Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: 9HywTMRAKZzyNIbp/bAkZAo5j1B0rZH9YbNsHLDo9qs=
Subject key identifier: B9:2C:5D:4C:BA:5D:CB:22:E8:38:80:21:1A:CE:09:9B:D7:F5:63:61
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 01A0D5027749E99C62524C988594F6D0C30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0BED
Signing time: Thu 24 Sep 2026 20:01:43 +0000
Manifest this update: Thu 24 Sep 2026 20:01:43 +0000
Manifest next update: Fri 25 Sep 2026 20:01:43 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: pWDBcDkmfN97synb3JPt1NIzUClhsBdNzDluf+1AbS4=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:77:49:e9:9c:62:52:4c:98:85:94:f6:d0:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Sep 24 20:01:43 2026 GMT
Not After : Sep 25 20:01:43 2026 GMT
Subject: CN=b92c5d4cba5dcb22e83880211ace099bd7f56361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:02:9e:15:80:76:62:81:de:9d:9a:f9:65:
74:62:71:93:b7:f2:eb:7d:61:1c:a9:04:62:0c:e9:
6e:19:64:58:1f:d1:5d:e9:ca:a1:5e:cb:b8:b0:25:
15:d1:29:49:38:c9:d8:32:62:de:3a:be:f7:96:88:
d5:92:6a:4f:36:79:79:13:e5:fd:30:f2:bc:a8:28:
b5:74:71:da:c0:7a:18:99:65:5a:57:9a:4f:e6:92:
18:9b:25:e0:b6:de:a0:6c:c4:07:9f:22:87:c2:4e:
18:dc:e8:22:5a:6d:46:cf:ba:24:ac:d9:38:0f:ee:
3c:b9:3a:92:70:b9:76:3c:c9:e6:11:4a:e2:5f:0f:
7e:58:e7:cc:4e:b2:64:41:d2:1c:cf:14:54:ec:6b:
73:78:ca:fb:66:3f:58:5a:8f:b4:df:1a:df:95:48:
4f:b2:f5:6a:0c:9a:2e:a8:3d:f2:f6:f3:d7:d7:52:
50:d1:52:d3:37:86:54:77:d2:9d:68:a9:a9:21:d0:
25:99:d6:f4:f7:d7:92:c3:f3:65:4a:55:75:03:da:
41:76:7a:d1:27:6a:b7:16:6f:d3:2d:03:62:d4:e2:
6e:7d:19:27:d0:eb:c5:4d:0d:9f:2e:3d:64:50:62:
28:fd:6e:4b:c3:80:2e:7a:bd:5f:f3:51:b4:b1:92:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:5D:4C:BA:5D:CB:22:E8:38:80:21:1A:CE:09:9B:D7:F5:63:61
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0a:71:eb:18:1a:4e:d4:58:a9:e7:7d:af:a1:7b:8e:06:26:
ea:24:8c:6b:13:5a:af:19:18:a2:8b:2f:ac:4b:68:ba:e3:42:
91:d9:09:e3:5b:cb:fa:f5:7d:bd:66:8b:11:1a:a3:da:8e:b1:
64:eb:6a:0f:38:8d:1c:3e:fd:53:e5:cf:d7:a7:7e:ad:20:9f:
a8:ff:55:d1:be:0c:3c:c0:28:63:47:15:67:c0:c7:56:03:39:
ff:ed:3d:b6:2f:ac:58:34:77:1a:0d:91:17:15:e8:78:61:5c:
95:9f:ec:7e:c4:69:d6:ed:e9:8d:e6:8b:f7:ca:85:d9:58:2f:
8c:40:b1:31:4a:c0:d1:b4:7c:2f:db:ac:24:8d:f5:48:c7:6a:
39:d7:3e:96:43:97:3b:2f:55:64:09:09:12:74:a0:38:b6:50:
7a:e3:11:f7:ba:bf:67:8c:04:7c:43:13:9d:35:60:5a:32:f8:
68:aa:b0:48:3f:fd:14:a6:3a:08:f5:20:e3:f4:04:03:2c:32:
89:9c:b0:28:fe:2d:ae:49:57:d2:f3:b6:2d:8e:2e:d1:cf:db:
e0:5d:15:b1:23:eb:d7:f0:82:7d:81:93:be:6b:5d:6e:07:d1:
dd:30:9b:9f:c6:e9:28:63:e0:f2:aa:66:89:87:ae:9e:a7:79:
ed:95:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:51:12 2026 by rpki-client