Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
File: 8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft (raw, json)
Hash identifier: Zq5jhhyCbpK9wJNGTrvncF0d4PM76VQ8WTX1Js94Dt4=
Subject key identifier: 7E:10:90:9C:3A:22:1C:AD:50:1E:C5:E9:F5:73:CE:21:45:88:DA:AB
Authority key identifier: F1:8F:59:22:53:70:AD:AA:3E:93:01:9F:8C:4D:F9:7B:0D:62:FB:54
Certificate issuer: /CN=f18f59225370adaa3e93019f8c4df97b0d62fb54
Certificate serial: 01A0E81CBC6F331588118AC420B4D6FD1CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 13:03:12 +0000
Manifest this update: Mon 28 Sep 2026 13:03:12 +0000
Manifest next update: Tue 29 Sep 2026 13:03:12 +0000
Files and hashes: 1: 8Y9ZIlNwrao-kwGfjE35ew1i-1Q.crl (hash: T5wMdkek5vxN33od9qSujePhYyAT6fdkWC+Qodm1bPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:bc:6f:33:15:88:11:8a:c4:20:b4:d6:fd:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18f59225370adaa3e93019f8c4df97b0d62fb54
Validity
Not Before: Sep 28 13:03:12 2026 GMT
Not After : Sep 29 13:03:12 2026 GMT
Subject: CN=7e10909c3a221cad501ec5e9f573ce214588daab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:c7:ab:b7:07:d5:f8:aa:60:7a:1c:33:6d:
48:c5:13:a5:91:9e:4f:48:6b:d0:1f:1c:de:a1:df:
83:ba:2e:68:ff:ae:8a:3f:bf:c3:33:2f:15:0d:67:
50:34:5f:b0:70:93:41:0c:ce:3a:01:bc:93:13:3e:
0a:58:7a:75:f1:4f:ee:21:51:f7:07:3e:66:2d:1c:
91:9b:4e:64:42:12:89:c6:13:64:72:12:6f:41:92:
55:d9:4f:ea:42:af:e9:ce:70:d2:d0:8f:ec:0e:9a:
b8:cc:78:d3:92:d0:df:3a:65:4a:bd:ad:de:f7:6e:
4a:32:b1:bf:d5:c2:52:fc:a8:6b:bf:80:67:62:0b:
d1:a8:91:6c:4c:1a:ca:ef:2a:45:3d:47:dd:7b:31:
f7:71:9b:bb:8f:a2:d7:33:d1:8e:06:4f:54:02:80:
47:09:f7:a0:31:77:72:29:fb:6a:31:ee:6a:b5:8c:
35:79:2d:03:95:a4:30:79:0d:2a:3d:9c:54:b0:28:
a4:71:05:88:bb:38:c6:ed:00:d9:25:31:53:53:6f:
30:72:6f:1b:21:de:e6:7b:0c:33:cb:83:ac:74:0b:
60:1a:60:1c:ec:d7:2f:f6:2a:e6:1b:3d:25:5f:14:
f5:1f:9f:66:77:b0:1c:12:a1:6c:90:e3:78:65:c1:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:10:90:9C:3A:22:1C:AD:50:1E:C5:E9:F5:73:CE:21:45:88:DA:AB
X509v3 Authority Key Identifier:
keyid:F1:8F:59:22:53:70:AD:AA:3E:93:01:9F:8C:4D:F9:7B:0D:62:FB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:34:9e:02:a7:6e:ce:95:a2:47:62:c5:7c:1f:70:08:d1:2f:
97:e5:96:ca:06:09:fc:14:d8:f1:92:cc:9c:ed:9e:0f:9e:de:
5c:63:b2:0e:1c:e4:5a:29:4f:c8:07:43:3d:b1:f9:42:6e:c9:
fc:21:c3:da:05:05:ec:2d:f8:58:bc:df:0c:ef:d9:39:be:6d:
9c:ee:36:d7:e8:6c:4e:da:70:b5:31:5b:dd:62:23:a9:0b:d4:
65:34:58:ca:4f:14:14:b9:23:ce:7d:71:a5:78:d9:c3:46:f7:
61:93:c0:35:da:8b:03:68:fc:13:25:73:16:23:4e:4d:fb:7f:
d0:a8:25:6b:4a:56:45:75:4e:56:f0:69:66:2b:e6:0b:b4:a0:
a4:c6:5d:cf:7b:37:60:92:50:7c:b5:f5:59:ae:c4:cd:0d:4a:
6f:a8:b1:d0:70:02:a5:75:e3:b7:af:0d:c6:96:b9:71:ec:7e:
d2:e1:a7:64:9b:5d:a4:bc:72:fd:55:89:b2:56:9e:98:09:1b:
e7:4f:96:c7:22:e0:53:6b:e2:c1:09:f8:43:50:16:d2:c0:0f:
65:a3:97:40:92:85:60:5f:0c:07:7d:5d:40:82:b1:2a:7f:50:
30:db:6e:31:63:a6:74:3f:11:49:4d:b7:0b:05:a4:1d:4c:90:
f3:fc:ee:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:50:39 2026 by rpki-client