Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
File: 8MRc9qe7S199ocIiINBI2mFos-o.mft (raw, json)
Hash identifier: HN9knEoL4dfSSnRj8PUC2qJKc0yPkvdFqsN3q1+Gxt8=
Subject key identifier: C8:A3:E0:B0:0D:42:B1:65:7A:F1:1D:FA:C5:B7:CC:A9:03:0C:EF:3C
Authority key identifier: F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
Certificate issuer: /CN=f0c45cf6a7bb4b5f7da1c22220d048da6168b3ea
Certificate serial: 01A0CD10993C0DC75244C97E591389F22524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
Manifest number: 2A
Signing time: Wed 23 Sep 2026 07:00:12 +0000
Manifest this update: Wed 23 Sep 2026 07:00:12 +0000
Manifest next update: Thu 24 Sep 2026 07:00:12 +0000
Files and hashes: 1: 8MRc9qe7S199ocIiINBI2mFos-o.crl (hash: wMTjHNKF8WPM6GsGCmknqIvqVUk8b1s51V8LmrzBccM=)
2: cDpQ-lup4UOfykLQM1uw9xBJXn0.roa (hash: YzUc6EeuXnL915saMdUCemojfhzBDlS0lYhMfgci5II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:99:3c:0d:c7:52:44:c9:7e:59:13:89:f2:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c45cf6a7bb4b5f7da1c22220d048da6168b3ea
Validity
Not Before: Sep 23 07:00:12 2026 GMT
Not After : Sep 24 07:00:12 2026 GMT
Subject: CN=c8a3e0b00d42b1657af11dfac5b7cca9030cef3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:8e:ea:11:d9:eb:03:a6:de:51:43:e4:a1:
68:ac:bd:38:b9:4d:0f:6e:d0:c6:81:7e:aa:c6:a1:
df:38:85:c0:34:d1:84:a7:52:fe:e9:03:ba:c7:d5:
df:f5:99:62:e9:50:1c:d4:8e:28:a1:d5:70:f7:a1:
dd:33:93:ad:23:1d:ff:73:3c:0c:ff:bf:b6:c5:cc:
6f:e5:08:f9:ca:1e:e3:97:e8:d9:db:f1:71:f6:d5:
59:a5:13:a2:60:3a:53:26:e8:32:a0:7b:8a:06:7d:
8b:14:62:3b:e7:62:ad:42:88:73:a3:b0:80:32:46:
ca:ed:15:f2:54:c5:c0:81:fe:b3:28:ff:0e:c6:56:
f0:81:43:b2:5f:f2:97:e1:79:3d:5c:81:6a:6a:42:
aa:71:70:5f:65:11:be:3c:36:a0:8c:7f:68:f0:8a:
7d:20:bb:b2:dd:8c:2b:f2:2f:05:de:c2:a2:9a:7e:
84:31:90:c0:4e:c7:b0:95:b5:31:f2:e6:94:02:a2:
f0:78:0d:a7:c8:52:1a:af:c1:73:59:85:a9:4f:10:
d8:12:18:f9:b3:8c:91:6f:e1:c6:b3:94:f5:d6:24:
26:b5:15:c0:d7:d6:c7:ee:e8:17:6a:c9:de:de:2b:
96:22:08:d5:cf:36:9f:91:08:b2:6e:4b:52:34:4c:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A3:E0:B0:0D:42:B1:65:7A:F1:1D:FA:C5:B7:CC:A9:03:0C:EF:3C
X509v3 Authority Key Identifier:
keyid:F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d5:f0:45:14:e8:91:78:38:fe:6d:6a:db:4b:a3:23:73:a4:
81:17:3d:3d:c4:4f:9d:83:6c:80:51:4d:df:38:91:bc:75:8a:
35:fe:fe:eb:82:6c:5d:49:0d:4b:99:70:7f:44:6e:71:ba:3b:
f1:19:b7:36:2c:09:68:7f:4e:44:d4:bc:bf:f5:ee:a5:50:12:
bb:12:b8:d4:be:33:8e:cc:fd:32:b8:7f:91:55:28:cb:f1:eb:
ca:68:90:ea:5a:e3:74:cf:c4:fe:58:3b:e2:af:ba:c9:09:32:
88:38:05:86:5a:cc:f0:8f:48:2c:d4:5f:d9:95:db:92:7c:cc:
1d:c3:d2:fd:42:b7:c1:65:71:2f:96:94:42:6c:52:c8:36:1b:
b2:31:ae:94:ee:b9:cc:55:a2:68:c4:2d:54:ab:58:48:a9:55:
fe:6a:e4:43:ae:42:83:e0:e0:53:1b:e5:51:29:46:c5:ec:9a:
36:a4:0c:d2:3d:32:f4:d0:89:e9:d4:b8:32:b2:bb:83:e9:66:
65:d4:4a:88:bf:bd:62:a3:a3:fc:a5:6a:8e:2b:32:58:88:6f:
d7:3f:ad:cf:db:96:d5:9c:dd:4d:d0:cf:a0:12:ad:86:f4:7d:
91:51:17:0d:35:af:7f:56:7c:df:dc:f8:9e:9a:87:5b:6c:ec:
e8:29:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:48:11 2026 by rpki-client