Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.mft
File: 8JizF8q5AsLuBnXu7al95Yx0rMA.mft (raw, json)
Hash identifier: 0YJ7R+++xGxXBf+4OmGH66xQxjbdNM05Soa7+rE8/RI=
Subject key identifier: 11:F5:7E:EA:CD:4E:62:29:E7:BE:02:A2:EF:0D:71:BA:03:F4:23:DF
Authority key identifier: F0:98:B3:17:CA:B9:02:C2:EE:06:75:EE:ED:A9:7D:E5:8C:74:AC:C0
Certificate issuer: /CN=f098b317cab902c2ee0675eeeda97de58c74acc0
Certificate serial: 01A0D315018777B9AEC592B4274499C0BF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JizF8q5AsLuBnXu7al95Yx0rMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.mft
Manifest number: 0157
Signing time: Thu 24 Sep 2026 11:02:43 +0000
Manifest this update: Thu 24 Sep 2026 11:02:43 +0000
Manifest next update: Fri 25 Sep 2026 11:02:43 +0000
Files and hashes: 1: 8JizF8q5AsLuBnXu7al95Yx0rMA.crl (hash: EA1xshozI7WFN8q49367AZwqM2nKXK3lt3El/pfKAEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JizF8q5AsLuBnXu7al95Yx0rMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:01:87:77:b9:ae:c5:92:b4:27:44:99:c0:bf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f098b317cab902c2ee0675eeeda97de58c74acc0
Validity
Not Before: Sep 24 11:02:43 2026 GMT
Not After : Sep 25 11:02:43 2026 GMT
Subject: CN=11f57eeacd4e6229e7be02a2ef0d71ba03f423df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:71:72:2e:64:67:69:af:7a:e8:30:c0:38:
88:85:8e:34:d8:cf:15:76:cb:50:81:8e:30:eb:0a:
54:15:fc:93:1e:2a:b0:1d:fd:64:37:ea:50:b7:a8:
ba:6e:ba:ab:42:42:e5:55:2a:e8:4b:9f:ab:b7:34:
0c:d7:73:26:e8:ee:43:88:13:d9:53:75:13:81:01:
c0:85:2c:e4:c1:9f:ce:3b:3e:58:4b:45:51:ff:6b:
08:18:2d:e5:85:03:7e:ce:f8:eb:71:9d:50:8c:c1:
53:3d:d2:c4:4a:bf:cf:c4:6c:3e:5a:20:c6:ba:5c:
82:b9:51:ad:07:74:1e:c3:45:0a:7f:e8:a1:c8:4d:
eb:5e:24:9d:83:c9:ae:8a:ba:65:39:40:01:50:fe:
31:50:7a:57:31:77:51:35:9e:d6:7a:93:88:50:72:
fd:32:33:74:d6:c8:88:8c:ff:2c:fd:e1:93:74:ff:
d6:0e:f8:70:de:ac:f4:5f:a0:0a:25:64:1c:d5:62:
c4:13:3a:45:49:ab:f1:43:0f:1d:ce:60:9e:43:13:
77:29:31:19:4d:6e:1c:0d:d5:c1:d0:0b:62:1a:a9:
a4:79:ed:0d:d4:9b:42:30:0e:f3:40:03:da:6c:2d:
48:ea:c6:3a:08:6c:7a:a0:4e:83:dc:6b:81:50:52:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F5:7E:EA:CD:4E:62:29:E7:BE:02:A2:EF:0D:71:BA:03:F4:23:DF
X509v3 Authority Key Identifier:
keyid:F0:98:B3:17:CA:B9:02:C2:EE:06:75:EE:ED:A9:7D:E5:8C:74:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JizF8q5AsLuBnXu7al95Yx0rMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c2:94:5c:57:87:a3:3e:2b:24:a9:3f:cc:0b:94:4a:38:8e:
8d:85:a8:f7:a4:d7:dd:ee:83:b3:2a:ec:4d:a0:d5:0c:72:5d:
c7:41:30:0a:5a:24:52:4b:6a:1e:6e:14:ab:9d:d6:78:11:ce:
1e:fc:cb:c8:f6:d1:19:8b:c6:31:5d:2e:4a:bb:13:bb:c2:c4:
0a:de:2a:4e:98:1f:5e:d8:fd:87:d4:5a:e0:c0:5d:83:3a:d0:
21:5a:9e:83:96:cf:d4:3a:04:18:d9:b1:7f:1f:b0:2b:c4:d9:
1b:14:bf:75:db:67:9f:8b:26:8a:9c:04:d2:3b:52:3f:b9:4e:
06:de:80:c8:2f:3d:09:ba:ce:54:23:17:76:e8:0a:58:49:a6:
c1:67:3d:1f:b7:16:c6:8f:c5:90:6d:c8:a2:54:43:1b:5f:34:
a7:32:7c:bf:40:e7:7d:94:2a:4b:d5:e3:f9:e4:28:cb:4f:50:
1a:66:79:4d:f9:0f:a7:49:db:e7:a8:07:f8:5f:9a:7c:5d:3c:
a9:e2:89:af:7b:a5:0e:94:9f:e0:43:18:65:95:b3:be:0f:8a:
b4:38:9d:84:de:3b:ba:69:6f:68:fd:a6:0d:81:95:d5:a9:88:
a1:3d:3c:cc:b7:30:f4:1c:15:0a:e0:42:3c:d8:53:f3:a4:72:
7c:24:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:06:29 2026 by rpki-client