Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
File: 8grs7rj8hZw3YvMTcflKAE24zEI.mft (raw, json)
Hash identifier: JgvtDq51hOHKoB7Z5M4BvwFDBoFqpw6J2BLcy8ksPzE=
Subject key identifier: A4:54:49:71:D4:F2:BC:63:55:A8:74:80:46:0E:1F:04:BE:3D:1A:1D
Authority key identifier: F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
Certificate issuer: /CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Certificate serial: 01A0D315229D9EBFB26E638E826DD70AA46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
Manifest number: 0226
Signing time: Thu 24 Sep 2026 11:02:52 +0000
Manifest this update: Thu 24 Sep 2026 11:02:52 +0000
Manifest next update: Fri 25 Sep 2026 11:02:52 +0000
Files and hashes: 1: 8grs7rj8hZw3YvMTcflKAE24zEI.crl (hash: bETHl2j5bWeuPZowkHQgynEIPWtKjb3V1eFZdoss7OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:22:9d:9e:bf:b2:6e:63:8e:82:6d:d7:0a:a4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Validity
Not Before: Sep 24 11:02:52 2026 GMT
Not After : Sep 25 11:02:52 2026 GMT
Subject: CN=a4544971d4f2bc6355a87480460e1f04be3d1a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:5f:4c:6d:18:d3:22:7f:8e:c2:cb:91:a0:
15:c7:98:47:d1:0b:94:13:92:8d:1f:4c:ef:59:32:
c6:2c:b5:de:07:ee:43:15:e1:26:9c:81:82:87:bb:
32:53:38:b1:3e:27:80:dc:c1:52:a9:01:91:c0:09:
0c:6e:13:cc:86:f0:cd:38:23:19:56:b1:8d:44:5c:
d0:a5:9a:26:fe:fe:40:68:6a:3b:79:30:c0:ad:e9:
9c:58:ac:e8:80:ab:d5:72:53:11:ce:e4:d3:97:62:
cd:33:3c:3b:32:9c:fd:c1:0f:c2:5a:96:e1:37:e1:
b1:3d:cc:99:35:33:51:bb:24:21:fb:f8:63:9d:b8:
2f:d7:70:53:3d:d3:31:2f:be:8d:86:f8:11:76:b0:
c2:ae:98:2d:2d:ca:09:6f:3e:99:d7:01:7b:87:49:
f0:17:03:1d:89:5c:32:91:41:da:85:80:06:c7:92:
a0:ac:17:81:20:d0:c1:5e:f1:77:55:36:9a:34:90:
d7:31:eb:b6:9e:cb:60:c9:3b:54:62:62:37:42:68:
68:19:21:22:b3:19:08:67:df:08:38:65:72:38:41:
73:8e:aa:e9:e4:56:b9:56:b6:90:7a:b2:3d:f5:95:
e8:9a:7f:2c:ad:c5:53:b5:1d:b1:fa:e5:3e:32:ec:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:49:71:D4:F2:BC:63:55:A8:74:80:46:0E:1F:04:BE:3D:1A:1D
X509v3 Authority Key Identifier:
keyid:F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fe:ef:fd:d7:59:0a:52:23:7f:6f:6f:2a:84:d7:8e:be:25:
5b:7d:20:cd:34:6f:c2:62:05:88:da:c3:2e:2b:60:2c:ce:1f:
e2:b6:8b:17:c5:99:e0:24:89:65:46:47:97:fd:bc:2b:ea:ab:
d4:9d:7a:b9:c4:c3:59:8d:1b:d5:71:72:cd:0d:d2:a7:cd:93:
31:25:af:30:ae:1a:c4:74:7a:ed:a3:8c:d1:85:0b:de:d1:7a:
8e:90:03:b0:96:2a:0f:f2:6c:fb:0d:b5:e2:36:7d:a0:87:93:
45:12:7c:0f:77:3f:85:7c:40:af:04:f7:97:36:7b:e8:9c:2f:
24:15:9b:74:ac:30:24:e8:3d:46:f4:26:b7:06:15:d0:03:87:
a0:fd:81:83:e8:fc:e1:26:9b:7a:d2:5c:b7:7b:b5:27:f7:da:
7c:9b:05:de:0f:49:63:e6:eb:4e:12:2b:49:a8:74:6d:99:15:
96:5c:15:97:ea:f8:aa:46:20:e1:d0:75:23:3c:a0:d4:47:2c:
8c:5a:d3:11:04:f9:14:d4:75:57:53:2d:fd:18:58:dd:0a:ba:
8d:8e:6c:97:0b:22:0f:a2:97:52:d6:05:3d:33:eb:19:31:16:
82:4d:63:a8:99:9a:8d:64:e6:e5:a8:02:0e:d6:94:30:38:24:
c7:62:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:14:10 2026 by rpki-client