Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
File: 8sunLIc142KREckiq36BRTTV_F0.mft (raw, json)
Hash identifier: ZyqNrIN7oEHM2wqBRwljDKQgKM/zB+Z06LIl5aPoZJg=
Subject key identifier: 24:F9:EE:5C:6C:EC:E5:81:B6:25:2C:1C:A7:17:91:C0:EE:BD:56:E2
Authority key identifier: F2:CB:A7:2C:87:35:E3:62:91:11:C9:22:AB:7E:81:45:34:D5:FC:5D
Certificate issuer: /CN=f2cba72c8735e3629111c922ab7e814534d5fc5d
Certificate serial: 01A0CF36AC7B4BFAD95D22C367CAA07A4567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8sunLIc142KREckiq36BRTTV_F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 17:01:01 +0000
Manifest this update: Wed 23 Sep 2026 17:01:01 +0000
Manifest next update: Thu 24 Sep 2026 17:01:01 +0000
Files and hashes: 1: 8sunLIc142KREckiq36BRTTV_F0.crl (hash: 0/wdlN1Hq1+UwDc26lbiRqHnduBNpNYdt6Z2Htss0pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8sunLIc142KREckiq36BRTTV_F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:ac:7b:4b:fa:d9:5d:22:c3:67:ca:a0:7a:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cba72c8735e3629111c922ab7e814534d5fc5d
Validity
Not Before: Sep 23 17:01:01 2026 GMT
Not After : Sep 24 17:01:01 2026 GMT
Subject: CN=24f9ee5c6cece581b6252c1ca71791c0eebd56e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:8f:ec:20:11:1d:d1:10:40:70:c3:7b:cf:
1b:92:d8:00:a5:29:1f:f3:78:74:20:82:da:7e:a8:
f9:33:7b:ea:ba:0a:6f:08:26:0d:e3:de:94:14:bd:
f0:0c:35:2e:6d:a1:ea:38:06:48:96:cd:e5:db:14:
60:c1:df:30:7d:85:7c:46:d7:00:17:2a:c8:75:af:
ad:09:90:d1:52:92:30:e0:01:78:a9:64:2a:1a:53:
89:16:f7:e4:85:8d:85:b0:29:10:f9:51:f2:8f:d9:
ef:ed:63:5f:76:94:fb:cd:86:b1:6f:e7:73:60:5b:
ab:b9:34:a3:c1:31:75:f4:c4:71:a8:53:74:8b:f6:
00:90:12:50:ca:27:37:6b:d6:4d:ae:a1:6e:56:5a:
ad:3a:4a:7d:39:5b:0c:de:02:82:56:cc:96:73:3d:
a6:ba:c1:60:0e:d9:7a:bd:ea:d8:1a:a8:f3:56:58:
16:2b:e9:67:ef:ab:a7:b5:ce:4c:6b:26:14:7a:89:
a5:ed:a4:8c:27:01:16:51:88:62:bc:3c:d2:d6:2c:
42:db:36:c5:77:12:f9:c4:61:f8:53:ec:34:f4:2d:
21:5e:f8:b4:72:32:64:26:6a:f5:19:e3:1c:67:36:
d7:96:b0:4c:a1:89:cb:47:15:92:bd:ec:10:b0:86:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:EE:5C:6C:EC:E5:81:B6:25:2C:1C:A7:17:91:C0:EE:BD:56:E2
X509v3 Authority Key Identifier:
keyid:F2:CB:A7:2C:87:35:E3:62:91:11:C9:22:AB:7E:81:45:34:D5:FC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8sunLIc142KREckiq36BRTTV_F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:17:cd:c6:ea:b5:38:76:71:65:81:e9:82:63:0b:3e:b9:5c:
42:45:16:a2:8b:a1:df:d9:e7:4a:5f:6b:f2:da:64:4c:60:c4:
fd:0e:7c:84:80:f2:83:bb:f8:0c:58:08:ba:df:c4:ee:52:7e:
8f:cd:17:7f:b0:33:4c:c1:4e:6a:db:d5:77:f5:e0:10:08:cd:
95:68:b0:52:03:b4:c5:95:e1:f8:62:0a:4c:d2:61:81:87:6d:
b4:fb:7b:ae:66:af:a4:c2:be:8c:b8:0f:29:27:e8:7e:0e:ed:
79:69:cf:7e:a0:e0:8d:17:60:73:e3:2a:b1:90:18:05:da:ea:
87:83:b4:65:5e:0d:6e:5d:f9:06:1d:6b:04:db:bb:a7:01:7f:
0e:cb:99:17:6a:0a:aa:00:f1:5b:25:3e:ab:51:9f:32:9a:ef:
c5:0f:90:da:9a:c1:65:13:05:80:71:46:b5:a8:be:1b:04:11:
c5:9d:ec:c0:25:69:61:6d:e5:4c:3d:e6:cd:88:0b:6d:ed:93:
1f:e0:cf:9e:43:ab:29:7a:01:3c:45:fc:62:90:2a:33:22:52:
19:bf:d6:85:fd:60:16:43:ec:37:91:db:86:d7:ad:78:8b:fd:
5e:ab:6c:b0:b5:e7:62:75:8b:1b:28:e5:3b:0f:68:f7:93:33:
dc:c4:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:58:32 2026 by rpki-client