Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: 0vCvHADh+wCcJT4nvEYB0Dt2bR1LWjXCl5P6rPcB58o=
Subject key identifier: F0:8B:A1:6B:5C:EA:F4:C3:96:8D:28:53:09:76:C2:C1:E5:F1:85:A2
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 01A0CBC74FD5040FB690FFB48E331E33D739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 19F8
Signing time: Wed 23 Sep 2026 01:00:32 +0000
Manifest this update: Wed 23 Sep 2026 01:00:32 +0000
Manifest next update: Thu 24 Sep 2026 01:00:32 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: ovLNnXgGyQuoRzQL6/qQyDsYkMRddAGNsgPLX4EoEcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:4f:d5:04:0f:b6:90:ff:b4:8e:33:1e:33:d7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: Sep 23 01:00:32 2026 GMT
Not After : Sep 24 01:00:32 2026 GMT
Subject: CN=f08ba16b5ceaf4c3968d28530976c2c1e5f185a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:dc:24:5a:9d:c2:64:a2:f7:6c:4e:fd:f6:
0c:f9:5f:1c:a4:d8:5c:74:14:fc:8c:b7:51:2d:39:
ac:e7:c3:5a:4d:63:05:2f:10:63:b4:ca:15:7e:81:
12:df:14:34:95:2d:b8:ee:9d:9e:73:30:22:f1:05:
86:1a:79:f1:2b:c7:d0:2c:cd:e7:14:82:49:be:3a:
db:34:81:ff:42:05:1c:81:84:1f:bf:af:3e:23:0a:
28:60:5f:db:7e:37:08:9d:17:16:bb:a5:94:2b:fa:
9c:14:11:18:f7:e1:bb:c1:01:04:5e:9c:87:b4:fa:
79:01:d9:5a:22:c2:5f:cb:48:4f:11:bb:73:b4:03:
29:c4:40:47:ac:12:91:2f:f4:ed:2f:d1:19:49:47:
f5:86:bf:ff:39:97:8f:46:d0:b2:fa:81:66:93:20:
5c:de:7f:9b:d9:82:30:7d:da:3e:a0:7e:3e:75:b1:
25:db:e5:26:38:16:2b:c3:d2:ac:40:b6:7b:cd:a2:
1e:13:e3:1f:74:0e:b7:5f:e2:68:fe:b6:9e:ea:13:
90:e0:22:15:11:22:a3:52:c1:c3:0e:2a:86:a4:9f:
c0:34:f6:a0:98:88:89:49:ee:b1:22:ef:75:b7:b8:
a8:db:89:58:30:a7:60:ee:76:be:93:a2:99:b7:9b:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:A1:6B:5C:EA:F4:C3:96:8D:28:53:09:76:C2:C1:E5:F1:85:A2
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a9:de:3a:69:df:03:81:83:08:6f:41:8d:6c:65:dd:a6:b6:
ec:28:21:34:34:a4:5a:8a:cf:5c:3b:2b:bd:ce:3a:86:52:6e:
f7:12:9f:83:37:5d:06:42:75:ab:40:6d:24:39:ac:da:d4:c3:
6e:8d:f6:2a:a5:b1:c7:36:e9:2f:ae:17:9a:27:74:cc:f2:21:
a7:d3:bc:33:e0:e1:30:27:db:28:17:75:fe:36:8a:7d:82:31:
2c:60:15:dc:63:b4:1e:38:a8:8f:9f:0b:08:e6:e7:66:82:da:
b4:3b:c6:aa:3f:cb:40:e7:98:42:48:be:5e:b4:a9:ad:57:75:
a4:a5:aa:20:cf:6c:11:75:16:86:64:d3:b1:b5:35:ec:de:02:
ac:9d:52:a6:e0:ff:c8:37:68:a4:95:7c:c8:5a:e6:7f:ac:a7:
23:19:08:89:7c:83:b9:82:82:70:59:22:4c:66:61:47:8a:42:
e7:1f:ba:13:02:92:b0:01:60:03:92:a9:d2:09:6a:e2:91:9b:
79:b6:af:1b:1b:29:ca:1a:01:86:6b:ea:a2:f7:65:6d:e1:7d:
ff:dc:1e:96:be:43:fc:4d:14:66:ed:96:94:3b:68:a3:bb:86:
85:46:50:45:ec:8a:08:a9:fa:39:73:2f:8b:29:3c:b3:33:54:
6d:8e:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:04:05 2026 by rpki-client