Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: voQ0x0wJa7u0E77nJ8B3yn3x6QRpIDpWcyuqJir8rIc=
Subject key identifier: F9:D1:A2:06:C1:58:89:2C:6C:6F:95:46:EA:A7:75:B6:B8:BD:21:3B
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 01A0D94D766380714F1AEF120A24D5ABA2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 172B
Signing time: Fri 25 Sep 2026 16:02:07 +0000
Manifest this update: Fri 25 Sep 2026 16:02:07 +0000
Manifest next update: Sat 26 Sep 2026 16:02:07 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: AdgyRGtGcLpsN9I3j5QXBJvF7YWaXQ7cTbr5g7Sv9dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:76:63:80:71:4f:1a:ef:12:0a:24:d5:ab:a2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Sep 25 16:02:07 2026 GMT
Not After : Sep 26 16:02:07 2026 GMT
Subject: CN=f9d1a206c158892c6c6f9546eaa775b6b8bd213b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:06:78:2e:cf:b7:05:53:11:be:ec:1a:10:
0b:14:3f:ab:51:2a:c4:86:44:80:8b:01:86:a0:ca:
a8:1f:fe:5d:07:35:17:a4:f4:aa:92:ed:e6:3c:c4:
27:60:50:1c:15:83:05:25:39:28:4f:5b:e1:ae:d8:
e1:79:08:55:14:7a:ee:80:98:0f:ec:11:ae:11:c2:
4a:e5:53:36:b7:62:26:11:2e:3d:df:1f:0b:b4:a8:
0d:89:11:63:b7:ef:59:11:b6:f2:99:9c:41:59:39:
35:7d:86:94:ac:35:93:b6:50:1c:fc:b3:69:6b:fd:
a6:70:c7:c7:4e:16:ce:11:58:91:42:dd:ee:ad:07:
b6:a3:b6:d3:ba:ea:97:8b:16:4a:72:d8:75:86:dd:
bc:a5:38:71:85:15:61:f0:8e:4e:3e:c0:78:32:18:
18:34:38:65:7e:88:1a:f7:45:3c:44:20:f7:08:ed:
4c:5e:5c:77:42:27:ac:71:48:56:60:e8:d0:67:4a:
bc:34:b5:f6:8e:9c:8e:fc:37:b5:22:e8:02:c3:b5:
2e:f3:b4:05:8b:83:90:8b:ac:dd:30:da:d7:5b:a3:
1d:c3:02:b3:6b:a0:55:68:81:92:cd:78:3f:7f:28:
7a:17:5e:6c:8b:4b:b8:9f:12:a4:6a:ca:50:c3:a3:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D1:A2:06:C1:58:89:2C:6C:6F:95:46:EA:A7:75:B6:B8:BD:21:3B
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:44:99:67:d3:c6:86:87:27:4f:54:90:bc:3f:bb:22:c7:ba:
57:5d:c4:d7:0d:70:eb:50:a4:2c:cb:fe:d4:31:1d:3e:ef:a8:
30:67:41:38:2c:26:57:35:30:1b:9e:14:05:23:79:4a:a6:01:
2a:8e:f5:04:ad:fa:e9:e5:21:a3:b5:7b:fb:6a:a9:40:52:8d:
7d:2f:ef:6e:ce:b1:2e:e7:2b:74:25:9d:c5:f7:06:54:8c:4c:
8f:a9:a1:cf:5c:85:da:85:b8:b2:e8:1c:39:75:59:35:20:55:
44:37:81:7f:85:af:4f:37:71:33:a1:cd:08:23:3e:1c:42:49:
37:e4:49:5f:f9:51:89:15:ea:49:93:73:ce:62:cc:b1:62:b9:
05:b5:db:3f:70:48:de:6b:2e:59:38:26:87:d8:38:bc:af:c8:
72:5b:da:c2:32:8a:18:ed:4a:f1:5c:3c:05:72:54:62:5c:de:
12:03:c0:1b:7a:5e:0c:db:05:43:f7:50:6a:e1:c5:9a:63:ba:
0b:84:0b:e0:13:5c:e4:99:80:f2:5a:d6:e2:e2:7a:72:37:26:
c6:11:11:a2:2a:a7:f7:d9:1b:5c:8b:50:ef:ee:e0:d2:e0:c8:
c5:8e:29:f7:38:de:d0:d3:18:e8:99:c9:f0:ea:ef:4e:27:52:
9c:78:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:35:27 2026 by rpki-client