Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
File: 8cgdjkJn0tRetlJQoqSCULX7Uls.mft (raw, json)
Hash identifier: dfVX0r9WRq6dnjYShRZt3Fnjis/v20zoQ4iKPGDWvF4=
Subject key identifier: A9:E8:7D:09:81:C2:E3:C2:C8:BB:AE:ED:EB:FE:90:73:69:01:61:FC
Authority key identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
Certificate issuer: /CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Certificate serial: 01A105B81F85129D27EDFBE6C6453FE85FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
Manifest number: 0EAB
Signing time: Sun 04 Oct 2026 07:01:54 +0000
Manifest this update: Sun 04 Oct 2026 07:01:54 +0000
Manifest next update: Mon 05 Oct 2026 07:01:54 +0000
Files and hashes: 1: 8cgdjkJn0tRetlJQoqSCULX7Uls.crl (hash: TQsXL7jK6H6ZMTOMA9ctSUlDL2jFvccpe0hvsHSNXo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b8:1f:85:12:9d:27:ed:fb:e6:c6:45:3f:e8:5f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Validity
Not Before: Oct 4 07:01:54 2026 GMT
Not After : Oct 5 07:01:54 2026 GMT
Subject: CN=a9e87d0981c2e3c2c8bbaeedebfe9073690161fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:23:b3:5a:46:e5:1c:1f:30:24:57:49:18:
53:21:5b:07:9b:71:4c:76:83:5d:3f:b5:3c:93:ef:
6e:2e:d2:b4:7e:f8:5e:56:3b:ea:21:29:b8:c9:28:
3a:7b:d1:62:3b:a1:c3:8e:cc:1a:d5:35:fe:93:30:
e1:e6:8d:16:20:d2:ec:4c:ce:ce:22:c2:61:3e:76:
21:b6:99:c2:b4:46:6e:8b:e7:34:5e:f2:2c:6e:43:
d7:49:24:1c:b6:3e:15:88:61:3f:65:38:e4:a9:85:
fb:01:cb:4d:31:ef:67:48:e3:8b:34:d9:8b:6d:42:
25:54:ae:37:69:c4:58:bd:b3:24:c6:4c:c0:8e:ec:
14:aa:4c:cc:e5:b5:26:0a:d5:a1:14:58:3c:20:79:
b0:f4:3c:fe:a2:92:0f:98:90:f6:c4:8a:a4:f8:8b:
90:ad:f3:c6:9b:e8:7c:15:38:f7:60:b1:e1:80:3e:
84:48:07:75:a2:b5:22:88:2c:a2:a3:75:22:21:18:
3b:d6:52:9c:5a:c3:4a:7c:d5:c0:09:b7:ba:5c:61:
80:32:27:ab:33:b6:24:fe:dc:8b:f5:8c:71:45:92:
75:03:2e:d9:23:2a:23:c9:99:a0:86:69:41:14:b3:
67:e5:4e:a2:35:46:c1:fb:02:2e:8c:da:ea:73:e6:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:7D:09:81:C2:E3:C2:C8:BB:AE:ED:EB:FE:90:73:69:01:61:FC
X509v3 Authority Key Identifier:
keyid:F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:56:41:d8:bf:7c:cf:65:70:a9:79:9f:3e:2e:87:78:f8:a8:
8a:40:92:3a:71:85:e4:71:01:52:07:cf:b9:50:53:c9:a8:45:
27:5b:cb:8c:18:cf:79:58:1b:c0:7f:81:97:19:c9:1f:75:59:
ab:8d:e3:ca:6f:bd:0f:9d:41:0e:9e:0b:cb:9a:bd:c2:ab:cd:
8e:42:83:ae:24:aa:0b:8d:9f:17:67:6e:a3:b9:48:2d:2b:ea:
6b:69:6b:e8:42:f4:ff:e9:15:22:6a:82:2d:0d:35:43:46:b8:
1e:78:26:e3:02:e0:cd:0e:79:6e:9c:03:76:6d:9b:ed:85:b1:
13:fc:fb:d9:6c:96:73:d3:58:31:df:1d:48:4f:97:af:ae:73:
c6:32:98:84:7e:aa:24:28:21:18:8f:b5:e0:33:a4:18:ac:13:
b4:e4:88:a5:35:7b:93:4e:46:59:ab:d5:75:38:e2:63:0a:c9:
20:87:3f:fb:9e:b5:a2:57:db:03:0b:4d:84:0c:8a:88:e7:fe:
ad:e0:1d:40:d9:c8:77:c4:3d:6f:f2:06:2b:ab:08:79:c8:7c:
7e:3b:6e:67:76:52:01:2e:7f:84:64:3c:0f:7d:c8:e5:43:4f:
74:6d:74:2c:c4:8c:91:46:18:93:b0:2b:42:bb:8b:de:4e:c1:
21:ce:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:37:50 2026 by rpki-client