Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: xdfmq7C0yoLlupLbkMURlH8W2Fay5nJ/Zn77XjDMlT4=
Subject key identifier: F5:81:1B:96:A9:BA:3D:F6:2A:78:A5:FF:9D:B9:2A:C0:33:5C:CF:E1
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 01A1250C6E5795AF319D1D3481115AD257C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 1A92
Signing time: Sat 10 Oct 2026 09:02:13 +0000
Manifest this update: Sat 10 Oct 2026 09:02:13 +0000
Manifest next update: Sun 11 Oct 2026 09:02:13 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: NDDiNKXECMvJYD273Eo9NqgI0/j99F8dFJrY45vBsyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:6e:57:95:af:31:9d:1d:34:81:11:5a:d2:57:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Oct 10 09:02:13 2026 GMT
Not After : Oct 11 09:02:13 2026 GMT
Subject: CN=f5811b96a9ba3df62a78a5ff9db92ac0335ccfe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:cc:54:f1:84:2e:f6:64:70:b6:1f:0c:98:
05:fb:e4:37:c8:01:ec:bb:6b:33:11:94:78:47:30:
30:64:2e:8f:f6:96:f4:54:6a:90:b1:58:83:dd:9c:
e7:a5:ac:6a:01:8d:55:b4:37:ec:f6:bc:f3:0b:da:
d6:0e:1c:2f:42:ab:6a:14:c8:37:37:91:a5:22:05:
bd:db:d8:fe:78:c1:3b:d6:f5:ab:ba:9d:13:00:2c:
48:b0:f1:b8:ed:41:af:a4:81:b4:60:f6:5a:85:ee:
b7:e8:65:65:0c:bb:94:6b:c4:ef:9f:02:8e:97:e1:
0e:e9:4b:2c:77:0e:6b:fd:db:33:a9:b7:8c:4e:7a:
cb:31:b1:01:53:ca:4a:53:e9:1a:5b:6b:b2:3c:66:
cf:e7:ec:3e:33:46:ca:61:60:3d:7f:a1:58:53:3f:
79:4f:5a:5b:35:78:e3:96:10:70:19:5c:57:17:59:
b7:e3:4c:bb:88:f1:56:83:a2:ff:b6:ce:72:23:c8:
6f:af:bc:0c:3a:81:2b:3d:1a:84:6b:48:e1:60:1c:
74:8c:fd:51:a6:0f:42:a3:49:26:a1:a3:cc:1a:81:
c4:70:25:c5:ce:4d:4f:11:8d:0d:75:ab:a1:40:29:
aa:24:4e:de:0a:96:f1:64:f3:d9:2a:6f:dc:8e:15:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:81:1B:96:A9:BA:3D:F6:2A:78:A5:FF:9D:B9:2A:C0:33:5C:CF:E1
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d5:23:4a:1d:d5:1b:30:39:ab:5e:df:05:cb:14:20:f6:45:
46:d1:1b:b7:7e:c1:b6:08:30:2b:3e:f6:24:82:87:c4:d4:75:
48:eb:09:35:aa:14:c2:41:eb:a2:c5:19:ec:50:e4:aa:52:d5:
a4:58:ef:93:cb:30:20:e2:4b:b2:57:b8:72:6b:97:ae:8b:cf:
f5:f5:55:df:fa:95:9b:fe:b2:1e:96:45:36:7e:b5:3c:4e:65:
df:2f:08:91:d5:e7:18:73:76:ed:0f:70:5a:8a:47:61:91:5f:
1a:1c:72:03:d6:98:14:f0:7f:b3:51:a4:67:a4:b6:65:b9:c4:
9a:d3:d4:ad:1b:fc:d6:2b:67:21:53:65:c5:b2:df:a9:44:a4:
0b:42:47:20:9d:1d:21:e0:17:c5:09:d0:78:ff:bf:e2:4f:ae:
82:92:15:9c:df:a7:0e:fe:49:b7:53:da:ea:c7:15:be:28:31:
f6:6a:3a:16:e2:ad:d1:f2:97:af:0e:12:2e:f3:d5:f9:b0:92:
09:d4:12:89:7f:a9:91:a9:9d:e8:cd:37:c7:f9:3d:a4:1d:39:
42:c0:21:84:59:3c:2e:af:62:c6:b9:e5:88:a8:bf:b2:73:01:
7c:02:5c:98:9e:08:a9:9e:ff:d6:10:b9:a9:50:fc:af:f2:46:
c9:19:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:32:55 2026 by rpki-client