Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier: aAPB7wrPm1OI5Rtf6gL4KS8027i+9DReXPJZBKptCCo=
Subject key identifier: B0:03:96:FA:56:E3:AA:13:03:9B:8C:BF:81:2F:65:91:E3:A1:4E:E5
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 01A0D45DB58C4374F50CA965787E0896FB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number: 1949
Signing time: Thu 24 Sep 2026 17:01:46 +0000
Manifest this update: Thu 24 Sep 2026 17:01:46 +0000
Manifest next update: Fri 25 Sep 2026 17:01:46 +0000
Files and hashes: 1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: /yuNg5hV8GJWUUIj3waqTz9wovr72sAN2lRFbsCulPY=)
2: HSSEA9Em0ptRddp4bZHLYz47Pwc.roa (hash: tCTQJ4a04Vb+F29LJgpWJiZhzVqLIw989oQi9ddJVUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:b5:8c:43:74:f5:0c:a9:65:78:7e:08:96:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Sep 24 17:01:46 2026 GMT
Not After : Sep 25 17:01:46 2026 GMT
Subject: CN=b00396fa56e3aa13039b8cbf812f6591e3a14ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:90:bc:76:c8:6a:95:e6:fc:15:c8:f7:15:
d5:9c:92:f1:dc:5c:80:07:81:11:c6:0b:72:d9:46:
47:44:df:2b:dd:7f:7c:71:f6:f0:86:41:1b:66:f3:
f0:22:52:ff:b3:17:f3:a7:0b:1c:a3:a8:99:92:e6:
8d:71:ff:69:6a:db:a0:3e:c7:32:d3:19:62:6f:b7:
69:0b:ba:cf:04:31:78:16:88:b2:25:7c:5c:6d:65:
bc:93:6e:4f:9b:fe:37:69:21:f1:4c:0c:e7:9f:61:
71:89:20:cf:92:9d:6d:91:8b:88:ed:ae:ba:8f:82:
00:eb:03:c2:9b:84:6a:d4:04:f1:df:88:fc:14:4b:
dc:f9:79:be:c9:03:d0:6c:e2:9d:16:bb:82:d3:d9:
87:de:a6:63:58:01:39:1b:ad:33:cd:ad:a6:f3:e0:
b4:b1:9d:7f:67:6a:89:91:b4:73:39:04:02:5e:00:
f8:21:f9:a4:9a:a4:1d:3e:4d:ce:f1:66:95:33:7a:
3f:32:aa:6d:65:e9:d9:7b:4e:af:28:ce:f1:cc:6c:
ec:66:6d:9b:47:27:ff:cb:ad:87:dd:b2:a7:c0:c1:
ce:ff:b1:7c:c9:72:9f:57:43:0d:28:3b:f5:57:0c:
63:a2:a7:2f:6e:8d:3a:05:1c:6e:9b:15:18:d4:67:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:96:FA:56:E3:AA:13:03:9B:8C:BF:81:2F:65:91:E3:A1:4E:E5
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:21:ea:60:6f:14:e9:fb:79:b0:bf:90:4d:73:ff:99:02:43:
df:4d:e0:ab:71:83:44:41:72:8c:6d:5d:73:23:c4:b3:67:9e:
b2:0e:33:94:9c:1a:63:43:1a:6a:36:0d:1f:4a:70:5e:ba:3d:
78:66:78:00:5a:57:fc:4e:6d:ff:e9:55:94:61:88:ac:b6:67:
97:43:ac:d1:2c:f4:e8:5e:a1:16:aa:91:be:d7:1b:d0:d2:46:
de:95:e7:c6:7d:89:65:7c:49:f7:2c:cf:d3:46:25:30:a3:5a:
c6:fb:b1:98:71:54:f2:6a:91:14:8b:0a:ae:cf:b6:13:70:ea:
33:1b:6a:59:eb:a6:66:a0:e1:7c:7f:a9:2a:eb:34:81:35:e8:
88:58:c4:b7:28:1a:12:26:ba:56:24:f4:cf:10:42:75:a4:19:
47:62:21:8f:cb:70:78:62:38:90:03:ca:b3:c4:ff:3c:44:05:
70:33:55:a6:75:da:65:61:c0:58:f8:b9:1f:0b:99:18:86:38:
f3:86:1c:f2:f1:6d:0d:fa:5c:8a:f5:12:e9:cc:c1:37:6c:b5:
81:1e:0d:99:99:28:d6:58:5e:13:c3:06:1c:33:94:c7:0a:95:
fe:25:dd:b8:a2:9c:7e:1a:52:b9:89:02:94:ac:45:a0:f8:d5:
5b:f2:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:38:23 2026 by rpki-client