Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier: tPJ4Epwdk2fZ8Cu8wtUWlwyFaPnSNTtd6HwQvu/wTp8=
Subject key identifier: B0:69:17:37:F6:26:4C:3F:F9:61:91:2A:86:3E:81:81:2F:A1:36:CD
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer: /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial: 01A0D2000EF175E8E00003B55A31904AA3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number: 0F4C
Signing time: Thu 24 Sep 2026 06:00:14 +0000
Manifest this update: Thu 24 Sep 2026 06:00:14 +0000
Manifest next update: Fri 25 Sep 2026 06:00:14 +0000
Files and hashes: 1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: i7xPkUxfo9V8GdslEdV5nUR2Ck2yjmnUS7zzWUS1AIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:0e:f1:75:e8:e0:00:03:b5:5a:31:90:4a:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Validity
Not Before: Sep 24 06:00:14 2026 GMT
Not After : Sep 25 06:00:14 2026 GMT
Subject: CN=b0691737f6264c3ff961912a863e81812fa136cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:2a:16:e2:df:8a:33:85:3c:2d:2a:a8:c4:
88:c5:a5:1c:49:cc:21:f1:9b:3c:77:02:0b:d8:e9:
a1:74:78:5c:1e:a7:8c:bf:d1:15:37:14:06:59:17:
9f:60:2e:9a:8b:be:53:db:b0:ab:07:77:37:f4:57:
05:b0:4c:5f:1c:09:8f:60:f2:60:45:24:cb:9d:bf:
d7:64:6f:fb:21:25:75:bf:df:eb:22:a4:9d:09:d8:
84:cb:f1:47:c0:67:2d:0e:ef:74:bd:f1:bf:d4:c0:
5e:e9:80:04:e1:50:fe:41:8f:78:b6:d3:62:0a:8d:
a7:52:6b:0e:7a:8d:aa:7c:8e:51:02:09:6c:89:7e:
40:99:75:e0:b0:9e:fd:08:f0:1f:a0:a0:18:0b:67:
e7:14:a4:eb:ab:7b:fd:37:fc:fa:4d:5f:e0:4f:e5:
ee:87:76:2d:f4:20:20:22:6a:96:c7:f4:84:75:27:
b4:e9:1f:18:d0:a9:0b:90:54:1a:85:85:a8:47:3c:
04:a5:7b:ca:4a:ad:d9:d3:18:e0:de:ac:c0:87:99:
6d:16:b9:df:38:a7:0c:3d:7e:28:ef:cc:6f:f7:3d:
46:08:f7:ec:5a:0a:1c:27:30:7b:8a:f8:94:28:d3:
e6:8e:2a:c7:d8:07:0e:37:df:20:35:1f:cb:30:aa:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:69:17:37:F6:26:4C:3F:F9:61:91:2A:86:3E:81:81:2F:A1:36:CD
X509v3 Authority Key Identifier:
keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:79:93:b1:e6:b1:74:8c:04:00:40:eb:ad:72:4b:41:51:df:
22:2e:7f:8f:8b:77:f0:57:a5:b2:51:0e:1b:c6:cd:96:88:3a:
16:e2:6a:d3:7d:44:76:14:6b:b2:01:f8:2f:09:60:2d:a2:08:
4f:7e:f4:e9:6b:87:10:0d:f5:73:07:78:db:02:37:87:f2:27:
74:cf:68:97:95:3e:e2:7d:b2:d0:80:74:92:81:db:e6:cd:5e:
3f:b6:b1:45:b8:d6:b9:01:e4:66:e8:2d:1b:b8:14:0d:f0:6b:
75:be:1f:35:95:e6:d2:63:aa:83:51:ea:43:46:b4:80:83:de:
c3:78:58:b1:c5:14:4d:e1:99:ea:36:bc:87:37:11:79:a5:df:
87:6a:c7:65:91:88:ed:d1:75:7f:f0:45:30:a9:22:49:52:3a:
ec:c1:1b:f1:80:a7:81:65:40:a7:17:66:79:1d:83:12:0b:e4:
8e:c4:12:51:e3:87:14:91:75:c9:25:b9:69:d3:0e:66:5c:20:
90:e6:d1:89:86:91:a4:09:7d:77:ff:3d:db:64:fe:71:00:f5:
8e:db:a2:97:2e:ee:89:b6:16:d7:99:95:9b:27:2d:28:e4:32:
71:b0:57:29:b4:60:c3:f0:1a:13:ef:57:2d:e0:5d:c4:58:33:
97:0e:44:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:37:11 2026 by rpki-client