Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft
File: 8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft (raw, json)
Hash identifier: rzMSWwv3ObU0lPKimWXzmLt2zFluhR6sW0KTRoI3uuE=
Subject key identifier: 2C:21:9B:C4:11:5F:6A:BE:A4:B2:02:3D:D1:76:43:01:34:41:DF:2A
Authority key identifier: F1:D1:F6:3D:C1:23:EC:6A:64:CF:C9:56:20:47:D9:EA:02:96:9C:9A
Certificate issuer: /CN=f1d1f63dc123ec6a64cfc9562047d9ea02969c9a
Certificate serial: 01A0D200D22E433CB37B659C7323DE1E9EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft
Manifest number: 9A
Signing time: Thu 24 Sep 2026 06:01:04 +0000
Manifest this update: Thu 24 Sep 2026 06:01:04 +0000
Manifest next update: Fri 25 Sep 2026 06:01:04 +0000
Files and hashes: 1: 8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.crl (hash: IRvWrZlRYlFaK2XJEI3aAkOjGjs6jdGSlHJAW77jWKE=)
2: onax22orp9aPX6JBzkCEgQHEpK4.roa (hash: YkAqulV7jTa5rY8AeeKV4BLqEQTQB2lE7BiD7vGkE+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:d2:2e:43:3c:b3:7b:65:9c:73:23:de:1e:9e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d1f63dc123ec6a64cfc9562047d9ea02969c9a
Validity
Not Before: Sep 24 06:01:04 2026 GMT
Not After : Sep 25 06:01:04 2026 GMT
Subject: CN=2c219bc4115f6abea4b2023dd17643013441df2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:df:d4:ce:be:bb:27:76:ac:41:1c:8b:4c:
b8:b4:2a:58:d5:25:55:8e:25:60:b2:3b:7d:25:15:
ea:5e:3c:d1:54:ff:43:f2:ea:28:c6:ae:0d:2b:0b:
5e:7a:f7:b3:c0:18:01:73:d6:96:a6:75:06:60:e6:
bb:58:be:b3:c7:a3:49:d6:18:1a:7a:17:c3:7e:5c:
a8:0f:b2:17:10:2a:93:07:2b:d2:c0:35:80:23:06:
5d:99:47:43:95:77:b5:a2:4a:20:f4:a8:6b:c7:87:
49:ac:05:82:2c:00:cb:62:21:cf:47:84:d2:4f:9c:
7c:42:94:0b:45:51:ab:24:35:7c:73:95:75:d5:65:
35:28:04:af:06:d6:38:25:3a:27:38:0b:3d:3d:fe:
29:6e:1e:1c:ba:cd:7f:69:b7:70:c8:e3:bb:f5:e2:
6c:c1:99:9d:08:21:44:7f:94:ec:06:91:e1:bc:58:
56:a0:82:fb:2b:5d:3a:3c:68:ad:f0:1a:12:fe:76:
23:9c:ef:b9:2f:d4:21:05:73:c2:aa:b1:8d:e9:6d:
ff:9d:a0:11:a3:1d:1b:91:16:9a:10:bb:dc:7c:cc:
8e:31:c4:e3:cd:e4:79:ae:d3:f0:37:12:76:fa:da:
b9:db:f4:d8:da:44:62:07:b4:49:40:ab:11:4b:4a:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:21:9B:C4:11:5F:6A:BE:A4:B2:02:3D:D1:76:43:01:34:41:DF:2A
X509v3 Authority Key Identifier:
keyid:F1:D1:F6:3D:C1:23:EC:6A:64:CF:C9:56:20:47:D9:EA:02:96:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:30:f4:6a:b1:6f:e2:15:d4:71:aa:37:39:36:35:1f:1a:8a:
41:d5:cc:c0:b5:ed:29:dd:50:db:9d:cc:7e:d0:83:8a:16:db:
64:d6:d4:65:9e:69:67:3f:45:8b:30:b9:37:0d:c7:1b:1b:74:
49:a6:48:5e:55:e8:01:3a:1f:49:d2:52:81:56:4e:30:bd:fc:
3b:9c:04:fd:8b:ab:4f:d9:83:4d:dc:25:81:c3:79:82:d5:e5:
3c:ae:47:b2:36:75:03:22:0c:70:26:18:b5:b1:f6:0c:32:d9:
85:6c:6e:e4:94:cc:3a:4d:67:ea:b2:9a:ae:cd:f1:ef:a7:8f:
db:f1:7a:4b:08:36:4f:ef:49:a4:11:90:ac:f1:e5:91:cc:0a:
cd:a3:1d:c3:be:92:6a:39:c5:29:6a:fc:06:98:21:9a:5d:4f:
3e:e8:71:4e:e4:ff:8a:34:99:13:68:45:8e:ce:6d:9d:79:cf:
31:b9:67:2c:20:c8:1f:dc:7f:c0:4e:74:02:93:19:a6:4e:b7:
8c:0f:46:08:28:25:4b:43:cd:93:5e:e9:29:93:9a:8e:75:fa:
fc:30:89:a4:59:17:92:95:0a:3c:99:6b:5e:7f:bb:16:d3:0b:
e1:15:48:20:56:4e:1f:01:22:fe:ad:12:06:93:82:19:d9:e2:
d2:9b:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:45:12 2026 by rpki-client