
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: /JgXD7RQK//EwY80NPKLmSX/dSBx0QlOazgPqPVrDlA=
Subject key identifier: 9B:79:39:63:F9:D1:53:9E:92:41:8A:94:B5:4B:23:55:B0:D9:0A:11
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 01A1423A3171EF61F2DA4DB539514ADCFF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 1113
Signing time: Fri 16 Oct 2026 01:01:12 +0000
Manifest this update: Fri 16 Oct 2026 01:01:12 +0000
Manifest next update: Sat 17 Oct 2026 01:01:12 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: elT8A1ZNM2Yj3Ufy9Iz7INJKXXZCE6LcRlo0QIIKuWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:31:71:ef:61:f2:da:4d:b5:39:51:4a:dc:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: Oct 16 01:01:12 2026 GMT
Not After : Oct 17 01:01:12 2026 GMT
Subject: CN=9b793963f9d1539e92418a94b54b2355b0d90a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:e7:7d:67:3a:8c:1c:1b:44:f9:2e:cc:8b:
09:dc:a0:0c:ce:08:44:f0:53:b6:77:6e:22:f2:90:
ae:7e:0b:9a:3f:c2:fb:52:d8:15:25:1a:43:6f:0c:
8a:d4:77:80:24:fc:44:c3:a2:6b:03:21:9d:ee:18:
24:a6:83:60:bf:2e:43:ef:86:0d:76:ed:55:a2:68:
f9:47:c0:9e:4e:ec:4e:2a:33:38:86:60:e7:12:ab:
05:9e:85:d7:21:9d:ad:0a:15:68:fe:98:df:c2:af:
b4:a9:d8:60:3f:64:a1:8e:a7:82:a8:f9:28:95:d3:
47:0d:3f:29:27:0d:e9:9c:89:c4:6c:1a:4c:a6:f3:
a4:a3:43:eb:4e:7f:76:dd:0c:68:5e:9e:5a:be:8e:
f4:fe:67:62:66:6f:9b:dc:fc:00:52:d6:94:df:05:
2b:b8:c5:38:82:71:f4:9e:cf:2b:b5:58:c7:c9:a3:
68:e1:84:22:14:18:cc:0b:04:b6:7e:ab:3c:39:5e:
8a:99:bd:a2:f5:ce:54:be:68:2f:a9:fd:f2:5e:52:
67:56:1d:89:d6:2f:a8:96:4f:06:d8:48:17:e0:df:
e4:2c:d0:2f:cf:f2:78:e1:87:6d:04:05:db:9c:ce:
b7:46:b2:ff:d0:41:0e:c1:ac:40:ea:57:04:40:f3:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:79:39:63:F9:D1:53:9E:92:41:8A:94:B5:4B:23:55:B0:D9:0A:11
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0e:11:c5:cc:29:03:70:26:24:66:3b:47:6b:61:f7:96:ce:
78:3d:2f:b4:5f:e0:9e:1d:d9:2b:74:fb:0a:f9:ba:93:a7:b7:
39:5d:07:12:01:36:6c:40:17:50:c9:2f:60:e7:49:aa:3d:ee:
7f:1d:6e:51:7f:21:dd:94:e9:6c:d3:a5:2a:c7:35:31:1f:71:
58:3d:3a:85:6a:0a:2e:75:b1:56:ab:47:ed:e4:cc:07:c2:f4:
48:8c:f4:34:e3:c0:90:43:b1:2b:57:d3:e4:67:52:98:d6:7b:
c1:7c:be:d9:2f:00:aa:93:dd:29:10:44:0c:f3:95:b8:ba:b0:
e0:0e:f7:99:5c:76:3f:a0:c6:48:8c:d7:04:e4:19:1a:be:e9:
80:71:7e:6b:08:63:7a:d3:1f:1a:a9:26:09:df:51:74:2e:ef:
05:15:01:51:fe:29:78:7f:41:92:fa:33:8a:45:43:1b:2a:17:
ae:b8:99:d7:ea:c5:dd:1d:1b:05:f0:0e:68:09:ff:c2:f6:01:
00:d8:37:a7:f4:e9:5f:24:ff:7d:66:8e:61:c9:7f:f5:92:44:
a2:2c:da:70:7b:36:0b:d0:85:b3:87:5d:ea:a1:ac:33:81:c1:
8b:5d:df:f5:7f:0e:e8:22:6d:bb:ac:98:f4:c4:75:e5:fb:53:
c5:9e:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:02:12 2026 by rpki-client