Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/C-p-8g_kQStVnlueyaoJOBYjQO8.mft
File: C-p-8g_kQStVnlueyaoJOBYjQO8.mft (raw, json)
Hash identifier: SqXPw8qz88w6++pJx3UDanD7XfqgHxyj+OXl3lTzuN0=
Subject key identifier: 23:AE:C0:B1:98:F1:42:E3:DC:6C:9B:D0:4E:D9:30:03:9E:E2:81:15
Authority key identifier: 0B:EA:7E:F2:0F:E4:41:2B:55:9E:5B:9E:C9:AA:09:38:16:23:40:EF
Certificate issuer: /CN=0bea7ef20fe4412b559e5b9ec9aa0938162340ef
Certificate serial: 01A0D124584640357D8282F3F9D0C1E4105F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-p-8g_kQStVnlueyaoJOBYjQO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/C-p-8g_kQStVnlueyaoJOBYjQO8.mft
Manifest number: 38
Signing time: Thu 24 Sep 2026 02:00:15 +0000
Manifest this update: Thu 24 Sep 2026 02:00:15 +0000
Manifest next update: Fri 25 Sep 2026 02:00:15 +0000
Files and hashes: 1: C-p-8g_kQStVnlueyaoJOBYjQO8.crl (hash: k2L6oHt+/ILSpDpZ57UCAe/1TxNykHdMuHceGauwk/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/C-p-8g_kQStVnlueyaoJOBYjQO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/C-p-8g_kQStVnlueyaoJOBYjQO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-p-8g_kQStVnlueyaoJOBYjQO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:58:46:40:35:7d:82:82:f3:f9:d0:c1:e4:10:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea7ef20fe4412b559e5b9ec9aa0938162340ef
Validity
Not Before: Sep 24 02:00:15 2026 GMT
Not After : Sep 25 02:00:15 2026 GMT
Subject: CN=23aec0b198f142e3dc6c9bd04ed930039ee28115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:b6:32:5f:0e:18:0b:ed:d3:66:8d:2a:ec:
4b:d7:e3:a6:f7:ec:e1:93:20:c7:fe:4f:65:75:c9:
94:74:66:e3:35:6a:93:64:76:22:44:9d:10:dc:92:
1f:ae:89:f9:a6:28:f0:34:49:0a:96:06:6b:fe:39:
6b:d6:17:a3:53:39:27:e5:eb:2d:16:69:d3:34:96:
f7:75:2a:92:1a:b6:0e:23:0e:0e:86:e6:0b:e1:ef:
e4:3a:80:56:25:ff:1e:00:8e:71:b8:c5:51:a2:89:
8e:2d:5e:4d:1e:1b:7f:2d:68:e3:93:d8:e7:4e:4d:
6d:4e:7a:6c:6d:3b:d0:0c:37:5d:97:da:d7:bc:8a:
e4:a1:f8:d1:a1:46:d5:20:16:f3:13:66:f0:02:29:
ad:b2:9b:07:f4:8a:48:70:c3:20:37:04:6e:48:fa:
37:d2:3c:fa:08:2c:4e:27:eb:29:e5:ca:d8:dc:96:
b5:45:8b:e0:54:f0:20:78:e7:c4:38:c4:5c:41:ba:
be:17:20:0b:29:44:13:d3:4f:45:ba:ed:68:21:c2:
2d:21:25:6f:98:a5:6f:b4:87:86:8b:8c:47:71:a6:
2e:5f:fd:27:65:a9:4d:3b:ce:a5:5f:df:e5:97:80:
28:42:2d:ce:04:d6:3d:39:d6:91:cc:e7:11:e9:27:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:C0:B1:98:F1:42:E3:DC:6C:9B:D0:4E:D9:30:03:9E:E2:81:15
X509v3 Authority Key Identifier:
keyid:0B:EA:7E:F2:0F:E4:41:2B:55:9E:5B:9E:C9:AA:09:38:16:23:40:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-p-8g_kQStVnlueyaoJOBYjQO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/C-p-8g_kQStVnlueyaoJOBYjQO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8101ac-ef4d-4601-8bb3-5f30261521e5/1/C-p-8g_kQStVnlueyaoJOBYjQO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a3:05:1e:85:02:ae:0d:53:86:c0:f7:a0:af:4a:a1:76:f8:
42:53:3a:6a:10:ea:25:61:c6:9a:c3:19:57:d3:18:ea:06:7f:
35:9c:4e:ac:42:9c:83:92:29:ed:47:80:2c:f5:3d:bb:62:21:
12:23:39:e1:8c:d0:42:f9:ba:26:60:f1:2f:53:3b:ab:10:2e:
88:4a:a6:de:4e:ed:fc:dd:17:ea:29:95:4a:04:10:c0:41:51:
8b:45:1b:ea:3e:cc:10:bf:72:1c:15:16:dc:c1:fd:f9:73:13:
3a:67:3c:85:b0:a7:a3:81:3a:03:9e:93:a8:aa:c4:a9:1b:1a:
ef:f7:e6:f0:df:ab:3e:34:cd:26:01:7a:ce:f5:a3:5b:01:f0:
50:4e:16:52:a7:db:6a:ec:04:b2:71:f9:c8:87:cb:08:fe:2b:
63:c3:3b:54:55:08:65:6a:7e:2e:3e:57:31:6d:29:b6:1e:92:
cf:51:b6:2c:63:98:1f:d1:09:94:e8:0b:f6:10:d8:9e:8a:75:
c1:47:51:d2:f9:e3:ea:12:cd:fc:fb:c7:89:e5:c8:a8:2c:9a:
71:6e:9c:14:8d:7f:ab:f0:47:04:7b:cd:ab:f1:02:80:b4:d2:
6c:97:24:4e:52:6a:db:a8:2a:b9:77:2a:3e:4e:5c:66:1a:a3:
09:ac:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:20:58 2026 by rpki-client