Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: AFIaChKbmqyVsvyhP1ZKJt0gKz8xGgXlQBObEiNIp9o=
Subject key identifier: B3:DC:DF:C6:63:17:CD:50:2B:F1:3A:84:74:C7:44:AC:F3:1B:70:FE
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 01A10994F88E7DEA5866B057B6C8A80578BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 17BF
Signing time: Mon 05 Oct 2026 01:02:00 +0000
Manifest this update: Mon 05 Oct 2026 01:02:00 +0000
Manifest next update: Tue 06 Oct 2026 01:02:00 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: jx7vaewEzac7Tpt1C9V2JCL0ttBEBuL1MdwB3BwlhrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:94:f8:8e:7d:ea:58:66:b0:57:b6:c8:a8:05:78:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Oct 5 01:02:00 2026 GMT
Not After : Oct 6 01:02:00 2026 GMT
Subject: CN=b3dcdfc66317cd502bf13a8474c744acf31b70fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:ba:ad:f9:6e:d7:32:ed:80:61:e1:e7:ae:
64:58:f9:1c:1f:3c:4a:1c:f4:f0:07:bb:4e:0e:2c:
21:60:8c:f8:8a:b3:0b:32:3d:09:8d:d5:f6:2d:08:
63:ed:28:31:23:3f:23:2d:ae:4e:50:dc:2e:39:37:
7e:91:3a:34:58:f3:20:d2:84:eb:38:b1:04:78:8f:
0f:96:31:a8:66:58:0e:f0:4d:df:e8:59:7d:ed:2f:
9f:51:48:81:73:16:03:c2:7a:c8:2b:9f:1c:0b:a4:
1d:08:c4:f1:b0:da:2b:df:5c:cc:81:e7:3a:a5:bd:
9d:34:d6:57:ab:e8:45:45:65:c0:6d:d6:da:21:ae:
ba:38:0e:bd:3c:7d:b4:74:9d:c0:69:d7:bf:a4:88:
7d:78:f6:e8:54:48:fa:91:16:3f:1f:85:80:12:89:
be:f6:31:4f:fe:99:72:ef:09:aa:2a:07:71:22:d2:
96:45:fd:45:3c:e9:0a:77:a7:0d:cc:c7:79:ef:1d:
74:cb:e6:ed:78:8b:83:cb:00:43:c6:23:46:77:e6:
28:7b:c0:f4:b8:4e:70:93:3c:c1:68:7b:c4:6e:df:
5e:ff:20:ce:56:93:0f:cc:ba:4e:e2:3f:73:26:b1:
e5:c3:0d:53:72:6b:4e:5b:ba:68:5c:83:5a:03:0f:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DC:DF:C6:63:17:CD:50:2B:F1:3A:84:74:C7:44:AC:F3:1B:70:FE
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5b:56:00:3b:76:50:b2:20:cf:1a:13:d8:6f:b2:ce:34:3e:
d9:17:19:47:75:43:7d:3c:bb:1d:d6:e3:35:e3:1a:82:5e:5a:
06:73:5e:16:46:40:cc:3e:e6:27:bd:7f:d0:0d:0c:73:1f:89:
c3:0f:58:20:46:70:fd:09:28:9b:d0:77:23:05:b6:89:09:4c:
64:6d:be:d5:df:e4:9b:8a:46:03:52:7b:6d:bf:a7:a1:2a:77:
d4:72:5e:b2:41:28:67:bb:10:69:19:7f:3a:c5:96:82:be:25:
c9:c8:6c:35:b7:c3:6f:67:2b:6a:57:35:d9:d0:b7:95:bf:8c:
dd:3e:1c:01:87:ce:2f:1f:93:12:8f:69:59:2c:26:49:53:88:
3e:90:9e:85:26:da:d9:de:70:e3:19:96:78:60:fe:42:6c:67:
8e:d3:76:e1:48:91:ff:2a:6e:e5:ec:76:99:3a:39:87:95:3d:
8c:e8:43:7c:e0:a4:77:2e:7f:4e:7d:8d:d8:41:4e:d3:da:62:
51:15:26:a3:55:12:ca:6c:f1:e2:d1:30:dc:7f:08:56:81:93:
26:2b:61:91:cd:7a:05:64:42:f8:b8:80:1b:23:ac:27:c3:57:
08:b3:dd:e4:ba:6b:36:26:57:d0:43:69:a7:cd:b3:b3:8f:a8:
5b:cd:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:39:19 2026 by rpki-client