Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: zYncJoUh5HdRArJ9lZ5vi0hi382A6fi9OMAWIHNZuRw=
Subject key identifier: EB:78:2E:8C:39:F6:D9:F5:6E:7F:90:D4:93:DC:35:CA:D9:73:DD:32
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 01A0D5021AE79EBF56ECE375187070AC3435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 10CA
Signing time: Thu 24 Sep 2026 20:01:19 +0000
Manifest this update: Thu 24 Sep 2026 20:01:19 +0000
Manifest next update: Fri 25 Sep 2026 20:01:19 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: 4XDnbT9tQa5CdUIxB94mBOphrLG5kgxbXExhHbnbBbA=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:1a:e7:9e:bf:56:ec:e3:75:18:70:70:ac:34:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Sep 24 20:01:19 2026 GMT
Not After : Sep 25 20:01:19 2026 GMT
Subject: CN=eb782e8c39f6d9f56e7f90d493dc35cad973dd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:0c:45:ab:ab:4c:21:20:fd:8c:d0:4c:f4:
cb:47:c7:b8:25:c3:1a:c9:09:97:c6:25:d5:72:eb:
25:80:77:29:03:b5:6a:58:1b:9f:ff:0d:b5:7a:e8:
de:67:e7:2e:48:61:68:5d:72:49:01:a9:51:81:3d:
0a:29:0a:74:63:1a:86:5c:88:f6:61:10:6a:44:e2:
0e:7c:1b:4f:9d:90:ef:0b:bb:b6:e5:d4:f4:db:46:
e7:79:0e:e0:68:ca:be:88:bb:ae:f3:3d:fe:6e:02:
7f:43:58:9c:af:26:fe:2a:93:4e:a7:9e:ca:aa:9d:
bf:15:31:44:61:f7:f3:24:4f:ee:a3:e2:93:f7:bd:
4c:d4:a8:85:a0:72:11:93:78:c9:66:51:87:0e:ca:
81:59:83:06:ed:3f:39:a4:96:38:63:96:82:24:63:
bd:e7:df:80:32:86:26:99:6d:ce:fd:57:65:ca:af:
f1:8e:65:86:a9:ea:2f:fa:08:76:c0:e6:33:ec:e9:
95:7a:7a:7b:92:b6:26:1f:7c:28:cc:ca:6f:ce:a5:
80:fe:5d:ed:72:eb:82:1a:fe:8f:0a:b0:3b:9b:05:
66:f6:02:0d:54:d1:0b:94:81:68:bc:99:c5:56:8b:
a9:d7:60:ed:cd:e6:c5:c5:eb:9f:d8:09:38:03:f7:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:78:2E:8C:39:F6:D9:F5:6E:7F:90:D4:93:DC:35:CA:D9:73:DD:32
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c8:b1:58:57:a5:02:35:91:58:43:67:fb:e2:53:74:eb:eb:
9a:a8:96:e4:0f:5a:99:21:fb:4d:42:10:c0:81:78:8b:77:fd:
aa:fb:70:6c:79:87:36:dd:81:09:4e:58:10:5f:8f:9f:11:13:
aa:80:9a:b1:4a:f7:f6:de:02:00:3d:05:8f:80:e3:ce:40:60:
67:09:d3:62:b1:65:b3:a9:9e:dd:71:37:28:93:75:f0:ce:6a:
18:b5:4b:15:49:71:47:f0:69:87:e3:4a:32:76:b4:63:23:32:
5a:53:8b:8a:0d:7e:89:6a:a9:ab:66:f1:09:5a:02:e7:40:9d:
84:49:1d:90:1c:e1:d7:7c:05:84:96:8c:69:4b:84:02:06:98:
f0:98:42:96:c4:26:46:32:7e:29:f4:ac:76:4c:3c:54:df:86:
f6:0a:2b:1b:44:5e:70:df:28:3b:72:5e:b3:b6:97:2c:12:ff:
2e:24:4b:46:b0:a8:88:e3:d8:cf:8e:e6:80:eb:8a:df:9a:ea:
fa:a0:f6:3d:e7:90:f6:cd:e0:94:3f:a2:f9:26:3a:60:06:23:
64:97:94:53:df:34:c1:ec:54:a4:de:45:30:33:ac:6b:8e:a1:
76:e0:1d:85:0d:ca:ab:17:f0:f5:bd:89:68:59:74:76:f0:dc:
b0:c8:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:15:00 2026 by rpki-client