Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: emy7JR0no9rlhQNDUAg0b0UzFdMvXiQYiUFRCciw3Fg=
Subject key identifier: 7F:B4:65:A9:60:A0:8D:76:CA:46:07:30:6F:2D:0B:76:F2:79:24:19
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 01A0D04910103C30AACD16A036E8FAFFFDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 0955
Signing time: Wed 23 Sep 2026 22:00:44 +0000
Manifest this update: Wed 23 Sep 2026 22:00:44 +0000
Manifest next update: Thu 24 Sep 2026 22:00:44 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: c9wN7KqC4OjlqUl8qkFyx1V+69BVGPAVegxWL4JdvD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:10:10:3c:30:aa:cd:16:a0:36:e8:fa:ff:fd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Sep 23 22:00:44 2026 GMT
Not After : Sep 24 22:00:44 2026 GMT
Subject: CN=7fb465a960a08d76ca4607306f2d0b76f2792419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:d2:79:3a:ee:f8:f0:88:93:b2:f3:65:6a:
f2:8b:52:79:87:55:6e:a4:ec:7f:13:58:4d:1f:d7:
68:65:34:7a:98:0b:46:4e:de:97:5d:ff:2e:7d:8d:
d5:3f:89:f3:af:89:2c:78:bd:fb:b5:ae:fd:ec:33:
3b:e5:b9:19:e0:a8:89:1d:31:04:5b:88:43:2b:5a:
5d:31:ba:e0:8a:f8:61:87:3c:eb:e0:25:04:40:25:
4b:eb:9e:72:76:b7:f0:73:f5:95:61:36:0f:d0:1c:
50:56:8b:b9:ee:fe:fc:e9:af:8a:d5:47:2a:a0:f7:
9a:08:a0:13:11:3a:db:6b:6d:88:56:6a:50:eb:6c:
1c:82:56:f5:c4:4f:91:ac:6e:ef:5f:a1:fb:65:ea:
a5:4e:ad:92:c4:9b:50:3a:75:19:67:0e:fa:8a:f7:
41:1f:49:d7:7e:a6:79:c4:7f:69:e7:f5:8a:8f:ad:
58:a9:97:b3:e0:ac:f5:5e:cd:ea:67:34:e2:24:da:
77:4a:dd:12:f2:2e:a7:2e:ad:f3:66:00:0e:a9:fe:
55:b7:4b:94:42:fe:66:b3:67:03:1d:6e:73:46:6f:
5d:96:53:3f:06:6a:1e:7f:e2:eb:7f:ac:eb:36:57:
7b:0c:f4:be:d3:2b:0b:3e:72:98:bd:30:38:38:62:
3d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:65:A9:60:A0:8D:76:CA:46:07:30:6F:2D:0B:76:F2:79:24:19
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a3:cf:79:c3:ec:19:2c:11:3e:09:4d:66:89:16:d4:da:db:
c8:52:62:4e:4d:ae:73:7d:08:e3:4e:56:1b:e9:69:04:b4:27:
2e:29:1c:d9:2b:b2:b9:cc:6d:93:59:db:b8:7a:02:8a:14:8e:
9b:99:84:77:b3:74:1f:59:f6:cb:45:d2:01:19:a9:15:a5:71:
09:f8:6f:2e:5b:36:f3:75:38:f9:af:fa:40:52:21:78:79:3a:
ff:b8:a7:6e:10:8f:5f:01:be:14:cc:e7:40:fb:a6:9d:77:7d:
58:5a:a4:64:ef:e3:7d:67:91:2a:1a:dd:57:53:bc:23:38:13:
4d:4d:3a:15:79:5e:9e:f8:1d:4c:4b:cf:b2:65:53:1f:70:12:
1e:a6:3a:a2:bb:1a:d4:75:4a:f8:b0:c0:91:82:13:a8:fb:fb:
60:8a:17:ec:aa:b7:f6:b1:8f:89:57:11:53:93:85:8f:7c:bd:
7a:77:03:fe:99:62:34:00:22:12:c8:e1:ff:24:89:4c:fc:ff:
9d:20:24:0e:85:d9:95:83:77:dc:84:75:d3:82:e8:8d:a0:cf:
b7:d8:4d:f0:e2:e3:f8:3f:f5:77:2c:5e:15:55:66:44:b0:c4:
03:ed:95:13:32:ac:d3:91:bf:51:ba:fc:b8:2f:72:46:c2:e3:
3f:5d:a8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:46:22 2026 by rpki-client