Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier: dodzb5c64IJ7mbOg4Nja2I3UaYBh1TytJZNgdVkblhU=
Subject key identifier: AD:13:57:AE:58:C9:E1:6E:76:59:A3:CA:D6:27:69:AF:10:E5:9A:0A
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 01A0CA7E30200BA82310FE64065F20704445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number: 0697
Signing time: Tue 22 Sep 2026 19:01:02 +0000
Manifest this update: Tue 22 Sep 2026 19:01:02 +0000
Manifest next update: Wed 23 Sep 2026 19:01:02 +0000
Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: oYF5XWgsrYZlRCzIioldLTyX4tUAuQfBkjo9/tz4JLM=)
2: Ldw7iPn1SUZR0o_Mw2A1SwKSf3o.roa (hash: qx+pYfWPpYvuMywyJs0SwN08g9+w1RyFT1RhBFHmVnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:30:20:0b:a8:23:10:fe:64:06:5f:20:70:44:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Sep 22 19:01:02 2026 GMT
Not After : Sep 23 19:01:02 2026 GMT
Subject: CN=ad1357ae58c9e16e7659a3cad62769af10e59a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:bf:69:47:ce:64:56:b1:5d:a9:03:85:25:
df:73:4c:54:6b:ff:ac:e7:6f:ba:83:72:d9:39:bb:
70:f6:b6:5e:6d:32:d2:0c:32:07:de:9d:6c:9c:c0:
95:fe:08:54:ff:ac:2c:8d:5a:8c:47:6c:7d:4f:1a:
0f:9c:ea:51:f4:47:bd:2e:d9:9f:d6:a0:cf:fd:04:
c0:48:81:cf:fd:bc:47:4d:b0:cd:68:01:27:f0:7c:
a4:d8:ab:31:55:d3:68:58:bf:ae:48:d0:aa:1e:e9:
31:b7:40:ea:22:2e:de:da:7a:6e:75:90:53:92:27:
3d:28:c5:a6:7f:1a:03:59:e5:71:38:12:2b:32:8c:
da:18:33:0a:98:9b:24:5f:01:93:05:78:11:90:41:
2a:51:2e:bd:97:c8:8f:72:b6:f5:41:27:69:6f:30:
b1:9e:c3:a7:7b:7b:00:ac:40:02:7c:2d:75:7f:1f:
5e:8e:5d:c9:7d:1a:99:28:d3:8a:56:5b:31:ca:1e:
93:30:8c:dc:4e:f7:f0:a7:cf:7e:32:97:2e:9a:4d:
e5:da:5f:81:a1:c6:61:ba:1c:ba:d2:2c:64:8c:6c:
4c:52:e2:8a:71:6d:a6:1a:6e:8e:12:12:81:b1:45:
3f:03:06:d3:1f:eb:f0:e8:55:0a:5f:f4:20:01:bc:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:13:57:AE:58:C9:E1:6E:76:59:A3:CA:D6:27:69:AF:10:E5:9A:0A
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1b:99:12:c8:ee:f4:20:56:c1:eb:8b:76:3d:d5:2e:e5:58:
c0:ab:a4:e4:cc:26:2b:a2:f4:bd:55:32:3d:ea:3b:8f:45:bd:
d9:9a:b1:a0:fb:71:df:94:0b:2e:8c:17:04:58:e2:a2:ea:dc:
54:2a:96:63:ea:2c:1c:65:4f:a4:96:cd:ee:86:4a:36:bf:1f:
0b:b0:4c:7b:6f:ce:4a:68:7d:6a:07:a4:03:37:12:20:99:ad:
de:47:df:80:f2:25:c5:b4:a9:0e:48:ab:e1:a8:f6:e0:b7:f4:
96:16:9e:6a:6e:cc:e8:d8:4b:33:ca:9b:7a:a8:54:d4:75:2c:
13:eb:9e:98:3a:5a:ee:15:2a:3b:6a:8e:37:15:b2:e1:d9:8c:
ce:35:07:61:8c:d7:26:c8:f4:1e:b8:c8:75:1b:96:02:db:f1:
1f:56:aa:a5:7b:b9:bb:7d:a1:54:3c:55:31:10:51:79:f8:3b:
f1:2e:a5:74:21:54:84:ec:78:87:ab:f0:ab:f3:43:ac:6e:10:
34:8b:02:64:3b:14:82:7a:65:b4:46:7b:5f:20:9c:c6:31:44:
40:f6:c5:f9:fd:45:c2:ed:a5:c5:ab:3c:c1:1d:49:dd:13:f5:
84:74:0f:9f:ae:76:dd:65:7d:50:ed:7e:a0:19:1d:21:a3:eb:
13:fd:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:21 2026 by rpki-client