Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: +4DWRLj5OENJaPGZlSw4U3zOzR6wzzqvpvpWVu0gw0I=
Subject key identifier: 86:E8:04:E5:33:EC:D3:4A:6E:BD:10:4C:3B:5B:78:BF:F6:0A:2C:63
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 01A0D0EE4A8513FF26DBD1E8164561BBE534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 0AC9
Signing time: Thu 24 Sep 2026 01:01:12 +0000
Manifest this update: Thu 24 Sep 2026 01:01:12 +0000
Manifest next update: Fri 25 Sep 2026 01:01:12 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: 9Wu0HdFyCu8qV4K/ZdB69hqyH1Cbm9zOUT6xNGKll1s=)
2: cqVoU67CwExthfXQtnUzx-lv3-A.roa (hash: 5F5B0oJP8h6OFxnMOS4l6tglzKyriTHb6L1MzQyUoV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:4a:85:13:ff:26:db:d1:e8:16:45:61:bb:e5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Sep 24 01:01:12 2026 GMT
Not After : Sep 25 01:01:12 2026 GMT
Subject: CN=86e804e533ecd34a6ebd104c3b5b78bff60a2c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:3f:cd:64:c7:e1:31:b1:5a:5f:fd:b5:af:
f7:15:5c:f2:b8:a9:99:f5:52:8c:35:a2:e5:69:8a:
e1:61:a9:27:d9:c4:d3:92:cc:c2:ee:05:23:d5:07:
10:ff:76:35:3b:c3:29:1e:71:30:20:29:15:75:2f:
42:a1:66:27:d3:4a:95:16:7f:98:7b:a3:2c:da:09:
f2:15:71:34:48:b8:b1:08:3f:67:2e:7b:8b:ac:28:
07:06:79:79:fc:3c:dd:b9:43:d3:d0:61:38:03:79:
9e:3f:2f:bc:37:24:c1:ee:16:29:87:9d:ca:13:a7:
9b:80:89:51:63:7a:f8:61:f1:68:83:83:ef:9d:af:
5c:f9:17:fd:fe:52:72:25:ff:07:3d:47:92:d7:8a:
56:9a:34:11:d5:61:92:72:8d:24:56:95:32:a1:ed:
71:ef:67:3d:53:cf:46:f1:07:b8:c7:9e:d5:46:61:
4e:ee:69:6a:25:1f:cf:31:09:71:6b:7d:32:fe:c4:
1b:fc:88:e7:7f:51:82:df:a2:b8:66:d9:74:2f:31:
f2:c4:2d:46:35:5b:b8:bd:0a:4a:7e:66:f7:ad:1b:
43:ea:51:11:f2:75:1d:17:a6:14:16:ca:63:11:54:
3a:69:44:bb:dc:a5:81:d7:bb:5b:1e:2f:41:40:1d:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:04:E5:33:EC:D3:4A:6E:BD:10:4C:3B:5B:78:BF:F6:0A:2C:63
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1d:ea:8b:51:61:be:9c:26:e9:bb:12:40:f4:53:3f:e0:6c:
06:5c:c5:e5:83:47:a0:4b:cc:e8:a3:46:e8:d7:91:e6:60:47:
93:65:51:45:e4:fe:5b:81:59:5f:b5:0a:ae:e7:c0:f4:0c:73:
e6:ff:06:42:3e:fa:25:5f:ee:d6:f0:73:6e:6a:ae:9e:41:4a:
63:59:1e:56:23:a6:43:d6:67:19:ab:dc:0f:78:80:32:03:d9:
67:f2:33:b7:d9:76:52:24:e7:c2:4b:52:34:f9:6f:3d:03:21:
db:07:8c:6b:18:97:99:60:20:de:a4:3d:4a:53:82:4a:95:db:
8f:11:73:56:16:17:a7:99:aa:8c:88:ec:0f:33:a9:22:ec:7a:
ad:32:b2:c6:e3:26:40:ed:1b:f7:a6:a3:ca:cc:79:b0:46:76:
e0:8e:69:a8:2a:39:16:77:47:0d:44:b0:b6:1d:35:93:5e:da:
81:a4:91:9f:10:38:98:d1:b3:1c:35:3e:a3:5f:24:df:e6:97:
14:58:ed:b4:61:90:53:6e:e2:01:fb:91:18:cc:fd:f6:ea:56:
98:99:05:9a:81:57:0b:29:96:2a:9c:b7:4d:0d:49:c5:74:f8:
af:9d:24:d1:f1:03:6c:58:21:12:e9:ec:c5:cb:ac:a1:7e:30:
16:b6:bf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:05:44 2026 by rpki-client