Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
File: 8nlONzkr4v_oF5XX0WHwMwVqBs8.mft (raw, json)
Hash identifier: TJ70TmyrjqDgasFylrPsN7TYA2OwTTJwa5dVBe3Lo3o=
Subject key identifier: FE:6C:5C:FB:32:D3:C1:40:B8:CB:35:62:82:EA:E7:BF:2A:28:9F:2A
Authority key identifier: F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
Certificate issuer: /CN=f2794e37392be2ffe81795d7d161f033056a06cf
Certificate serial: 01A0D26E7597C9248287968BEBF3A20E2217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
Manifest number: D1
Signing time: Thu 24 Sep 2026 08:00:49 +0000
Manifest this update: Thu 24 Sep 2026 08:00:49 +0000
Manifest next update: Fri 25 Sep 2026 08:00:49 +0000
Files and hashes: 1: 8nlONzkr4v_oF5XX0WHwMwVqBs8.crl (hash: FuwaU0hT3hOl6McKo2OthNGickRKIicet/r/msezeho=)
2: g1hZM_gA4VG6GdoQudkyKC9Iy5o.roa (hash: jJPVFAYeWIaOyslOEJqm1eIOt5Tzn5vmJYRqVTS9b6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:75:97:c9:24:82:87:96:8b:eb:f3:a2:0e:22:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2794e37392be2ffe81795d7d161f033056a06cf
Validity
Not Before: Sep 24 08:00:49 2026 GMT
Not After : Sep 25 08:00:49 2026 GMT
Subject: CN=fe6c5cfb32d3c140b8cb356282eae7bf2a289f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:69:91:ef:7d:ea:0e:5c:76:fa:9c:1c:00:
aa:60:77:f8:6f:4d:ac:83:7e:51:c3:7b:fd:0d:bd:
80:0d:6b:d0:52:3f:4a:59:79:68:f5:c9:2a:4d:fe:
81:11:34:83:03:09:af:81:8e:de:28:74:a5:9d:e7:
9c:8f:e5:83:a1:c0:73:64:d7:5e:c4:13:ff:1f:8b:
3b:cf:fe:c1:97:63:4f:fa:bf:39:5b:c1:0f:56:96:
40:99:bd:44:bb:20:ca:f7:87:47:43:ec:6b:f0:24:
8a:b6:74:92:e4:98:e0:55:56:94:3e:93:29:a5:b9:
4d:50:cc:0d:de:c3:a7:bb:43:3a:52:79:63:43:ab:
5d:2f:ed:f6:5b:6e:8c:b4:7d:96:42:2a:c2:f7:29:
6b:60:42:9d:b1:f9:1a:a4:76:a4:03:e0:a6:a0:fd:
c8:4f:e8:04:ad:59:75:c1:3d:95:03:76:15:aa:37:
1d:8d:52:da:4b:b2:8f:ac:f6:19:29:5f:c2:d5:9c:
e7:0d:e9:cb:e0:bd:c9:ef:8a:85:7f:fe:5b:f8:bd:
85:f3:09:0b:5c:95:9a:9e:df:ad:ae:ea:6c:14:e0:
0e:00:45:96:1b:1e:4a:fa:2f:09:8c:a8:d3:18:77:
b4:d2:05:7a:2e:5b:c4:e9:78:b2:e1:22:ef:99:04:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6C:5C:FB:32:D3:C1:40:B8:CB:35:62:82:EA:E7:BF:2A:28:9F:2A
X509v3 Authority Key Identifier:
keyid:F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:76:9d:d8:e9:40:e2:b4:30:c9:2c:12:e5:6b:9b:c6:e6:38:
ad:c8:c1:76:ef:f5:e4:d5:22:ac:6e:4a:39:c0:ef:ff:24:32:
e1:60:8f:2f:29:f9:c6:ef:46:41:2b:30:42:9d:51:b1:ab:00:
af:d0:c3:b1:b8:f6:75:c8:a9:b7:94:ef:7a:72:c1:c0:27:0a:
f1:a2:d2:36:a8:75:8f:88:00:73:61:33:3e:9e:47:4f:09:c3:
83:ab:af:64:c2:87:7b:71:5e:d2:63:02:e3:15:47:46:78:42:
d2:09:97:9c:02:3d:75:1f:ea:90:ec:72:5b:83:f9:56:d6:42:
5e:ef:f1:88:b7:ce:3a:23:00:90:3a:1a:61:c9:81:18:44:06:
03:b5:f2:86:17:d9:96:77:91:66:28:01:6e:ec:21:9d:f1:e6:
3f:f4:30:38:b2:c1:8a:be:18:4c:7e:4e:2d:a0:f6:b9:de:21:
80:d4:fd:bf:f5:18:92:79:9d:29:b9:35:88:13:87:0b:23:b0:
06:22:fa:9f:9a:46:ee:fc:e7:4a:7c:9f:8e:ff:73:05:f9:7a:
72:5f:6e:4f:29:34:d5:15:9a:c3:6a:ba:e1:bc:95:d8:c5:b7:
d4:4e:59:f3:e9:45:a8:59:30:b7:6b:c6:23:d4:86:13:f6:eb:
07:d3:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:04:01 2026 by rpki-client