Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
File: 8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft (raw, json)
Hash identifier: BPDjFOYWbJTu1rg3Rul4twdJxLJDKOzjStxw2jx8K9c=
Subject key identifier: BE:C7:E4:60:BB:66:10:EE:F4:54:21:C0:F9:C2:8D:8E:C2:03:DC:78
Authority key identifier: F0:77:38:61:69:B8:80:C8:CB:4B:36:37:0D:37:0B:5E:3D:EC:AD:8C
Certificate issuer: /CN=f077386169b880c8cb4b36370d370b5e3decad8c
Certificate serial: 01A0CF35CA60E5DE8406AA57918FA8F37682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Hc4YWm4gMjLSzY3DTcLXj3srYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 17:00:03 +0000
Manifest this update: Wed 23 Sep 2026 17:00:03 +0000
Manifest next update: Thu 24 Sep 2026 17:00:03 +0000
Files and hashes: 1: 8Hc4YWm4gMjLSzY3DTcLXj3srYw.crl (hash: ppBe9N+YRsIvYX/WWJeMWgVCMID5Pn0Qt9kFU1HIoYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Hc4YWm4gMjLSzY3DTcLXj3srYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:ca:60:e5:de:84:06:aa:57:91:8f:a8:f3:76:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f077386169b880c8cb4b36370d370b5e3decad8c
Validity
Not Before: Sep 23 17:00:03 2026 GMT
Not After : Sep 24 17:00:03 2026 GMT
Subject: CN=bec7e460bb6610eef45421c0f9c28d8ec203dc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:3e:13:72:10:63:77:48:04:a3:c9:80:06:
98:0a:a6:35:47:11:af:52:d6:4d:c8:b9:a6:ba:92:
8b:41:c7:fc:c0:da:6b:1e:44:67:88:7c:93:cf:6f:
f7:cc:e0:ef:f1:ef:87:5c:55:c7:7d:75:44:13:b9:
67:89:06:8c:6f:39:58:8b:2a:a6:60:5e:b6:0e:be:
ba:6d:25:05:bb:66:13:ac:69:52:38:69:6e:c1:28:
3a:e3:df:65:67:f4:ef:1e:e5:e0:bb:71:9f:e6:46:
0c:75:b4:1e:a8:e3:9a:1f:84:c1:bc:3c:3b:4a:56:
a6:45:7f:11:e9:ae:e1:d6:ab:64:72:80:a9:c6:eb:
18:9f:ac:5c:b8:96:a4:fe:49:5a:66:a1:9c:c5:d6:
72:24:d9:f5:df:be:e9:4f:5d:19:0d:b4:4d:26:19:
45:e1:37:4f:15:35:f2:3a:09:89:b7:fe:2d:6e:df:
cc:15:62:bc:c6:01:42:6b:da:1c:3e:48:83:22:54:
a8:74:17:43:16:5a:df:c2:cf:fa:f3:72:f5:88:93:
80:cc:76:c5:36:9a:b3:78:6c:09:14:d6:e8:6e:f5:
17:20:0b:47:43:1a:2e:39:07:d1:aa:e0:7e:0c:f9:
d2:3d:ea:23:5c:fb:c6:c2:ea:75:0b:81:91:1e:5a:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:E4:60:BB:66:10:EE:F4:54:21:C0:F9:C2:8D:8E:C2:03:DC:78
X509v3 Authority Key Identifier:
keyid:F0:77:38:61:69:B8:80:C8:CB:4B:36:37:0D:37:0B:5E:3D:EC:AD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hc4YWm4gMjLSzY3DTcLXj3srYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:da:11:a1:8c:4d:f2:3c:cc:8b:e3:9e:3a:34:10:1b:02:cd:
b9:54:6e:ea:b7:a6:44:32:39:5d:20:2c:0f:b3:29:06:a5:9a:
18:08:35:65:6c:2a:74:3f:71:52:4e:0f:97:13:30:df:14:ba:
4d:0b:c4:62:79:73:58:86:43:bb:e5:0d:87:fe:81:d6:4e:4a:
08:20:ba:49:f8:ff:5f:b6:0b:67:3a:c1:f5:4e:a8:14:d0:a8:
ad:b9:65:ac:ed:6f:9f:3f:3d:b8:27:10:b5:e6:e1:c2:73:51:
4b:e2:0b:98:6d:39:35:6c:df:9d:f1:9d:b1:aa:e1:f7:e5:eb:
e7:cc:7e:ac:99:57:aa:ff:72:bb:4d:af:6d:7c:09:b5:03:ae:
6b:3b:e3:b2:3e:53:98:9f:ef:b8:1d:48:b3:24:2d:13:a4:89:
b4:f7:02:66:e2:e6:c5:5a:cb:2c:63:b3:50:46:cc:0c:0a:c5:
43:ab:4a:33:cd:37:26:21:0b:c9:5f:6e:08:6b:19:7e:eb:bc:
3e:45:ed:1b:d6:c3:98:13:03:c3:26:5c:fd:3e:ea:41:2c:1a:
6d:df:0e:6e:a3:38:b8:d5:1f:cd:48:7c:d9:8b:49:cb:ac:ec:
b4:c4:31:cd:07:a8:e1:f7:26:90:51:b0:5b:db:e3:18:42:1d:
3b:a5:3b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:11 2026 by rpki-client