Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: dHyTV0PfG9kKQlgaEXlj19ZPQ8uE3dO/Sj1k816JVU0=
Subject key identifier: 6C:F6:AA:2A:13:D5:A4:58:E5:4F:52:98:F0:FD:00:85:50:74:8E:E0
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 01A0CF3676F3B69FA48546EF2C7B650323A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 165D
Signing time: Wed 23 Sep 2026 17:00:48 +0000
Manifest this update: Wed 23 Sep 2026 17:00:48 +0000
Manifest next update: Thu 24 Sep 2026 17:00:48 +0000
Files and hashes: 1: 8UFGpbA8MDgJIJo8GfPEXs7dPEw.roa (hash: saYZDeX4Ot6QjGMv9hDM9mIHKuSoX0l+GffuAagEH4k=)
2: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: SwE/GGzBx/xYlQgDEnupgRxfZkft4td91e98ZLsPEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:76:f3:b6:9f:a4:85:46:ef:2c:7b:65:03:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Sep 23 17:00:48 2026 GMT
Not After : Sep 24 17:00:48 2026 GMT
Subject: CN=6cf6aa2a13d5a458e54f5298f0fd008550748ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:bc:bf:1b:96:a5:4f:26:1b:8b:e0:a9:0e:
6a:58:0d:b1:e3:a2:f4:be:85:16:6a:0b:ec:e9:2b:
ac:53:0f:81:a9:ba:00:b2:54:4d:49:65:ea:3f:62:
d6:4b:51:04:8f:b8:a9:4c:e4:a9:c4:44:0d:76:b4:
35:12:9d:3b:0e:4b:fc:a8:61:ac:e4:ad:1b:05:22:
aa:6f:e5:d1:25:c0:5c:42:fa:3d:f9:84:ab:3f:50:
3a:e8:8d:73:4c:51:d5:5c:8e:28:f6:62:6f:41:0b:
23:6e:35:94:b7:f0:a0:ee:97:88:ee:e0:f1:34:ac:
a7:d9:b7:7f:29:0a:b6:37:ee:a0:91:fa:6f:1e:39:
8f:68:cf:ca:d4:25:aa:1d:90:f1:1b:a9:f3:1d:7c:
3d:3f:19:e5:a1:0e:45:9b:1e:a1:24:6e:32:e1:35:
8f:87:a4:4b:22:2f:d7:8e:47:ab:be:cf:04:d1:3a:
d8:e9:ba:7a:97:8f:99:99:11:4d:a2:0b:81:19:6b:
97:6c:7b:3c:56:1b:a7:ec:84:26:a7:0a:0b:21:74:
a6:23:0f:37:ab:d6:b6:32:fb:df:62:6f:57:23:f6:
90:a2:35:14:f4:cd:f1:f4:de:8c:22:d9:9b:29:cf:
da:e7:0f:67:fd:17:55:f0:2b:5c:c3:30:74:5b:8e:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:AA:2A:13:D5:A4:58:E5:4F:52:98:F0:FD:00:85:50:74:8E:E0
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bd:19:17:28:57:be:24:07:50:1d:f3:ed:04:5c:ba:3c:d4:
49:79:6a:73:66:40:c1:b4:ec:b9:a4:22:0a:3b:e4:8d:c6:b6:
a5:6f:6d:87:cd:86:cb:41:9a:14:a4:53:63:3a:53:97:bd:90:
87:c1:fb:e7:7d:21:c5:2b:f3:d6:f5:cd:1e:70:c0:5f:3c:8f:
ba:62:bd:f1:f4:eb:a5:3f:db:e6:f8:c3:7c:6a:cc:ad:36:f1:
c7:51:bf:b6:3a:14:d7:bd:64:3a:d1:b5:03:b0:b9:a2:dd:36:
29:1d:53:07:6e:c5:95:15:02:45:c9:93:51:ee:d4:6f:71:fc:
fd:84:84:2b:11:82:8f:d9:6c:32:22:47:8c:8d:a5:cd:4e:a9:
a3:e6:59:f3:31:90:a6:fc:81:86:2f:89:77:8b:d6:d5:b3:ad:
33:72:37:c8:33:9d:03:54:3d:0b:00:be:0b:18:48:b7:14:ab:
8b:84:27:ec:9f:ea:d6:cc:42:8b:b9:81:b6:27:83:58:14:48:
e4:87:f3:51:d5:c5:ca:c5:9c:3d:6e:fa:c9:7b:09:86:c3:64:
2f:ec:c4:db:b4:72:9f:fe:03:e1:79:28:8e:12:2e:90:40:43:
1d:16:e1:cb:ee:d5:9b:da:94:14:87:9f:ed:c2:2b:a2:ff:c6:
b4:cf:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:57:41 2026 by rpki-client