Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: vphKvhVX9lwYEBlRak+wvxpIF1iE+VOC9ik3MTXfyn8=
Subject key identifier: 08:8F:37:A3:E9:C5:8C:5B:24:39:BA:FE:A2:6C:DD:BC:C7:F7:BD:4A
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 01A0D426D89005787EB826EDF2B64CDCFB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 19FF
Signing time: Thu 24 Sep 2026 16:01:50 +0000
Manifest this update: Thu 24 Sep 2026 16:01:50 +0000
Manifest next update: Fri 25 Sep 2026 16:01:50 +0000
Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: qcJjMkRq6k5oZ9s9eHb8xJ1EiCrYYiowc/6psZxpbJM=)
2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:d8:90:05:78:7e:b8:26:ed:f2:b6:4c:dc:fb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Sep 24 16:01:50 2026 GMT
Not After : Sep 25 16:01:50 2026 GMT
Subject: CN=088f37a3e9c58c5b2439bafea26cddbcc7f7bd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:98:ec:89:39:85:1d:b3:bb:64:7b:23:78:
cd:2d:2f:f7:f5:be:29:bc:0a:03:b5:ca:59:f3:9a:
32:54:d4:02:75:81:dd:7b:2a:bc:c2:cf:f2:81:c5:
5e:b6:ba:e0:26:56:4a:d2:68:2c:9d:30:dc:6e:03:
12:38:54:29:ae:7b:4d:9d:86:d2:5d:d2:28:f2:9b:
81:df:98:f2:9e:5d:f8:1d:81:7d:18:4c:3e:6c:a7:
22:e6:96:e3:3e:85:a0:63:18:5e:10:87:36:c1:45:
df:96:c2:d3:0d:1c:4b:86:aa:68:77:8d:c1:8d:93:
68:9f:f9:98:41:39:5d:7d:12:6f:ad:35:7b:31:fb:
a9:ed:95:c5:af:8a:a7:65:4d:8a:13:0b:46:5e:0b:
04:6e:e5:da:24:09:f9:28:fb:25:14:3c:8c:68:6b:
a4:d9:64:0b:0b:32:50:32:24:08:b5:5c:66:6c:bd:
37:1f:21:f4:dc:13:01:40:47:66:52:82:38:e4:21:
ac:d6:ab:b4:ed:86:51:4a:91:87:85:28:ec:30:57:
12:28:f5:05:24:3a:e3:02:2d:6a:46:13:e4:13:75:
a6:3b:10:8e:db:e3:98:f9:ff:2b:d7:e5:a8:56:b8:
c1:dd:0d:31:48:60:bf:90:ea:61:e2:c9:db:ba:b8:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8F:37:A3:E9:C5:8C:5B:24:39:BA:FE:A2:6C:DD:BC:C7:F7:BD:4A
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:96:49:49:58:7e:5a:e8:56:09:2b:bf:b4:de:43:9c:40:a5:
8d:d3:dd:3a:de:37:03:6d:41:d1:9b:20:79:6d:b1:12:92:7d:
69:52:d8:da:40:0a:29:ea:44:0d:86:66:3b:cb:6d:55:d4:f6:
88:44:fc:db:90:f9:97:c4:1b:06:3f:f6:68:15:e1:05:89:39:
5f:03:18:43:af:91:59:11:0f:2a:89:02:1d:dc:74:19:7c:07:
64:e0:1e:ab:e5:33:ca:2e:54:8b:6f:3a:03:6d:a8:1a:68:21:
20:e4:15:ad:5e:73:d0:ba:01:48:d2:5d:4b:bf:fd:4f:bb:85:
31:20:76:d6:fa:28:59:cb:3a:68:bc:f4:84:15:4a:98:e6:d1:
b2:09:d8:50:16:44:6e:d8:5b:80:53:ed:86:86:53:1b:63:e9:
7e:73:70:61:8e:eb:16:c9:b5:24:51:7e:2b:16:b6:18:cd:69:
0f:ab:aa:73:0e:71:7f:0d:20:58:d5:cf:0d:f6:89:c6:a9:13:
4b:68:0f:a6:3d:76:28:fe:2b:69:b8:74:7c:1b:6e:e1:51:47:
ec:9c:c5:3c:12:fa:fc:61:63:f9:25:9a:65:c0:4a:de:e9:2a:
e3:67:6b:c2:e5:84:c1:e2:ba:2f:e0:3f:dd:5b:b9:c7:96:57:
37:32:c5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:43:46 2026 by rpki-client