Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: idXyPekE4HAyqKS4681W7ymuivf9voTeykXWXc04jxs=
Subject key identifier: CB:87:51:A3:2E:85:99:BC:0B:23:FB:8C:2A:CA:E3:54:FC:A4:C4:C8
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 01A0D19302D6425FFB3BDC84AEFD0007BEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 04:01:07 +0000
Manifest this update: Thu 24 Sep 2026 04:01:07 +0000
Manifest next update: Fri 25 Sep 2026 04:01:07 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: u0G8SEh/K5Oi+t85b301bqMaKd83PNjK1A0n6eCrr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:02:d6:42:5f:fb:3b:dc:84:ae:fd:00:07:be:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Sep 24 04:01:07 2026 GMT
Not After : Sep 25 04:01:07 2026 GMT
Subject: CN=cb8751a32e8599bc0b23fb8c2acae354fca4c4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:8e:68:15:c3:7e:0f:95:fd:70:98:70:6d:
e1:b3:fe:bb:7b:3e:bf:45:36:51:e6:ad:60:9d:49:
b8:fa:38:5a:3f:ca:6d:a9:ee:94:41:b4:33:ae:1d:
df:e0:87:7e:4c:38:d2:81:ec:a1:1b:62:3b:58:60:
9d:fc:72:5d:18:61:b3:62:64:f2:95:19:fd:0c:a1:
b5:cc:b5:f4:06:1d:9c:b9:35:80:fa:5c:2e:33:00:
57:4f:fd:32:64:37:5b:9d:cf:dc:33:39:38:9c:68:
10:c5:2b:fa:0f:ce:e2:e5:34:5f:b9:c1:c6:fa:5d:
39:6b:fa:f2:30:c6:29:18:87:9a:5c:01:4b:34:af:
e4:69:f4:43:f0:99:72:4b:2a:3b:a1:c4:4c:92:10:
5a:5e:26:96:1c:6d:90:66:6e:7a:df:0e:bb:85:71:
9c:0b:6c:c0:e4:14:ea:ef:d8:9c:ca:d7:37:3d:ae:
62:27:d5:05:7c:2f:1e:41:c7:b1:bd:52:e4:57:e2:
a3:2a:e2:18:70:38:9c:bb:b7:6c:e4:df:68:4b:e6:
84:41:2e:ae:85:c5:2c:ec:d3:13:00:e6:75:59:3b:
6b:a3:17:14:d1:ee:af:e1:27:20:09:2f:d9:a0:8d:
86:4b:17:05:f2:36:e6:27:3f:8e:eb:5e:68:00:d4:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:51:A3:2E:85:99:BC:0B:23:FB:8C:2A:CA:E3:54:FC:A4:C4:C8
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8f:5e:da:b5:98:ab:6d:82:3d:c0:08:28:c3:08:87:42:aa:
e5:ec:83:a8:17:7d:83:2b:c9:e7:b0:28:88:eb:ba:81:85:61:
98:b9:f8:cd:b3:90:32:c6:fd:d9:24:1f:31:fd:2b:93:06:58:
c5:bc:12:09:41:77:e4:b3:7a:8a:c5:86:bc:34:3f:96:21:bc:
6b:85:ca:67:df:f2:84:26:e2:b7:cd:00:7a:f0:88:24:a9:37:
70:98:c6:8b:16:13:fe:0b:63:e4:c9:3c:f1:be:1f:da:31:27:
30:44:33:61:00:63:2b:8e:3f:fb:db:19:fc:09:80:dc:60:f5:
c1:a8:44:96:80:53:5a:77:da:6e:df:72:c0:76:5d:2e:c1:b4:
64:b2:42:cb:51:b9:78:1b:9c:05:d7:8a:b7:70:24:7c:a6:e1:
da:9f:66:4d:80:bd:81:cc:76:63:5e:5b:ca:3c:0b:42:63:ee:
38:95:76:55:de:fa:d0:59:b7:90:ec:e8:40:c1:51:a4:22:5f:
e1:78:fb:16:30:21:26:54:e8:3a:db:bc:30:d4:ad:ac:50:ae:
f6:f5:61:f2:3d:e7:d5:ad:5a:b0:f9:fc:b9:e5:5e:65:6b:64:
5f:62:8c:b4:28:e8:9a:50:2b:9a:6a:94:ee:4e:d5:e2:21:75:
6c:95:26:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:08:35 2026 by rpki-client