Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
File: 8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft (raw, json)
Hash identifier: mI6tPn1+3wzGHeIIJx8G/TacL7WzAcCUxwK7tLyH9ag=
Subject key identifier: 3C:CB:3F:6A:61:D3:A6:27:CD:72:C9:74:88:3A:EA:18:13:6B:62:59
Authority key identifier: F1:C7:E6:F6:1B:F1:93:C9:F6:B7:B8:CE:D2:0E:18:50:A9:0D:83:DB
Certificate issuer: /CN=f1c7e6f61bf193c9f6b7b8ced20e1850a90d83db
Certificate serial: 01A0DCBBCFA39D65ADA687595D11E7CF487E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cfm9hvxk8n2t7jO0g4YUKkNg9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 08:01:30 +0000
Manifest this update: Sat 26 Sep 2026 08:01:30 +0000
Manifest next update: Sun 27 Sep 2026 08:01:30 +0000
Files and hashes: 1: 8cfm9hvxk8n2t7jO0g4YUKkNg9s.crl (hash: 1K+XV1kiAk0qma3VTNzjP2CpYy4TneiXH3xalWbPxNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cfm9hvxk8n2t7jO0g4YUKkNg9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:cf:a3:9d:65:ad:a6:87:59:5d:11:e7:cf:48:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c7e6f61bf193c9f6b7b8ced20e1850a90d83db
Validity
Not Before: Sep 26 08:01:30 2026 GMT
Not After : Sep 27 08:01:30 2026 GMT
Subject: CN=3ccb3f6a61d3a627cd72c974883aea18136b6259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:db:6c:af:25:b0:20:24:3d:3a:9a:ee:5b:
4b:51:5e:13:33:9b:48:54:3f:8e:db:9d:80:74:09:
2a:5f:60:83:4d:50:49:47:bd:03:f9:f7:c2:18:78:
c4:9e:b7:1d:f6:21:81:b3:e3:c7:30:5b:af:e3:55:
21:48:26:5b:36:3f:e6:dd:34:b8:4f:ac:01:84:15:
c0:e0:df:92:5e:a0:99:c9:88:63:e3:4f:fd:c6:bf:
9c:0d:71:e7:92:5b:b9:46:23:e6:15:c2:72:de:b0:
e5:6e:aa:44:65:c9:16:61:d7:e8:09:6d:c4:3d:fe:
08:93:00:77:ff:13:50:3c:f5:a9:57:e5:a4:fc:01:
55:57:96:9f:1e:50:fe:2c:5c:14:b2:79:5c:37:92:
d8:00:42:ce:fc:53:f8:7f:68:49:b0:90:e3:b7:f0:
4a:12:ce:8c:bd:39:06:5d:0f:bf:d2:ed:78:27:0e:
d9:93:58:95:5d:98:ab:85:97:ac:db:42:4c:84:32:
36:f0:e8:97:a0:0c:aa:73:01:1c:78:cc:bf:8e:6a:
8b:b6:a0:50:8f:96:39:ba:39:3f:e1:7c:2c:a2:6c:
ec:b5:a5:29:1c:57:af:32:72:9c:f6:ec:a7:65:bd:
05:03:9e:39:10:b4:26:91:f4:fb:50:a9:b3:33:47:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CB:3F:6A:61:D3:A6:27:CD:72:C9:74:88:3A:EA:18:13:6B:62:59
X509v3 Authority Key Identifier:
keyid:F1:C7:E6:F6:1B:F1:93:C9:F6:B7:B8:CE:D2:0E:18:50:A9:0D:83:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cfm9hvxk8n2t7jO0g4YUKkNg9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7b:15:ab:a8:a3:fc:5a:ef:f5:8c:2d:44:9c:3b:0f:ab:38:
9a:9d:73:43:0c:bd:ba:95:ce:61:27:8e:11:37:26:ef:df:f2:
96:91:5a:07:4f:02:c2:73:a2:30:51:21:56:5d:ea:59:17:16:
ba:fa:fe:ba:d0:f5:30:16:aa:86:bb:43:2b:d6:24:c6:b0:08:
01:fe:5a:a8:31:01:67:5f:d8:07:8c:ff:0c:f0:17:fd:8e:d3:
87:0f:bb:7d:55:77:96:df:f8:5c:e1:01:4e:83:9b:62:8b:f6:
6d:e1:98:f9:ce:26:d4:f1:4d:26:8b:a7:f9:52:eb:d8:17:b2:
55:d9:6b:9e:0e:18:d6:11:35:b5:4f:d9:be:15:72:c7:2b:38:
91:f3:46:c6:e8:64:e2:fc:61:bf:d7:26:3d:19:39:ca:e8:91:
01:6d:4a:cf:2b:96:89:9a:fb:0a:67:e4:ad:a2:e6:6c:63:0f:
c2:25:39:fe:ca:17:c5:80:bb:d4:12:41:e4:d5:a9:9d:b3:b4:
fb:90:5e:99:d2:d6:d5:06:c1:9a:a4:27:bb:0a:91:b1:21:b6:
61:18:7a:c2:21:47:13:14:55:a9:07:1d:3b:e3:d8:13:23:9b:
10:c6:34:d0:03:f3:90:22:2c:ea:e9:d8:ad:14:40:7a:a9:07:
22:68:61:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:57:07 2026 by rpki-client