Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: x1s1Cieo6Xp2a7WnLZObQPmLjy72PwS31CgQjf+VM4A=
Subject key identifier: BB:36:6B:7B:04:18:63:80:13:30:7B:FB:BF:EB:A5:EC:5D:58:C0:98
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 01A0D9BB7A347B380B509B31110E1FE618FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 0A08
Signing time: Fri 25 Sep 2026 18:02:17 +0000
Manifest this update: Fri 25 Sep 2026 18:02:17 +0000
Manifest next update: Sat 26 Sep 2026 18:02:17 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: diE30Sj80I8pjWl380ePnBk7BBhRwPvzpmWUoI+metQ=)
2: y_SCanDgj_MM1S_IDo64t6KWr_s.roa (hash: c0z1Y3wg26X0Siv87LHdyGq71I3TjKiIOT/D8Eaa0Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:7a:34:7b:38:0b:50:9b:31:11:0e:1f:e6:18:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Sep 25 18:02:17 2026 GMT
Not After : Sep 26 18:02:17 2026 GMT
Subject: CN=bb366b7b0418638013307bfbbfeba5ec5d58c098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:4f:74:be:61:fc:c5:8a:f9:68:cb:f3:db:
c6:f2:8d:37:34:2e:7b:6c:d7:ac:7e:92:19:71:e9:
82:34:db:1e:c6:c8:b3:ec:9d:a4:71:cc:e3:01:75:
26:c4:e9:58:6b:52:36:9c:3f:ad:e9:37:1a:b3:01:
2d:a9:1e:04:dd:9b:76:ca:ea:d0:a7:6c:c7:a8:77:
57:46:6c:c8:b7:22:75:3d:ff:6c:1d:8b:45:87:cc:
1b:28:bc:68:45:51:0a:5f:6a:a6:57:5e:d7:a4:32:
bd:8d:5a:6c:08:62:e7:12:c3:f4:ff:42:1c:f8:84:
ff:33:ea:28:4b:91:ab:68:70:e4:02:bd:fe:66:96:
bf:ef:b9:cf:d5:b6:f3:fd:36:24:b8:82:9b:3e:9b:
0e:5a:eb:04:4e:b4:a4:0c:f6:1f:ac:a2:aa:1e:fe:
75:57:4c:8b:1b:57:9d:ab:d2:60:38:f1:af:23:69:
a7:3e:1c:69:90:6f:90:99:dc:9c:7a:c0:21:08:41:
4a:4b:b6:7e:38:58:c7:d5:80:2c:12:8f:f2:58:79:
5c:d5:1d:4e:5a:66:d6:d8:60:6a:21:29:46:ab:c3:
86:92:9c:4a:33:f5:dd:d8:cf:b6:15:b4:f3:06:ad:
2b:40:a2:a0:72:0e:e9:3b:a4:59:63:c0:27:c1:a8:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:36:6B:7B:04:18:63:80:13:30:7B:FB:BF:EB:A5:EC:5D:58:C0:98
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f4:31:70:fa:12:90:18:e7:6e:c2:80:3c:e1:d6:4b:ea:df:
72:e2:f9:33:08:b7:97:56:4f:c1:63:04:1d:62:fb:d1:b9:70:
54:63:b2:64:6f:7f:20:52:d4:0f:8b:a7:a6:62:8e:b7:c9:c7:
a9:ec:a9:21:97:cd:a8:d6:59:65:5b:1d:fd:1b:54:a7:bc:2c:
27:65:b9:90:ba:dd:af:88:b6:ae:53:f7:9c:5a:77:6a:5e:fe:
15:a3:ce:f0:4a:4c:21:0c:5c:aa:47:01:e9:35:94:bb:cf:0b:
2c:c5:81:4c:9c:5a:a5:38:bf:dc:33:72:3c:6a:f2:5d:a8:9c:
74:98:08:39:f9:1c:d7:87:c6:5d:32:a7:69:7b:e7:83:11:a7:
84:e8:d5:52:7c:1c:5e:5e:42:d9:78:56:8e:41:59:32:08:7f:
4b:69:40:6f:62:64:07:28:f2:4a:e2:37:f9:c4:45:67:d5:73:
e0:2d:0d:75:64:cc:24:e7:5a:5e:1d:20:4a:90:f5:c6:22:70:
cb:5e:35:f7:72:0e:56:93:61:e6:4a:0d:e3:20:ad:2f:c9:7b:
23:51:ae:b8:fd:b5:fd:06:b7:a8:21:a4:b1:89:cc:be:82:15:
00:9a:51:9d:20:27:2e:d0:76:76:9e:40:aa:67:ef:56:16:e7:
33:13:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:40:36 2026 by rpki-client