Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier: drw1CRa/Hr1P4B8GE7c+1GKUyX0rnJ8yTnde7jJPljQ=
Subject key identifier: E8:25:B3:CC:97:21:5F:2C:F1:9C:22:05:FE:B7:9D:BA:42:56:B9:10
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial: 01A0CE5A786EB6D57063D6CE19DC58713479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number: 0E3A
Signing time: Wed 23 Sep 2026 13:00:30 +0000
Manifest this update: Wed 23 Sep 2026 13:00:30 +0000
Manifest next update: Thu 24 Sep 2026 13:00:30 +0000
Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: Ao0XDUARk6zWPxlBeA8K7qtdpv/xoUHcj4xAKEd99t8=)
2: n0kXXQBuQDCSgjPwmN3Gr_8c6qI.roa (hash: yccqhpLjnyFJP4HXHx8COGOAuzdsePkEiMVFsxk8r48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:78:6e:b6:d5:70:63:d6:ce:19:dc:58:71:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Validity
Not Before: Sep 23 13:00:30 2026 GMT
Not After : Sep 24 13:00:30 2026 GMT
Subject: CN=e825b3cc97215f2cf19c2205feb79dba4256b910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:ff:a8:f8:90:75:2e:c9:17:d6:3c:d5:ad:
84:ed:7c:e6:bf:ac:c5:42:27:9c:1f:c9:86:92:9a:
4c:d6:8e:d0:01:4e:a4:ff:af:d4:ee:ed:5f:86:e2:
90:4d:b4:fb:82:49:ab:7d:71:58:80:1a:72:89:8b:
08:03:42:53:cb:06:a8:5c:e7:be:8d:c4:fb:41:34:
50:8e:6b:62:aa:5c:16:16:a6:35:74:ce:98:78:55:
1c:33:46:88:6b:e3:5f:ed:fd:15:1e:d9:12:b0:08:
a3:db:dc:28:23:95:3c:f5:db:5f:44:04:9a:68:e1:
b7:5d:37:d5:2e:4f:30:b9:4d:b5:a3:87:3b:9e:b0:
16:35:05:82:1c:92:5d:41:3d:b0:46:7b:56:34:d7:
c4:5a:de:b0:27:1a:47:32:39:07:d9:32:e6:6f:ab:
e9:2a:45:7d:cf:18:13:5f:23:56:6f:0e:01:b4:d1:
8c:45:1a:ae:f9:dd:63:5e:43:dd:6c:9d:37:84:5a:
a3:2d:db:2d:03:29:ce:46:6b:4d:28:c3:86:a1:d2:
41:8d:cd:fd:49:51:19:a6:dc:8b:67:a4:d6:fd:11:
02:6e:9c:55:f6:3a:cf:93:43:c6:42:f9:ae:75:96:
a1:5e:4a:c1:9c:4b:13:59:72:f9:74:a2:ef:b2:50:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:25:B3:CC:97:21:5F:2C:F1:9C:22:05:FE:B7:9D:BA:42:56:B9:10
X509v3 Authority Key Identifier:
keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:18:d1:cf:22:ef:33:1c:4c:ee:8d:7d:d5:cd:6d:c3:ea:d6:
da:d1:97:f8:24:23:c1:12:67:cf:5b:7e:cc:1d:10:fd:0e:d2:
aa:95:5a:3b:cc:41:3e:4b:5b:0e:2a:4a:0b:c2:19:39:47:89:
d3:4e:26:10:c8:cb:f1:76:80:8f:36:42:08:e1:5e:92:1e:e2:
df:da:19:88:c5:0f:9f:84:4c:1e:29:42:f2:8d:5a:e9:80:fa:
8f:ac:3e:51:16:30:39:07:dd:f2:9e:27:3d:bd:df:28:1b:aa:
ff:f4:7a:73:9c:f3:95:db:1e:84:58:f8:2a:a6:6a:5e:fb:95:
6a:aa:4a:4c:0b:01:c0:b3:3c:85:2b:59:ba:6b:6d:0a:ce:76:
6d:e1:45:41:0a:76:c6:4d:d7:b4:69:03:ef:5f:19:a4:bc:9d:
9d:ea:82:68:ea:7a:b6:25:ba:d4:5a:a1:30:cb:f5:04:fa:1c:
92:16:66:66:64:d5:c3:63:6b:e5:39:97:2c:e5:6c:00:cd:2f:
96:b6:e5:da:99:a7:2d:4e:c2:61:62:16:a7:ca:8e:07:22:b2:
ab:da:66:7e:27:22:67:c6:7b:c1:de:b9:cc:58:bd:a2:f4:62:
36:5c:d3:bc:3d:0b:af:66:cb:cc:fc:db:2a:77:f3:cb:ae:7b:
4b:12:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:57 2026 by rpki-client