Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.mft
File: 8seZnfj7NT9ElqmAAOo51VTrG6I.mft (raw, json)
Hash identifier: n1kS2oSLgElZExqt0hC/elAd6Rmpg6Dsjt1lOV/2uV8=
Subject key identifier: D8:A4:7D:9A:17:0C:B6:49:FB:EF:0F:41:D3:52:5A:54:3C:BB:9B:E4
Authority key identifier: F2:C7:99:9D:F8:FB:35:3F:44:96:A9:80:00:EA:39:D5:54:EB:1B:A2
Certificate issuer: /CN=f2c7999df8fb353f4496a98000ea39d554eb1ba2
Certificate serial: 01A0E362B8EB8365F71B7D43F58295A41055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8seZnfj7NT9ElqmAAOo51VTrG6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:01:32 +0000
Manifest this update: Sun 27 Sep 2026 15:01:32 +0000
Manifest next update: Mon 28 Sep 2026 15:01:32 +0000
Files and hashes: 1: 8seZnfj7NT9ElqmAAOo51VTrG6I.crl (hash: DBKVfnC+YTKcYz5TCXx3SOfCTTCnIlXV3RFLiwJFAz0=)
2: mCHsCP7Hw-vDINkHUBUlMpgm4kc.roa (hash: I5GM+zycIKl3V+6KCvVt4wyzrZN/yulSVnyaG6oiE7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8seZnfj7NT9ElqmAAOo51VTrG6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:b8:eb:83:65:f7:1b:7d:43:f5:82:95:a4:10:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2c7999df8fb353f4496a98000ea39d554eb1ba2
Validity
Not Before: Sep 27 15:01:32 2026 GMT
Not After : Sep 28 15:01:32 2026 GMT
Subject: CN=d8a47d9a170cb649fbef0f41d3525a543cbb9be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:fe:29:98:45:21:0f:6f:0e:2b:31:94:07:
7b:cf:de:c0:fa:fd:c2:c5:8f:5f:30:f5:e0:c6:40:
3f:6b:11:35:28:52:3f:dc:05:e3:81:22:8b:89:59:
0c:d1:bd:d5:74:5d:91:c1:cf:84:ee:d6:e5:5d:02:
fe:c2:40:f8:60:0c:e1:6f:84:86:d4:6c:23:cc:65:
83:92:20:c8:a7:1b:0f:72:58:ad:da:52:7c:35:bf:
5c:ce:e2:0a:36:3c:e3:7e:41:35:b8:7d:c0:b7:2b:
77:45:2a:7d:64:69:fc:a4:d2:ca:3b:04:c7:1d:d3:
43:40:f9:3e:51:a9:0f:cf:62:8d:10:22:04:39:2e:
c3:53:bb:68:3f:ef:7e:f3:6f:84:31:84:d6:34:58:
86:6d:6b:fc:f8:a6:ca:a9:1d:22:94:69:07:04:d5:
7f:43:d0:fc:5e:d7:7c:57:d9:82:2c:3b:35:31:bc:
5c:d6:5e:63:7c:ad:d9:28:85:16:57:26:41:b0:6e:
30:4d:c1:d3:30:e3:8d:b0:a5:6b:bf:6a:e1:3a:f4:
5a:72:ef:f7:f3:13:f7:0f:22:c5:ad:68:80:c4:5c:
db:f3:c5:c1:81:4f:f6:fa:95:67:4c:b0:fa:1a:51:
6d:ad:25:0d:de:ba:99:a5:8b:9b:21:6b:25:ad:54:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:7D:9A:17:0C:B6:49:FB:EF:0F:41:D3:52:5A:54:3C:BB:9B:E4
X509v3 Authority Key Identifier:
keyid:F2:C7:99:9D:F8:FB:35:3F:44:96:A9:80:00:EA:39:D5:54:EB:1B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8seZnfj7NT9ElqmAAOo51VTrG6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9e:a7:0f:93:01:30:fa:de:07:de:a3:0d:76:db:77:b3:fc:
b0:a6:fa:a0:cb:10:ea:7c:ee:28:ff:28:9e:31:8c:41:4c:38:
42:45:04:b6:60:7d:f5:35:75:64:f8:b3:92:5b:6f:a1:e1:db:
9c:ca:a2:2c:6b:3d:71:82:06:67:1a:a3:6e:dd:2b:4c:4e:c7:
0b:3e:b1:18:d9:70:7c:2b:c8:7b:14:a9:30:7a:99:30:82:bc:
18:d5:2c:31:95:6a:dc:22:31:47:42:47:5a:23:bb:8b:0a:c4:
7a:fb:e9:bb:24:72:a9:8b:3c:e6:6c:b1:e7:26:dc:a1:8a:83:
57:a6:20:c1:ec:aa:28:63:67:9c:8f:2d:59:f7:21:ef:03:36:
2b:31:6d:b4:b5:fa:44:13:45:89:87:1f:08:e4:e0:a3:b5:ff:
24:4f:d6:8c:9d:eb:a3:6a:49:87:31:ff:08:d5:06:90:04:a8:
f1:c6:e7:4e:77:81:e9:06:9f:16:19:5f:88:42:89:07:02:28:
58:d0:0a:6a:a8:87:19:f8:35:44:6f:f7:e4:4a:42:7d:44:93:
ba:ee:fb:ee:a9:bc:3b:d4:c8:13:f9:bf:75:66:3f:8d:45:24:
cc:80:63:9f:ff:08:63:a5:09:e5:70:45:95:27:b5:2b:8e:b8:
b6:fe:e1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:00:26 2026 by rpki-client