Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.mft
File: 8-IcgBZV9z9Fi24t_cfOfX7ydvA.mft (raw, json)
Hash identifier: V95GyfIhQsK70QQzdSGjASTmMDZezgcCF9+vkqkTMwQ=
Subject key identifier: 8F:30:28:7B:7E:A4:76:E6:8A:77:D0:F2:CC:58:03:CB:E0:17:CE:23
Authority key identifier: F3:E2:1C:80:16:55:F7:3F:45:8B:6E:2D:FD:C7:CE:7D:7E:F2:76:F0
Certificate issuer: /CN=f3e21c801655f73f458b6e2dfdc7ce7d7ef276f0
Certificate serial: 01A0D7CD3963C3232214FCE65331E19B8FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-IcgBZV9z9Fi24t_cfOfX7ydvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:02:25 +0000
Manifest this update: Fri 25 Sep 2026 09:02:25 +0000
Manifest next update: Sat 26 Sep 2026 09:02:25 +0000
Files and hashes: 1: 8-IcgBZV9z9Fi24t_cfOfX7ydvA.crl (hash: U8MIGqMQ1bWE3ZL9LwyUBUVbCsH1vsdAbi2AzM4bwoI=)
2: P-CDAHiv1mFMJ55JuWg6DjL8jB0.roa (hash: W9+QEUkhpgMwr/bef/mckkgJOBKFHSjsONZ0Wce/mEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-IcgBZV9z9Fi24t_cfOfX7ydvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:39:63:c3:23:22:14:fc:e6:53:31:e1:9b:8f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e21c801655f73f458b6e2dfdc7ce7d7ef276f0
Validity
Not Before: Sep 25 09:02:25 2026 GMT
Not After : Sep 26 09:02:25 2026 GMT
Subject: CN=8f30287b7ea476e68a77d0f2cc5803cbe017ce23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:26:cb:64:4a:81:42:c7:de:00:64:9b:cc:
bd:8b:3b:a5:d1:b4:eb:50:1c:7a:22:ca:0e:a0:e0:
c3:ba:ae:06:46:69:ec:1c:5d:66:e1:c5:86:c3:73:
c5:94:fd:25:e4:3b:28:38:3c:d4:71:4d:db:ec:d2:
f3:3a:e2:ad:52:11:68:2e:90:e0:57:87:27:dd:c0:
cf:77:14:84:12:71:8c:89:88:87:dc:88:9a:d7:ce:
fc:f1:86:b5:d6:ca:e6:c3:04:f7:78:a5:cd:ad:d2:
cf:f8:80:5a:0e:69:42:92:2e:f2:a9:d7:e8:a7:d2:
6f:af:6e:68:42:8d:e5:43:dc:7e:14:dc:3b:95:3f:
bf:05:3a:1c:b6:cb:10:d1:62:53:a1:9a:e3:cb:dd:
58:bb:2a:24:03:54:57:61:31:16:6a:e1:b7:b7:00:
f9:27:e6:41:f8:87:cc:3c:79:4f:c9:80:d8:2d:3a:
17:a7:e4:82:f4:93:03:f9:14:63:99:2a:1d:42:a7:
0e:c1:b1:1b:e2:f8:46:d0:b7:13:1e:da:49:91:fd:
7b:23:a3:cc:39:f8:9f:e4:fb:7c:d3:fa:e2:9a:d0:
74:c2:82:ca:6e:88:c7:1b:5f:1f:72:a7:e4:b4:f2:
b8:0f:e9:e1:a6:45:39:d2:74:58:3f:37:79:f0:84:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:30:28:7B:7E:A4:76:E6:8A:77:D0:F2:CC:58:03:CB:E0:17:CE:23
X509v3 Authority Key Identifier:
keyid:F3:E2:1C:80:16:55:F7:3F:45:8B:6E:2D:FD:C7:CE:7D:7E:F2:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-IcgBZV9z9Fi24t_cfOfX7ydvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:9c:52:89:66:20:31:e6:68:d7:a6:c5:65:f3:a1:1d:3f:
a7:cd:77:22:2f:59:0f:8a:61:79:5a:29:24:d0:36:69:1c:b0:
74:d7:de:c5:4b:03:78:8e:ff:32:31:c5:75:00:43:c1:ac:87:
e6:98:e3:8b:67:ff:2f:a9:65:3b:bd:bc:86:7d:05:9d:17:51:
93:5c:aa:cb:a3:a3:d1:05:5e:eb:07:a5:c2:24:fb:86:31:df:
4c:73:fe:9f:da:6f:41:8b:59:bc:bb:aa:e9:0d:1b:07:62:c2:
9d:5e:5d:2a:70:15:76:f3:da:df:4d:4f:10:f5:6d:ab:00:c3:
df:94:68:41:69:9a:eb:db:e7:4a:08:c9:a1:1b:92:35:27:20:
a0:68:5c:c4:09:3f:ae:95:b0:86:0e:12:bc:d3:9d:b7:6a:b5:
78:46:03:94:45:da:db:44:aa:00:5b:01:05:b7:53:e3:c8:05:
13:a7:57:de:01:68:d7:83:78:3d:84:45:49:e1:07:94:61:b9:
32:15:70:99:4f:84:d2:32:c0:ff:73:0b:f5:f5:4d:03:63:c4:
7c:2a:23:06:8c:b4:91:b3:e2:cc:4f:b8:26:16:a8:a5:40:79:
2e:2d:4c:6b:33:ac:de:63:ac:a1:64:29:b8:b1:7f:ee:e8:c9:
88:b6:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:45:42 2026 by rpki-client