Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: XJTTcqjhQRZ/L22N1/CAHLZBQv/dbZPTm0CeZeiU6bA=
Subject key identifier: 90:31:2F:95:93:DC:FD:A3:75:ED:A0:D5:6E:33:C2:78:1D:DA:34:99
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 01A0CBFE6664920097E92BD096E137CF0613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 147D
Signing time: Wed 23 Sep 2026 02:00:42 +0000
Manifest this update: Wed 23 Sep 2026 02:00:42 +0000
Manifest next update: Thu 24 Sep 2026 02:00:42 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: igvhp1yO8D/Iunv+gogrNy8jeAG0rQEEEtPmIrUFTpc=)
2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:66:64:92:00:97:e9:2b:d0:96:e1:37:cf:06:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Sep 23 02:00:42 2026 GMT
Not After : Sep 24 02:00:42 2026 GMT
Subject: CN=90312f9593dcfda375eda0d56e33c2781dda3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9d:b8:d7:a0:19:f0:d9:07:bc:df:f9:c7:d0:
64:02:9d:5c:48:8b:4b:25:b5:70:93:bd:84:9c:c4:
2e:2b:76:d5:00:61:42:76:63:10:ef:bc:37:df:c2:
1a:63:f8:2e:41:77:78:80:01:5f:b5:37:95:5b:f8:
ff:f7:50:d7:12:9f:ae:48:3d:20:c2:03:ff:a5:ff:
3a:7e:bb:50:c0:89:67:a9:9b:41:26:ad:2c:c8:ab:
2e:39:cd:38:64:ed:79:bd:32:0c:11:1b:63:f0:ba:
15:6b:33:06:ca:d5:8d:c9:73:70:8d:f4:64:f3:7b:
9f:75:14:8d:6c:e3:ca:94:bd:b3:b6:09:e6:b3:c7:
18:67:14:47:3b:dc:6b:2b:53:08:2e:3d:30:41:c9:
70:73:ac:c0:8f:9e:a4:55:78:a8:1c:c2:84:7d:42:
87:4b:2e:fa:e0:b0:f7:bb:9a:0f:aa:f7:c8:db:42:
97:42:e0:96:dd:90:56:bc:3e:4e:85:82:0f:58:59:
aa:74:3d:48:f5:cc:8a:74:ed:46:01:c1:61:a5:26:
69:71:0e:0b:d2:bf:f6:14:a9:27:b2:ff:cd:c3:f5:
3c:0b:bd:64:00:b5:42:10:f1:ee:f3:cb:52:3e:f6:
b0:bd:9b:08:d9:d9:64:fb:12:63:8e:13:76:53:e2:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:2F:95:93:DC:FD:A3:75:ED:A0:D5:6E:33:C2:78:1D:DA:34:99
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3c:71:ec:96:6d:07:4c:fd:a8:ba:f6:e6:44:6e:32:7b:dc:
37:94:61:d9:46:6a:db:4c:6e:05:e6:5b:d4:23:26:f8:7b:72:
67:88:41:5a:40:1c:17:64:e4:49:7e:be:1b:98:5a:51:0a:4c:
0d:34:e0:b5:9a:ca:0b:fd:43:4e:81:05:a1:0c:f8:af:09:fd:
e3:a4:5d:b4:b0:7d:4d:88:9a:35:3c:ee:a4:48:9e:fa:df:40:
4d:c7:6a:bb:d2:06:2d:3f:95:40:85:69:7c:4a:a2:dc:af:24:
0a:c3:40:d8:71:b3:cb:16:bb:36:77:d2:e8:9a:ed:53:d7:8b:
06:8d:9a:1a:3a:2f:bb:ea:e1:8d:4e:ca:2f:c2:56:e6:04:a3:
96:56:bb:62:3f:1e:5d:f8:05:3f:e1:f5:02:a5:71:33:22:77:
1b:9e:c4:52:22:1f:fa:bb:2b:cc:48:d8:a6:fe:3f:c9:4b:d4:
73:93:8c:b5:f2:57:a3:4f:85:7c:c2:30:34:78:41:1b:e9:1e:
e2:bd:ac:e2:f7:82:45:93:82:12:bf:8c:ba:f3:2c:7c:c9:54:
63:9c:ae:bb:9b:da:3f:e1:b6:85:cf:78:94:e7:c4:5f:1c:f2:
40:ef:a5:29:e2:72:35:93:14:4a:76:c5:7b:7e:24:5e:40:4d:
78:b8:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:39:09 2026 by rpki-client