Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft
File: 8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft (raw, json)
Hash identifier: XXEX+bH3HKWQ7MV7nMDKhRmQ81wSUMvUMecElEIpo0Y=
Subject key identifier: 51:22:30:A0:BA:E3:A7:3B:49:ED:81:06:A5:6C:0E:0D:48:A3:6F:60
Authority key identifier: F0:8A:2C:EC:71:01:F2:17:73:DE:FC:59:16:C0:8B:01:C1:85:90:E7
Certificate issuer: /CN=f08a2cec7101f21773defc5916c08b01c18590e7
Certificate serial: 01A0CF6CF6A09C9040D744C6E48587F5485E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ios7HEB8hdz3vxZFsCLAcGFkOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft
Manifest number: 0387
Signing time: Wed 23 Sep 2026 18:00:19 +0000
Manifest this update: Wed 23 Sep 2026 18:00:19 +0000
Manifest next update: Thu 24 Sep 2026 18:00:19 +0000
Files and hashes: 1: 8Ios7HEB8hdz3vxZFsCLAcGFkOc.crl (hash: Y1WnjQ4TmPoFUq2kynrK4+trx8KdXC/7hR69EYNQPrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ios7HEB8hdz3vxZFsCLAcGFkOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:f6:a0:9c:90:40:d7:44:c6:e4:85:87:f5:48:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a2cec7101f21773defc5916c08b01c18590e7
Validity
Not Before: Sep 23 18:00:19 2026 GMT
Not After : Sep 24 18:00:19 2026 GMT
Subject: CN=512230a0bae3a73b49ed8106a56c0e0d48a36f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:9e:29:59:76:98:c6:1b:a4:43:89:f4:41:
c8:12:66:fb:55:21:56:9b:62:19:c0:cd:85:7d:64:
79:78:18:61:a5:2b:8d:30:84:e3:48:a1:95:aa:f2:
6e:ca:3e:d9:3b:82:f4:f5:15:df:d8:ee:37:be:8a:
e0:f7:53:f5:74:26:de:c2:de:bb:e4:56:16:41:f3:
fe:85:16:ea:49:80:34:cd:65:c2:79:32:cd:d9:13:
71:c9:14:d3:9f:ba:b2:47:38:ea:29:7d:44:fd:60:
ec:f4:65:2e:42:5c:fd:e7:2c:78:ea:8a:ce:d6:64:
a2:de:43:b6:55:e0:e7:a3:78:d9:c3:c8:4a:84:ed:
89:cd:59:4a:39:ce:93:66:3c:bd:81:ca:d8:c5:02:
e0:de:40:d8:bc:e6:b3:39:f9:39:21:b7:80:10:54:
10:75:2b:64:1d:21:0c:df:31:07:be:2b:c9:b5:3c:
50:64:d2:80:8f:f7:22:5f:ad:1b:fe:97:74:e9:e1:
4c:06:0b:64:25:5e:ac:68:66:51:a9:7a:06:dd:20:
3b:0f:b0:63:68:99:ef:53:27:fa:1c:77:b5:72:7a:
89:8b:3e:da:47:45:bd:1e:f0:39:69:b7:65:62:a3:
31:a7:a8:c2:8c:51:18:9d:18:9c:27:c3:d3:60:8b:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:30:A0:BA:E3:A7:3B:49:ED:81:06:A5:6C:0E:0D:48:A3:6F:60
X509v3 Authority Key Identifier:
keyid:F0:8A:2C:EC:71:01:F2:17:73:DE:FC:59:16:C0:8B:01:C1:85:90:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ios7HEB8hdz3vxZFsCLAcGFkOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3d:7e:c3:87:ea:c4:ff:2b:94:b2:5d:aa:a4:45:68:ce:3c:
86:43:fe:0d:ab:71:b6:c6:c1:23:db:28:02:d7:dd:79:31:fe:
b9:68:78:46:95:f8:c7:ed:4a:a9:2a:b5:a4:31:85:16:70:36:
26:bc:62:0c:55:a2:7e:19:a8:02:cc:b5:3f:69:cf:e6:a7:0c:
6a:dc:f3:c4:c3:a3:bb:b4:77:78:f4:e3:71:61:72:04:ad:e9:
79:ac:7b:a1:7f:b1:55:ac:f3:88:ba:fa:d5:5e:3d:2e:a7:74:
15:fd:51:7e:a1:be:70:1b:cd:ba:fa:eb:63:40:53:6a:3a:fb:
f6:e1:f2:59:e7:24:e2:ef:c6:6a:a6:f5:4a:aa:85:9a:72:87:
48:82:45:ee:b5:50:78:b0:9e:91:b2:36:4d:7e:79:37:57:73:
e4:2e:35:88:ca:6d:48:db:f1:9c:7a:52:70:22:eb:45:64:96:
6a:65:06:cf:cb:9c:80:ec:86:d2:a6:75:e1:97:52:74:fa:c3:
0a:13:d8:f6:ca:32:47:86:1e:90:27:ed:aa:f8:1e:ea:ab:9e:
ff:21:b7:63:9a:cb:75:11:35:e2:eb:fa:b0:49:05:e8:3e:ca:
52:00:38:f3:4c:fc:0c:4b:c5:d6:80:ce:45:d2:8f:ec:f0:e3:
d4:55:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:18:34 2026 by rpki-client