Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: YIlkG6KxZSZZ7kgwZ32BXcbsA4dv/CKFaETYkkxDKeI=
Subject key identifier: 39:1D:0C:A5:F0:0D:7B:5C:64:83:27:1C:7C:A4:7A:F8:85:25:03:0E
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 01A0D94C6B309851F11ECB61BCF567374E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 1046
Signing time: Fri 25 Sep 2026 16:00:58 +0000
Manifest this update: Fri 25 Sep 2026 16:00:58 +0000
Manifest next update: Sat 26 Sep 2026 16:00:58 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: 7G6oYeM//sz9l7MfIHW/8LBmxrFSUXChSMG0Bi1sjXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:6b:30:98:51:f1:1e:cb:61:bc:f5:67:37:4e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Sep 25 16:00:58 2026 GMT
Not After : Sep 26 16:00:58 2026 GMT
Subject: CN=391d0ca5f00d7b5c6483271c7ca47af88525030e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:a5:18:1f:de:30:34:21:94:cb:ac:fd:0f:
42:7f:4a:9d:91:b3:41:a3:6c:e0:5d:c0:14:e1:13:
a3:db:b2:fc:5e:3d:91:a4:31:42:31:a4:e0:42:37:
8a:16:e6:93:28:59:c6:b5:d2:92:e0:12:d6:ed:a3:
98:38:ee:07:f9:f4:83:d2:b9:37:5f:5b:a8:40:57:
0f:57:25:7e:89:ae:cb:f8:60:5f:ae:10:a8:98:3c:
74:89:17:e1:1a:7b:a7:02:a3:4e:50:62:66:03:70:
7f:b3:60:32:d2:1e:4a:cc:e3:b4:fc:a7:4e:ef:21:
bc:8b:38:13:82:59:f6:b6:0e:f9:50:32:70:ca:ef:
ab:97:6f:95:24:0e:cd:f9:ff:b6:c4:c1:48:bd:2b:
0e:dc:25:62:8b:87:13:1f:dd:44:6d:0d:45:3b:6d:
42:d4:84:cf:fb:11:72:71:20:af:d9:07:8f:47:ea:
e9:e3:de:96:a1:8e:ee:77:b0:b8:70:03:98:52:bf:
f9:d1:29:a5:2d:12:ed:f9:aa:d4:65:71:80:df:b1:
3d:7f:41:a4:d1:6e:95:76:07:23:33:a1:2a:96:e3:
37:22:f0:bc:50:17:c1:6c:2c:8a:d7:f0:b6:79:b1:
22:a4:11:8f:dd:bd:8b:71:87:53:d3:3c:e6:2b:4a:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:0C:A5:F0:0D:7B:5C:64:83:27:1C:7C:A4:7A:F8:85:25:03:0E
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ea:68:28:69:68:e1:15:92:58:06:eb:39:c2:24:ca:fa:21:
d9:41:f5:05:d5:d8:48:72:c9:a7:60:bb:08:07:ba:fd:62:ca:
49:c7:91:c9:b1:49:23:18:e1:25:56:2d:e5:c3:5f:5c:ae:c1:
7e:51:52:23:33:4c:11:d1:af:f0:e9:c4:8a:90:a0:e3:c7:bc:
56:d6:31:6e:01:0e:ca:5b:ad:2e:00:84:1b:3d:62:21:26:9b:
b4:e9:8d:85:a5:46:bd:4d:99:e4:82:33:99:b4:d9:4d:f1:55:
2d:d5:db:8a:ef:13:32:52:94:d5:ae:ea:c6:32:d3:eb:db:91:
24:76:40:c3:62:9b:ef:ce:5a:e7:5b:0e:18:1c:d4:91:ed:ed:
98:0b:6e:c9:53:4f:bb:0e:18:80:ef:d7:46:bb:68:b6:61:1a:
f6:e3:80:89:5f:fe:54:80:2f:fc:72:49:cf:22:4c:9b:3f:42:
ac:d7:13:fb:93:16:15:bc:ed:39:24:96:ac:fa:5f:55:62:29:
fd:72:62:77:58:59:1e:4b:fb:5b:a5:6e:75:dd:ef:d2:c1:86:
17:e1:97:27:e9:1d:de:f3:ed:95:b6:a1:d4:eb:e8:5c:f1:8f:
21:bd:ab:df:0c:7e:eb:97:a2:40:2d:5e:94:d3:6c:67:f1:9e:
8e:0e:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:00:40 2026 by rpki-client