68:ca:e5:cc:d8:c2:
cd:d4:26:44:15:f8:c4:e8:ee:24:26:d3:9a:e2:16:
fb:32:77:86:06:e7:89:37:e2:df:c6:a9:f5:db:5b:
30:c4:89:f5:e5:5d:59:95:e1:65:1b:80:2e:1b:c4:
5c:05:b6:8a:e9:c0:ee:50:92:44:62:21:ee:a0:c6:
ff:16:91:6d:08:f9:68:d7:00:c3:0e:a6:df:fc:f4:
7d:d8:06:21:b3:32:42:7f:58:2f:bf:af:da:48:18:
b2:11:59:bf:9a:28:3c:bf:7f:48:ac:6b:b1:94:ad:
35:33:22:e0:6f:83:40:2e:14:76:0b:3e:f9:c0:cc:
74:79:10:2d:99:74:08:96:9b:9b:df:a6:89:aa:54:
d4:27:41:15:13:ca:49:02:b0:59:d5:e5:3e:c9:bb:
57:d0:7e:3b:3a:5b:f3:61:1e:b3:21:bf:33:5b:94:
b7:1d:ad:3d:5b:c6:cd:f6:05:0e:c9:4a:99:94:09:
69:ee:a1:e4:dd:6e:58:7c:41:25:56:60:7a:66:02:
9c:c1:f5:50:f3:59:d1:85:07:e0:7c:7e:84:5c:af:
d6:91:27:3b:81:cd:96:16:fa:65:f5:e9:8d:3b:c3:
d7:9d:9f:4b:69:5b:bf:68:1e:6f:6c:e5:ae:08:4a:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:87:C9:73:1B:4A:A9:67:9E:6D:34:27:77:78:7E:D1:42:6D:21:5D
X509v3 Authority Key Identifier:
keyid:0B:C1:8B:D6:15:9E:2B:B6:27:C7:5C:D6:EF:A5:1E:EB:9E:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8GL1hWeK7Ynx1zW76Ue657koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:09:b0:7c:b3:d6:bc:27:98:97:0a:34:0b:7d:7b:d9:ea:8d:
5b:bd:49:7e:1d:b0:ac:63:f0:cf:3d:ff:fe:bb:4b:34:0a:a7:
43:63:3b:54:38:fd:c5:99:bf:a1:05:81:bf:9c:c1:23:90:df:
10:ef:04:d0:a5:97:ab:52:6f:21:8b:4c:59:7b:69:0f:e6:3c:
2e:c7:91:9b:6f:49:a7:67:32:2e:26:f8:23:3d:fb:5e:ac:19:
87:7e:b6:81:06:5f:cf:01:8f:9f:6d:0b:32:12:f1:08:0b:c9:
f7:37:53:4d:e1:d6:f4:33:ce:6d:59:83:cb:94:e3:7f:bc:08:
b4:03:ea:c9:86:5c:ab:d8:cb:58:73:ff:8d:b7:6f:cc:eb:51:
f7:9f:fd:64:0f:f0:d7:bf:a2:35:a7:d4:a0:67:c0:35:f7:d1:
af:50:f7:7c:9f:fa:c8:a1:dc:4d:4f:58:70:a9:34:3e:db:76:
d4:81:39:b8:87:81:50:40:d9:8f:12:c0:2c:4e:d0:30:73:94:
7d:1b:14:fa:c0:a1:3a:fa:64:d5:51:c6:4c:b4:51:3a:81:7d:
fc:aa:05:d1:5f:a5:19:ff:e2:e5:85:54:2e:01:c3:cf:1a:cd:
11:a1:84:62:58:68:b5:02:ad:2d:44:f0:20:0c:d3:09:ff:08:
ec:aa:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:23:59 2026 by rpki-client