Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File: 8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier: qVoXX8naFdzx1wG00rWby6K2tAuOm1leux9Kd2uD90E=
Subject key identifier: AF:29:23:0B:E2:EA:98:D8:86:A5:61:B3:CC:4B:FF:68:BD:24:41:AA
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer: /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial: 01A0CBC7A4B2D54731164A5992D8E3634467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number: 0FFD
Signing time: Wed 23 Sep 2026 01:00:53 +0000
Manifest this update: Wed 23 Sep 2026 01:00:53 +0000
Manifest next update: Thu 24 Sep 2026 01:00:53 +0000
Files and hashes: 1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: kFAShBzQGGsalyThdJrzdHVKlvKJfDvJ+zu0DJps/VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:a4:b2:d5:47:31:16:4a:59:92:d8:e3:63:44:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Validity
Not Before: Sep 23 01:00:53 2026 GMT
Not After : Sep 24 01:00:53 2026 GMT
Subject: CN=af29230be2ea98d886a561b3cc4bff68bd2441aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:af:bc:42:0e:cc:17:48:0c:c9:fd:30:d7:
b6:df:0a:3b:9b:48:6f:53:16:b7:7b:a3:cd:fd:06:
45:d8:33:b3:32:ac:5d:d7:d7:1e:0d:1d:6f:ba:c3:
9f:57:b1:61:e2:24:38:60:10:8e:3f:84:10:9c:56:
03:6c:5a:dd:9f:c0:60:17:f0:12:c2:fc:05:54:76:
ac:67:31:5c:34:5d:1a:dd:b9:d5:4b:73:13:ac:3c:
0e:41:b0:40:cb:47:f5:a0:ad:3e:9e:9a:31:69:3c:
b2:04:ee:db:13:39:0e:51:96:a4:12:a6:ab:ed:a4:
2d:a2:68:6c:32:f5:98:66:8e:ef:d2:ed:60:64:0a:
b0:27:62:22:98:0e:f4:a4:04:02:09:ec:f8:23:a8:
6d:e3:39:4b:b1:03:12:2e:45:a6:2e:21:1c:c2:55:
cc:90:28:63:2e:96:e4:c3:fb:97:f8:63:7f:3e:f1:
b0:81:6f:d0:4b:15:47:af:a7:82:98:c9:ab:d3:b8:
dc:35:93:75:d9:9a:d1:75:12:42:e4:92:41:f6:90:
67:5b:e4:28:fd:32:e5:07:22:06:b4:6d:c8:9f:ca:
95:c3:05:58:65:36:33:c7:6e:6d:8c:aa:15:c6:58:
3b:1f:a6:73:e6:f5:62:7a:e7:17:ef:0d:b5:3f:9f:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:29:23:0B:E2:EA:98:D8:86:A5:61:B3:CC:4B:FF:68:BD:24:41:AA
X509v3 Authority Key Identifier:
keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:69:e1:d7:a9:d7:64:ed:0a:de:3d:17:fd:be:14:b0:dd:88:
ef:ef:af:13:5c:a8:82:aa:d3:bb:f1:3d:7e:eb:19:ed:4b:b9:
30:df:fb:6c:b1:ef:06:ea:d0:84:81:f8:f0:90:13:91:03:8b:
14:6c:e5:c6:3b:ba:da:50:ad:0a:9d:78:52:ca:4d:02:b5:28:
89:50:36:8b:38:9b:99:3d:c4:b0:6b:02:5b:01:79:48:f5:86:
0c:15:03:b4:e9:7b:f3:2e:f8:d8:ac:61:9a:10:81:5c:d1:a1:
0d:81:d1:dd:86:59:96:1c:cf:a0:d9:64:7c:db:9f:85:66:70:
eb:94:d8:7f:d4:40:46:d9:57:8d:3c:13:55:69:5b:68:71:61:
71:fa:b8:78:b9:53:74:40:11:60:96:67:bb:82:c3:59:dc:54:
a5:2b:e8:82:e8:68:7a:49:18:5f:45:28:8c:07:a0:3e:91:37:
a6:aa:29:e0:12:74:99:79:57:5e:93:3e:ad:f2:b1:3f:44:ab:
a0:03:c0:ff:74:22:e3:8e:43:a0:0e:f7:4c:71:f4:d7:59:70:
81:ab:d7:fc:d9:2c:73:f1:0e:fe:35:4b:6f:ac:94:fc:9e:0a:
33:a6:d9:96:df:5a:06:94:5f:8e:48:6d:7b:21:19:2b:94:38:
9a:13:ba:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:08:26 2026 by rpki-client