Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: YU6rQU1g4mncfxpI66n8c7qL6rOetIkEiAehszqW6EE=
Subject key identifier: 8D:5E:3F:4F:FA:85:BE:7B:45:AF:00:14:2D:B1:26:A6:54:06:84:78
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 01A0D2372D82FA814C2AA7FA40D2839BAC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 08C4
Signing time: Thu 24 Sep 2026 07:00:26 +0000
Manifest this update: Thu 24 Sep 2026 07:00:26 +0000
Manifest next update: Fri 25 Sep 2026 07:00:26 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: kST4lk2juFcbkZAbARKqq4J/w94psKSF/jxSUV5a744=)
2: e40GPVZTDeirYIdOqaP1aapsCXg.asa (hash: h+tl9RH2sA+blXZerCx7ZNM5+m8vY3pFl3hXGBoDo4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:2d:82:fa:81:4c:2a:a7:fa:40:d2:83:9b:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Sep 24 07:00:26 2026 GMT
Not After : Sep 25 07:00:26 2026 GMT
Subject: CN=8d5e3f4ffa85be7b45af00142db126a654068478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:d4:38:bf:2c:6b:db:a4:25:a4:4f:b2:05:
c3:2d:77:58:c9:8b:f0:d7:0a:a4:7d:cb:7a:ee:c3:
e1:8b:85:b9:5a:5c:06:3a:ce:84:0b:3a:94:9d:fe:
5a:c4:6c:e4:96:dd:fe:93:5b:19:6d:7b:12:e6:67:
d6:9d:cf:f1:4f:28:78:ac:0b:ed:c1:3f:84:38:de:
80:c2:9e:ba:72:d5:9b:8a:1e:5a:66:5c:68:12:34:
d7:ba:e0:c0:d4:3b:23:58:8b:2e:64:f0:58:fc:7f:
90:f5:70:e8:eb:14:94:e3:07:95:0e:34:0f:94:ac:
c6:47:05:59:c6:30:a3:10:7a:11:76:bf:3e:78:77:
c4:c9:ab:ca:1f:a0:9f:aa:74:d9:80:9d:61:4e:71:
40:04:f5:3d:0f:21:e9:d2:8c:de:24:82:a9:30:a4:
87:44:e9:b6:d7:68:7c:7e:9d:33:5c:02:fd:4f:4e:
3d:6e:68:bf:70:e1:d8:31:ef:f5:72:de:f7:03:ae:
dd:9e:dc:20:b5:2e:0f:b2:e9:2a:2b:4f:c8:b4:6e:
12:14:70:19:3d:9c:48:5a:bc:e1:4e:ba:0b:08:d5:
51:e0:5b:91:8a:bb:1a:12:cd:3c:5e:7a:bb:01:a9:
34:af:31:10:d4:77:26:8b:fc:e7:ae:69:0e:7c:d9:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5E:3F:4F:FA:85:BE:7B:45:AF:00:14:2D:B1:26:A6:54:06:84:78
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:01:73:14:0f:77:71:8c:33:9c:87:2a:66:a4:29:5b:3c:cb:
2a:51:b3:4a:41:62:ab:46:93:3f:4a:ef:8e:c7:af:ca:c2:7a:
70:4e:5d:2c:e4:95:76:b5:1e:f7:24:d3:d2:bf:5a:5c:c0:45:
4f:d4:e0:45:d9:d5:0b:8b:a6:87:4a:fd:c3:f2:93:50:a4:51:
5f:cb:29:b0:9e:8c:53:5e:f9:72:cd:a4:75:00:25:b3:d7:cc:
c3:4e:ab:51:78:40:fe:c6:57:6d:97:f9:ae:75:88:a3:77:4d:
e9:b0:45:09:58:58:04:b8:fe:50:31:2d:64:e6:92:72:91:7b:
c0:d2:30:f9:f9:03:ae:ef:98:db:0d:8d:9f:c6:74:06:bf:e9:
cd:89:8e:11:2b:aa:ca:44:25:31:a4:af:37:2b:1c:7b:88:b4:
3c:9d:0b:cc:e8:ec:2a:2c:49:c6:8b:5b:2c:d4:76:09:66:0a:
22:a0:13:5e:01:34:be:6f:39:ee:7c:51:88:fb:f9:ff:50:1b:
26:21:c6:97:73:45:c3:02:b4:1b:c8:c7:f1:88:d9:35:4d:e5:
c9:74:cd:0f:6f:ef:f2:f0:ba:86:6e:d5:2a:63:35:4c:bb:63:
b9:ee:17:da:e6:64:5f:fb:53:88:73:a7:8e:03:06:6b:7e:97:
fb:8d:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:47:06 2026 by rpki-client