Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: gDwNOboNxcTv4MhsJzlOeWQAsZPmW2OWggJoY1Yo7kU=
Subject key identifier: 7D:A0:37:B2:7A:84:29:6E:54:55:70:54:D9:96:6F:B5:F6:63:CB:6A
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 01A0D2DE3DEFED6717E1FE582697F356E29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: 0509
Signing time: Thu 24 Sep 2026 10:02:55 +0000
Manifest this update: Thu 24 Sep 2026 10:02:55 +0000
Manifest next update: Fri 25 Sep 2026 10:02:55 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: NnrUiTlKNR9iHFHmbgwaUzgchhILB70vBkcAT6Sgrk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:3d:ef:ed:67:17:e1:fe:58:26:97:f3:56:e2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: Sep 24 10:02:55 2026 GMT
Not After : Sep 25 10:02:55 2026 GMT
Subject: CN=7da037b27a84296e54557054d9966fb5f663cb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:60:b0:86:d8:46:75:8f:02:30:2d:5a:f5:
49:52:68:07:5f:25:37:0c:6f:1f:5d:05:10:0b:6b:
02:5d:a2:c8:66:4d:d5:ab:98:4c:9e:7c:f1:66:24:
fd:1d:b3:8f:f0:86:6a:45:0b:07:68:33:6d:5e:f1:
c1:3b:6d:4d:25:7c:ae:6f:56:f8:de:3e:26:88:17:
fa:3e:b0:e9:71:65:46:3e:4e:70:82:4c:cd:b0:d2:
8e:8d:7e:3f:68:46:36:dc:bf:e4:d6:1a:5d:44:e4:
49:3c:e0:64:f6:41:48:5e:35:f8:ac:91:ca:94:56:
df:a5:63:e7:ee:fd:54:6e:c8:45:bc:8a:8b:0b:1d:
27:3d:4e:af:a5:dc:70:08:39:d8:ce:a7:6d:5f:ee:
d3:52:2b:04:6c:7b:39:dc:d6:1b:4f:7e:5a:bd:ae:
36:91:6c:f2:a4:9d:47:33:ef:c6:03:54:bc:cf:8b:
28:80:c0:35:6b:ba:2b:65:ee:b6:44:ab:37:ee:21:
a2:7d:11:be:08:0e:2b:a4:e9:c5:d9:86:86:ca:f8:
3d:55:41:ad:a8:f2:71:95:1b:5e:d1:9f:62:3d:9f:
d1:91:66:6d:b1:af:70:f0:dd:79:98:88:3a:87:c6:
e1:a8:24:51:fc:4f:b7:cc:5f:49:02:5a:61:af:e4:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A0:37:B2:7A:84:29:6E:54:55:70:54:D9:96:6F:B5:F6:63:CB:6A
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:39:ee:15:9e:ea:f5:a0:c8:f1:e2:26:2f:80:a1:2e:f4:b7:
ec:3e:7f:43:c4:2c:15:c5:ff:13:ca:23:df:60:26:01:23:db:
dd:77:31:62:c8:de:56:63:0b:0b:66:3b:85:dc:47:1b:e7:e9:
74:fb:92:6c:d9:06:c8:d8:ab:0a:3c:9b:43:66:1e:19:fe:e0:
98:92:d4:6e:01:06:69:28:59:38:65:8d:5a:65:db:78:92:dc:
2b:a1:4b:d1:5c:a3:33:19:cd:89:4c:b9:56:54:94:52:34:82:
cc:b6:79:78:80:27:9c:b8:db:01:69:25:e2:b6:cf:8b:9a:b2:
79:61:16:69:ca:c6:88:c0:0b:10:f6:ea:8d:a1:b4:3b:8e:d2:
f0:f6:53:49:5c:f9:69:a8:2e:a5:94:8e:0d:12:88:97:a6:8d:
37:01:37:d5:71:af:e2:e9:e3:24:b5:d9:95:ff:4b:4f:03:1a:
a8:6f:db:fe:b8:a6:94:2a:c2:4e:c1:54:f2:57:2d:93:7b:bb:
be:21:1a:ee:21:20:79:33:ff:81:90:90:5d:86:56:7f:df:13:
1b:6b:0f:2e:cc:49:9f:7a:2c:d7:31:4b:c0:4e:bb:ec:b0:7b:
a5:a1:71:98:f2:fd:44:3b:77:45:41:2d:c9:12:03:62:f2:06:
92:68:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:11 2026 by rpki-client