Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
File: 8p5p65n-wSVjcxHUMFL3kx2P3TI.mft (raw, json)
Hash identifier: jNshYbs6awJy1NvQCloXCbSsNenpltnXHIOM8HefS28=
Subject key identifier: ED:DD:AB:BF:3F:A9:FC:86:83:17:55:7E:1D:33:83:56:E5:05:96:59
Authority key identifier: F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
Certificate issuer: /CN=f29e69eb99fec125637311d43052f7931d8fdd32
Certificate serial: 01A0D5DD92833F7ADA853ACD7D94EC141A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
Manifest number: 0A08
Signing time: Fri 25 Sep 2026 00:01:03 +0000
Manifest this update: Fri 25 Sep 2026 00:01:03 +0000
Manifest next update: Sat 26 Sep 2026 00:01:03 +0000
Files and hashes: 1: 8p5p65n-wSVjcxHUMFL3kx2P3TI.crl (hash: ZP56rYfqCz8i75a4kPtGfidm69p9sUUHOn56aCOD0kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:92:83:3f:7a:da:85:3a:cd:7d:94:ec:14:1a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29e69eb99fec125637311d43052f7931d8fdd32
Validity
Not Before: Sep 25 00:01:03 2026 GMT
Not After : Sep 26 00:01:03 2026 GMT
Subject: CN=edddabbf3fa9fc868317557e1d338356e5059659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:ca:6c:14:d1:ba:e3:db:a9:99:8b:f1:27:
45:37:3f:c2:88:7a:1b:c8:ab:85:1a:e4:6b:78:c8:
35:84:9c:b3:39:0f:e5:8d:81:f1:ca:76:fa:cb:19:
5a:13:eb:fc:a4:eb:af:5e:37:b6:6e:7e:ea:d4:81:
4f:c6:a9:9e:d1:4d:4d:bf:74:5a:f9:09:f5:de:16:
4c:a5:2a:31:c1:2b:3f:a2:d0:16:be:d6:7f:a7:cb:
87:d5:9d:77:13:d5:e7:0e:da:a4:1b:cd:0e:35:e0:
07:28:30:f6:91:a0:05:38:18:de:42:4b:3d:65:6c:
4b:76:c3:78:13:f3:77:ca:65:93:72:8e:31:e6:fc:
f1:72:ef:f9:ee:05:b0:de:c2:48:f9:48:03:67:5e:
8d:c8:90:d6:29:45:fa:b0:a4:ec:fd:f5:35:d5:98:
6c:4f:df:ce:6a:a7:6b:cf:37:80:1f:cc:ad:f8:62:
48:09:b4:d1:2d:77:41:f2:0d:95:27:8c:5e:6b:ea:
15:65:1a:7a:dc:ba:17:df:f5:65:37:71:a2:f4:99:
6d:bf:94:67:64:ff:80:92:72:95:95:c0:32:73:63:
a1:c0:f9:ef:59:2c:35:2b:26:23:1e:fd:1e:fc:a7:
02:81:2f:5d:2e:28:3b:29:69:98:30:b3:6c:ab:1b:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:AB:BF:3F:A9:FC:86:83:17:55:7E:1D:33:83:56:E5:05:96:59
X509v3 Authority Key Identifier:
keyid:F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3f:04:d2:10:28:b2:8f:70:00:79:e4:e0:39:87:99:84:bd:
2a:35:0d:c3:da:1a:51:fa:19:a1:82:a7:6a:8f:48:00:9c:8e:
3f:ab:51:ca:22:95:88:bf:20:08:70:e8:09:b6:56:6d:ad:e3:
1b:eb:25:1b:77:64:7b:65:42:fa:7e:cd:c3:2a:e2:93:4d:e8:
87:e6:bf:85:b1:0e:87:98:3f:ad:00:54:eb:0c:4f:7f:a8:dd:
4a:9f:44:e3:11:de:d7:4f:f4:a7:42:6d:6d:45:8e:5c:35:98:
ff:7f:f7:be:36:53:37:9b:d6:d1:26:73:53:9b:1e:bd:7f:89:
46:2d:47:7a:29:f0:02:53:90:66:a5:fa:65:8c:ad:e8:71:2f:
6e:9a:6d:73:fc:11:60:b8:f6:bc:69:c4:a1:ed:eb:c0:e7:30:
7d:21:1a:2a:3a:a6:d4:9b:29:fd:17:d7:51:a5:14:61:2d:ea:
2d:82:f8:37:f7:df:bb:52:5c:d6:2c:a9:6a:86:13:ea:34:d7:
8a:51:80:9a:33:6f:03:e9:b9:10:d9:e2:91:7b:98:b9:9b:ed:
d8:b7:a1:8d:51:1c:40:1a:d1:bb:5d:49:d9:2c:18:c1:5a:07:
a6:2d:27:e0:5c:e6:6b:e0:89:55:b4:59:ae:b9:4a:e1:9a:79:
c6:22:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:21:58 2026 by rpki-client