Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: ms9ZK509troxMvUq3SUr3RLdvCH3IKj/B2WjGN+1frw=
Subject key identifier: 33:76:D3:A8:41:6D:C8:1F:E6:07:8D:7E:54:5F:C6:64:2C:31:09:08
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 01A0CDB570B2BF343E4BB970AFE2B7D63FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 10:00:15 +0000
Manifest this update: Wed 23 Sep 2026 10:00:15 +0000
Manifest next update: Thu 24 Sep 2026 10:00:15 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: NJUy5Z6aqI0lsHn+1r3Rd06Zzqw03jfW97oUajhO8jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:70:b2:bf:34:3e:4b:b9:70:af:e2:b7:d6:3f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Sep 23 10:00:15 2026 GMT
Not After : Sep 24 10:00:15 2026 GMT
Subject: CN=3376d3a8416dc81fe6078d7e545fc6642c310908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:aa:3d:ad:51:80:dc:30:f8:d2:5a:65:4a:
66:0a:fe:d9:1e:b1:d7:6a:a9:88:d5:a8:1e:52:e8:
1b:ed:0d:e3:b6:81:2f:ee:9a:12:5e:73:5c:72:dd:
02:8a:3a:f2:80:53:dd:47:49:28:a3:39:5a:27:14:
df:e1:ce:2c:cf:07:e0:1a:b6:e5:bf:44:f9:a0:b8:
4f:98:c1:f2:3c:77:2f:9a:4f:6d:c7:ff:06:82:c7:
37:08:56:8b:89:84:cd:83:d8:99:38:41:31:68:c4:
0c:3c:fa:6f:41:94:f0:ab:8e:4d:a2:b2:73:a7:ea:
3e:a8:77:12:17:f7:d6:26:58:b3:8d:d7:1c:f0:c9:
9f:b9:4a:72:a1:5a:e5:b4:e1:e1:c2:7a:a7:e8:d9:
1c:95:0e:1a:4f:d6:cf:2c:38:ca:87:bd:12:d6:ed:
c9:70:1f:53:91:f3:68:90:98:20:45:84:57:36:02:
8c:f3:d0:41:22:91:e8:b6:f8:19:40:66:23:14:d2:
f7:40:00:8a:23:b7:1e:76:99:2a:66:48:85:03:25:
ed:17:a1:ad:2e:a8:28:30:b1:c0:8c:1a:64:f2:a5:
c6:15:d7:a2:fd:19:3d:01:78:0d:3e:82:59:4f:70:
ee:f8:5d:82:71:61:3b:38:93:50:d9:b7:32:5a:13:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:D3:A8:41:6D:C8:1F:E6:07:8D:7E:54:5F:C6:64:2C:31:09:08
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ef:46:df:5e:86:96:80:17:e5:e3:7a:f6:54:e2:b0:e4:d2:
e3:78:fc:42:d8:9c:df:39:fd:41:47:ab:41:57:5e:ae:ad:90:
e7:7a:a6:43:7a:11:ad:11:7b:3d:d7:60:02:58:b4:72:3b:5b:
56:63:bf:60:74:e3:89:f2:b3:31:72:0e:7d:fe:f1:46:34:c1:
47:e8:ee:9f:4d:56:77:d2:21:38:0c:13:4b:38:14:2a:4b:8b:
37:dd:64:f1:3a:4d:55:cf:84:de:32:bb:3d:30:86:96:d6:53:
2d:4d:3a:fb:f3:86:85:6a:78:e2:db:ad:9d:c8:4a:82:0c:09:
43:65:a4:36:e5:4a:5f:23:b7:0e:d7:c4:15:71:64:62:f1:0b:
86:a3:bc:5f:a9:60:91:2a:f4:af:50:0c:5e:0c:3e:7b:52:c3:
0e:33:4a:17:3b:cf:b0:86:e7:a1:6e:7b:ed:13:77:d1:32:ab:
39:56:35:c1:57:e4:6f:5d:11:a8:d7:fa:ae:d5:9e:e8:28:b5:
2a:aa:30:1b:65:78:79:09:e3:32:24:e3:b6:82:c1:b3:99:f3:
57:1b:4d:5f:64:90:72:51:54:3c:de:0f:c5:e8:73:14:10:99:
4c:4f:8c:61:0b:8f:e1:45:a8:16:61:7d:ea:95:eb:b5:ef:b3:
53:7d:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:59:51 2026 by rpki-client