Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: /k9bw7Ag45csecv3bq4ePEnTJ5PSKpbp3iU1bQyKdCc=
Subject key identifier: E8:BB:32:8E:47:58:04:77:FD:10:A3:62:27:46:F1:9D:B1:7F:C3:71
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 01A0CE91AE13F16760793EE059411D742B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0EAA
Signing time: Wed 23 Sep 2026 14:00:48 +0000
Manifest this update: Wed 23 Sep 2026 14:00:48 +0000
Manifest next update: Thu 24 Sep 2026 14:00:48 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: 7cz2HqY97ATKT6kFXww2RSq0yCub/Sqx8+T/L9kf0eo=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:ae:13:f1:67:60:79:3e:e0:59:41:1d:74:2b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Sep 23 14:00:48 2026 GMT
Not After : Sep 24 14:00:48 2026 GMT
Subject: CN=e8bb328e47580477fd10a3622746f19db17fc371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:8d:47:05:80:96:11:97:ee:0c:7b:91:b3:
66:41:d3:68:35:33:e2:44:86:db:45:ab:db:13:ef:
c6:eb:88:15:e1:55:d9:93:50:a1:4d:ae:fc:81:f5:
de:74:b9:bb:64:9c:ff:c7:19:71:ee:a4:b4:ef:e9:
9e:58:51:e2:62:de:aa:6e:c2:e1:d8:29:8f:d7:3d:
49:d7:72:16:a9:ea:33:d3:06:1d:48:48:33:5f:63:
d3:50:5c:b6:e0:98:b1:9a:01:8d:89:80:84:62:7f:
50:4d:86:d2:d0:f2:63:dd:a3:89:59:db:ed:8f:88:
95:0b:0c:5c:5e:9b:1a:a8:c0:ab:66:f2:9a:42:a0:
38:ec:5e:5f:d8:a4:1f:59:b5:bf:05:ad:de:52:41:
05:4d:2e:7d:47:b1:0f:88:3e:f1:a7:01:10:3c:80:
89:e8:32:20:66:b4:78:b4:5c:e9:aa:2e:4d:79:2a:
c8:f6:f0:92:6a:bc:bc:1f:08:c8:dd:e3:96:f7:39:
c0:27:1a:dc:29:07:7d:71:50:6a:77:1f:9a:96:f9:
57:5b:cd:49:15:fd:66:a4:68:3e:57:b1:ec:c4:6f:
13:24:1c:d0:a0:49:f2:49:94:89:76:d3:03:28:99:
47:d8:41:2f:d4:7e:1c:1d:2f:c9:e4:07:82:58:f5:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BB:32:8E:47:58:04:77:FD:10:A3:62:27:46:F1:9D:B1:7F:C3:71
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:77:6e:05:64:c1:1e:ba:34:ad:80:21:2c:86:4f:4c:9a:20:
3a:13:8b:95:b5:db:ef:97:7d:2c:8b:75:11:09:ab:90:4b:1b:
ff:55:7f:b6:f5:83:24:e4:6d:59:6d:be:77:de:2e:e3:00:c0:
e2:36:0a:0e:ba:81:b5:20:7e:23:02:9e:9b:89:cd:6e:93:29:
5d:aa:00:15:79:39:3a:ec:8c:a4:60:36:1e:4c:73:7a:cf:bf:
91:96:85:97:39:6b:f8:18:2c:5d:4b:7c:f4:67:bb:e5:d1:d9:
42:af:62:e3:66:1c:f2:d5:03:f9:47:7e:54:55:a7:07:c6:40:
0d:fd:e7:8f:bb:9a:c6:96:25:fe:6d:65:81:46:7e:f3:b5:39:
ab:ad:19:74:8f:ad:ea:b6:14:ae:c3:c4:11:cd:a6:b5:aa:b0:
24:e0:2c:39:59:49:ce:26:98:e0:3b:0c:b7:d2:2b:ac:03:e3:
27:ff:46:a3:cf:3e:16:aa:17:91:e0:3d:da:29:fe:f2:30:0a:
4a:33:e6:9d:7b:95:0f:f7:90:06:52:90:99:25:09:22:b8:a0:
6d:ec:bd:82:14:f4:bc:c2:14:82:8b:7b:4f:2c:5a:46:ff:ed:
69:03:4e:ab:fe:4d:5b:4c:89:fc:ac:20:55:f0:35:b5:2a:50:
da:a2:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:56:52 2026 by rpki-client