Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: 3ROcXRsnCqVXBLAwuY4So0k7wEWePHdJ0hCxrF1Hfyw=
Subject key identifier: F8:81:65:C4:CF:1C:5B:06:29:49:65:F3:AA:FE:DA:01:5A:F6:06:92
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 01A0D1242F8E1655573533052685061735E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 02:00:04 +0000
Manifest this update: Thu 24 Sep 2026 02:00:04 +0000
Manifest next update: Fri 25 Sep 2026 02:00:04 +0000
Files and hashes: 1: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: uIVLnDVI9y5GbmsbBGBL7VMsZdFRN1bOeSiaEtT74Fg=)
2: Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa (hash: mKMA8v5enBshub8zpH+FWCvpU25kENVUShbbazleOWE=)
3: U_rat5lH-1OBTjZW3Kpv35l2bnY.roa (hash: RWS/4jTw+B9QckGKnUwmlAnGx+MDkdaAdkO4bYQ9r8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:2f:8e:16:55:57:35:33:05:26:85:06:17:35:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Sep 24 02:00:04 2026 GMT
Not After : Sep 25 02:00:04 2026 GMT
Subject: CN=f88165c4cf1c5b06294965f3aafeda015af60692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:00:e3:17:22:1a:5a:39:bc:57:fa:51:93:
6b:70:f1:c3:ab:2a:13:61:b4:d1:42:ad:c7:0c:28:
da:76:ad:03:b4:38:3e:52:66:64:a1:f1:41:62:25:
77:4e:0c:4f:f4:e4:83:70:06:98:57:56:22:b4:c9:
e1:80:57:a1:b0:57:2b:cf:16:7f:db:bd:ea:d0:08:
53:0b:06:28:c8:18:32:8b:91:c5:14:fa:34:5c:8c:
b6:08:5d:e5:ba:04:97:02:6d:78:27:df:99:57:b4:
de:de:89:d1:6f:e4:23:b6:2c:23:bb:69:49:09:b0:
d8:12:48:17:ef:f4:f8:55:48:40:bd:46:cd:7c:7a:
6c:c1:86:10:cd:ae:25:79:96:38:6e:3d:3b:92:e2:
6c:f6:ef:2b:eb:9f:66:5d:6b:4f:e6:9e:13:50:32:
ee:2c:c4:ac:c1:5e:9c:56:9a:c0:92:a0:f5:15:29:
ba:e9:96:b4:a8:59:a5:75:af:47:0c:11:c8:0d:24:
bb:d3:6e:d4:0f:3f:b6:9a:3a:2e:de:ba:d3:dd:12:
76:d9:b0:00:38:e5:66:33:06:92:ff:de:2b:24:54:
3d:0d:a5:b5:f3:14:7f:f0:49:d0:c6:e6:73:84:f1:
62:2c:ad:73:fc:63:43:0e:73:bc:cd:55:0e:67:f9:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:81:65:C4:CF:1C:5B:06:29:49:65:F3:AA:FE:DA:01:5A:F6:06:92
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8a:81:7a:9a:d6:0b:2a:19:02:c2:a2:a2:17:28:3c:65:15:
49:cf:40:1b:a0:aa:56:20:e8:81:0a:d8:84:c7:a7:83:be:d6:
97:dc:35:d2:b5:4f:2b:57:41:24:d8:33:28:a1:e9:7f:96:83:
2e:91:4d:5e:3d:36:0f:c9:9c:50:b2:0f:c7:1e:9d:2c:a0:de:
2c:a5:1a:ba:82:c4:ed:fd:6e:09:63:66:8e:cb:c0:ef:6f:25:
3f:fa:33:3e:fb:89:64:af:58:fc:91:c0:76:53:a5:1a:a0:38:
d9:9e:ed:82:f5:81:e1:2b:32:de:cf:7b:b7:2c:fe:7f:c0:20:
f4:f4:84:21:e3:8c:98:17:8c:84:80:bb:b3:8d:86:83:b9:c3:
ac:0e:36:6d:5b:f2:0f:49:12:21:32:dd:d4:6f:5d:ad:88:f8:
9f:6d:b1:ea:b6:95:96:8e:1b:d1:ad:a9:26:05:7b:d7:b3:83:
b5:7e:79:7e:28:78:66:a2:ae:94:e6:f3:4c:1d:6f:32:a1:e5:
3c:02:66:cf:00:cb:40:10:41:35:3a:ef:35:ce:06:7c:70:6a:
c7:7d:0f:7f:bd:27:9b:f2:dd:1e:10:38:03:78:aa:e9:f8:99:
ac:f2:94:09:44:b1:45:7a:89:b7:19:50:a6:c8:aa:9f:4b:56:
a7:2b:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:44:52 2026 by rpki-client