Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: 5Vy24cw+yjb0GF584Q+PeYJF8C+oZCGVla2IFIM5BsU=
Subject key identifier: 34:83:32:AA:81:89:B4:CD:0C:FA:F3:B8:C0:AC:0C:B9:15:FD:20:6F
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 01A0CE5B1D9F5ADFFA7DC27532E006F33667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 1A9C
Signing time: Wed 23 Sep 2026 13:01:12 +0000
Manifest this update: Wed 23 Sep 2026 13:01:12 +0000
Manifest next update: Thu 24 Sep 2026 13:01:12 +0000
Files and hashes: 1: 1-oZ9nA1GvkJpmmO85td9UjPVOL8.roa (hash: WbrVzJ+KKcYmbA1ae+jXGRaz8FSjlb5bMrreVZGWW2A=)
2: 1TnMZEQ64_W5HuMznVxKJ5dlFfA.roa (hash: LYwc+mOlM01M+unCNznkUkoP96Z79ZkkIc/aLys/JZA=)
3: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: ZysDBFzn02zWxBNTcsHQF+sauKVzPL25vaqWBZ/fuQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5b:1d:9f:5a:df:fa:7d:c2:75:32:e0:06:f3:36:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Sep 23 13:01:12 2026 GMT
Not After : Sep 24 13:01:12 2026 GMT
Subject: CN=348332aa8189b4cd0cfaf3b8c0ac0cb915fd206f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:8e:58:ae:d8:fa:1e:52:e8:77:f1:cc:50:
cd:30:fa:90:14:78:b2:1b:c4:7f:01:81:bb:de:73:
7e:46:27:5e:15:3f:08:d0:a9:35:3b:93:b3:76:f6:
ea:09:62:14:62:0f:b3:a4:d1:f0:11:5b:b3:db:bf:
18:aa:61:73:9e:f8:2c:65:c0:ff:79:fa:21:9e:d6:
c0:8b:f0:67:c6:76:f2:dc:81:79:a9:d3:26:c3:7a:
7c:74:2e:1b:c2:1d:b1:9b:0a:ff:f0:07:ee:2a:82:
81:16:66:71:e2:23:99:8c:79:37:5d:32:9d:77:1b:
02:fe:6e:58:66:c4:87:2d:29:38:93:37:b6:af:fa:
95:82:30:0f:02:dd:f7:2f:3b:db:27:31:15:c8:c9:
16:cf:14:25:23:c5:6d:0a:96:4a:30:02:b6:40:fa:
b6:22:ee:3e:a7:ad:a0:26:c7:1e:cb:00:7d:47:5e:
d7:97:53:86:1c:00:cc:d7:e8:21:6c:95:4e:ae:db:
45:75:e5:e4:40:19:26:37:be:85:47:17:80:74:ac:
42:7a:ac:a5:29:05:d1:bb:75:83:0b:c8:f5:9c:cb:
fb:f2:2a:b2:2e:67:9e:14:c3:45:de:e7:45:45:48:
4d:c3:c3:16:ea:a7:20:d4:6c:b0:3d:7b:18:a1:65:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:32:AA:81:89:B4:CD:0C:FA:F3:B8:C0:AC:0C:B9:15:FD:20:6F
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1e:d3:40:c5:84:2e:aa:51:9e:16:c6:06:8a:c1:98:9e:75:
57:25:f8:da:a0:71:f3:32:d2:aa:6b:a4:2b:29:ba:13:f4:78:
bd:fa:d3:40:3d:02:d1:65:a8:3b:ff:5b:f3:8d:3b:d6:89:db:
d9:f5:9a:ce:e1:39:92:71:c3:d7:c2:9b:60:ba:ad:e6:9f:fe:
c1:6e:60:1a:8b:dd:44:ca:62:91:7b:27:a1:98:1b:2b:e2:7d:
a1:a2:58:94:07:c0:bd:68:12:5d:4f:07:08:56:eb:47:0c:ca:
26:30:83:1f:48:cd:2a:df:b4:6b:a1:1e:29:2e:33:b9:c7:5f:
b6:34:59:75:ef:53:b3:22:6b:94:f3:a7:7c:91:b6:d5:7b:d9:
2d:83:b1:8b:bc:9f:64:b0:10:80:f2:c4:3f:2b:71:41:fb:24:
88:92:2b:90:75:46:68:86:16:9f:5d:36:55:12:ed:6a:cf:b0:
6a:bc:62:c1:a4:8a:c8:a3:81:5f:9f:2c:51:db:67:52:54:b5:
2e:38:51:b1:31:af:02:e4:ce:a5:9b:d9:c7:d8:48:a1:5d:c9:
ba:f5:b9:eb:d8:01:92:52:12:e8:09:72:98:d7:8b:b9:dc:77:
4c:a8:1a:fa:61:70:dc:ff:45:dd:fd:99:c5:8e:bc:a3:e3:2a:
65:dc:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:03:36 2026 by rpki-client