Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: +CHF1+JMUbsxFTBJdxNaA/oKxNYcP9V1hcSRjKtLVW4=
Subject key identifier: BB:38:09:B8:2E:B2:90:22:EF:17:BA:47:12:0B:D7:D0:0C:D5:D4:7B
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 01A0CD119250890D180AD159B7BE53D46A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 19FE
Signing time: Wed 23 Sep 2026 07:01:15 +0000
Manifest this update: Wed 23 Sep 2026 07:01:15 +0000
Manifest next update: Thu 24 Sep 2026 07:01:15 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: EawoFqP/hclg1+Eqq/l0yOAQgtvr0xQZootfI9MzFJ0=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:92:50:89:0d:18:0a:d1:59:b7:be:53:d4:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Sep 23 07:01:15 2026 GMT
Not After : Sep 24 07:01:15 2026 GMT
Subject: CN=bb3809b82eb29022ef17ba47120bd7d00cd5d47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:84:e0:ca:d5:9f:de:67:2e:2e:3a:7f:46:
3b:d1:25:04:24:51:28:91:5c:2b:b9:2a:f9:9f:31:
02:ad:f3:13:d6:38:0f:4a:e6:b8:65:8b:72:0f:5a:
63:5f:9e:63:30:d2:57:9e:05:9b:df:83:b7:ce:38:
d6:a7:ab:29:84:4e:95:aa:27:f8:29:25:de:02:27:
63:49:4c:ec:f1:e7:6a:3a:26:4b:e5:d3:6a:90:8b:
36:0c:87:23:1c:73:02:55:5f:ba:2a:8a:d2:e9:f0:
cc:29:10:6e:f3:da:c6:d4:e3:09:f7:93:0d:15:3f:
48:83:6d:09:92:72:71:44:7a:4a:7d:3d:dd:b1:7b:
16:e5:33:ca:e7:d8:94:c8:af:16:7d:f1:12:d8:28:
0b:56:38:b8:2d:ed:fe:06:ed:d9:57:f8:c8:71:b0:
69:02:ed:50:61:79:3b:01:1a:78:de:61:83:50:bb:
66:7c:4a:2e:df:7d:3a:a7:f6:23:dd:a3:a1:09:80:
c6:bc:ea:74:97:69:b0:f9:d9:76:eb:4d:c6:85:f9:
d3:96:e4:95:94:14:90:30:75:c2:18:57:f9:80:8b:
df:79:d7:47:44:b2:20:a9:98:62:40:99:ab:62:75:
5c:ff:e2:eb:67:da:d8:fa:9f:47:e4:08:99:33:65:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:38:09:B8:2E:B2:90:22:EF:17:BA:47:12:0B:D7:D0:0C:D5:D4:7B
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9c:0f:7d:a6:7a:1e:6d:ba:09:70:6a:f3:ec:26:d5:32:af:
d8:6f:45:04:6b:79:63:1f:dc:ad:e2:c3:6a:90:0a:2f:03:f2:
31:de:a1:9c:78:52:e9:95:db:b9:3d:d9:36:6e:2f:a6:c6:71:
ff:23:07:49:18:bf:54:c2:eb:d4:98:93:73:b9:a4:1a:7d:d2:
d2:08:d0:e2:86:20:6b:96:ff:1d:17:e0:a3:dc:d0:de:1b:0a:
ed:21:cf:07:ff:f1:db:82:5d:a9:c0:20:56:ce:04:87:b7:48:
8c:b1:a9:a2:7f:fd:4d:9a:96:87:66:0a:82:23:a1:d2:5d:16:
e1:f2:99:0a:47:18:4f:84:4b:6f:48:90:a4:81:94:74:c7:24:
8f:41:39:c5:63:53:b7:28:77:31:6f:04:d8:99:7c:3c:bf:b0:
21:e7:5a:67:49:bc:50:91:ae:f0:be:de:99:ce:30:29:48:f4:
da:fd:ff:35:21:e5:12:02:94:35:46:ef:f5:b0:3f:79:3e:0f:
4e:10:db:3f:f9:11:94:f5:4b:1f:39:b0:bc:d7:40:32:34:e2:
48:ad:fb:70:62:d7:d7:7d:fb:25:0b:78:f8:11:e1:ce:b5:59:
71:4a:40:e3:08:10:c4:8a:df:b3:8f:f0:04:32:fc:4e:a0:3c:
59:3f:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:00:13 2026 by rpki-client