Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
File: 8fdZtMU8ODyZC_Np45VImgPhK4M.mft (raw, json)
Hash identifier: LOoue9r9MiAcNlDmXxujKBaw+Alr1+OMvFvNLO3bieM=
Subject key identifier: 8B:0F:A7:63:E6:2C:1E:1E:0C:BE:36:F0:D7:02:D1:E1:E0:26:EA:57
Authority key identifier: F1:F7:59:B4:C5:3C:38:3C:99:0B:F3:69:E3:95:48:9A:03:E1:2B:83
Certificate issuer: /CN=f1f759b4c53c383c990bf369e395489a03e12b83
Certificate serial: 01A0CEC8C2344EE88840FFC48C1E803F9B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
Manifest number: 0200
Signing time: Wed 23 Sep 2026 15:00:58 +0000
Manifest this update: Wed 23 Sep 2026 15:00:58 +0000
Manifest next update: Thu 24 Sep 2026 15:00:58 +0000
Files and hashes: 1: 8fdZtMU8ODyZC_Np45VImgPhK4M.crl (hash: C33GIKbHgTGWSHJxrUsjZTusbjC2Q6WOUwf2vCPHHzo=)
2: VpIgiDeEMf7nW9wrj8KGAz8K1aA.roa (hash: umvesd0+PZ7bymZU641FAmXWDwmpl+q6A+dAgZEThlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:c2:34:4e:e8:88:40:ff:c4:8c:1e:80:3f:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f759b4c53c383c990bf369e395489a03e12b83
Validity
Not Before: Sep 23 15:00:58 2026 GMT
Not After : Sep 24 15:00:58 2026 GMT
Subject: CN=8b0fa763e62c1e1e0cbe36f0d702d1e1e026ea57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:68:59:4e:c1:47:c7:ba:43:40:0a:a9:74:
1e:3a:6c:02:9f:90:0f:d4:64:66:42:08:1b:98:56:
89:4a:aa:c3:e8:48:8e:0e:7f:8d:9e:61:15:b8:1d:
4b:21:dd:27:18:16:a0:bb:a7:1f:eb:a0:1e:20:99:
ba:2f:f2:49:cc:2c:4a:f5:77:dc:f2:64:cf:ea:b4:
d4:32:48:38:c5:f8:68:08:b3:5e:e1:c5:9f:d3:fd:
89:d8:78:a6:bf:1b:63:a1:ac:b0:90:86:5f:7c:87:
2f:cc:a3:6b:2f:1b:08:58:19:98:77:41:a1:ec:6e:
05:53:bb:b8:c7:02:fd:47:83:03:d9:85:29:6d:b4:
29:0e:f3:d0:61:34:e8:81:d1:5c:03:28:05:51:b2:
1c:11:be:b8:8a:40:09:83:12:41:70:67:54:7e:2f:
1b:93:f4:6b:15:51:44:c3:3f:76:d5:27:d3:07:d1:
35:61:48:8e:ea:39:8e:d5:ba:ae:e5:9a:d6:c4:99:
ab:4b:50:5a:4a:2b:57:3e:30:81:44:1e:08:5c:7c:
20:33:55:26:14:17:91:99:23:ed:ef:11:47:c2:56:
88:d5:94:c4:67:c1:68:84:d7:66:09:97:bb:ee:84:
34:2f:ee:56:cc:d2:5b:8b:4b:5d:f3:e0:ff:e0:dd:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:A7:63:E6:2C:1E:1E:0C:BE:36:F0:D7:02:D1:E1:E0:26:EA:57
X509v3 Authority Key Identifier:
keyid:F1:F7:59:B4:C5:3C:38:3C:99:0B:F3:69:E3:95:48:9A:03:E1:2B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5c:35:18:f0:28:38:7d:bd:15:73:e3:42:69:c4:fa:a8:ae:
8d:9d:85:00:fc:b1:a2:af:98:ff:6c:b2:a1:44:d9:6a:60:0e:
72:6e:fd:a1:63:ca:c6:60:e7:8a:73:72:96:14:a3:c1:2e:66:
a7:b0:ee:20:25:73:fd:ca:a6:24:5b:af:5f:2b:a0:f3:7c:97:
3b:a0:ff:71:f1:2b:12:94:c4:4f:56:dc:70:c5:c4:20:db:76:
ab:e0:0f:48:a1:f9:6f:06:31:d1:a0:a6:34:2d:4c:e0:78:6c:
6b:2e:e5:d1:bc:e7:36:70:1d:6b:8e:88:31:32:15:8c:4b:38:
c1:9c:cf:fa:1b:01:75:d5:f4:30:03:7f:70:d9:30:c5:3d:61:
fd:70:9d:55:d0:15:bc:12:87:6c:8b:72:6d:23:8d:f5:19:e1:
7b:3a:c5:26:92:17:b9:b0:9c:4a:43:a8:a7:6c:eb:bf:2b:4d:
ee:8a:9c:bf:be:7c:c6:32:e2:bf:75:a3:1c:2e:37:f0:42:cd:
d3:78:0d:13:27:0c:63:ac:24:c1:34:99:8c:51:7e:17:22:c8:
54:65:4c:7d:5c:f4:fa:b9:98:0c:35:0f:b8:3b:59:93:55:56:
39:bd:de:1e:96:58:82:53:6d:97:33:b9:25:1b:0f:ad:bd:da:
b1:b0:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:01:34 2026 by rpki-client