Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: gYHP0GWm/xp74tG6QqyOSgDbjfRWhN7Inm9iplZm93I=
Subject key identifier: 5B:CE:A8:A7:BD:E5:A8:72:85:70:54:A9:8F:87:E8:96:12:08:75:77
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 01A0CB9072C570369A8CE4AFBC7FF90668E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 00:00:36 +0000
Manifest this update: Wed 23 Sep 2026 00:00:36 +0000
Manifest next update: Thu 24 Sep 2026 00:00:36 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: AUK1MRlV7m0ZPQYf9czu4Z8nhPFrJOwOalvF86Nffsc=)
2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:72:c5:70:36:9a:8c:e4:af:bc:7f:f9:06:68:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Sep 23 00:00:36 2026 GMT
Not After : Sep 24 00:00:36 2026 GMT
Subject: CN=5bcea8a7bde5a872857054a98f87e89612087577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:0f:89:2f:5d:fc:ad:53:3d:22:f3:35:09:
36:8f:b7:a6:6d:ea:d6:32:92:51:ce:39:01:bb:02:
84:e3:47:0e:0c:d3:e5:5f:b4:ba:54:1d:12:52:e6:
b1:87:cf:d4:69:f2:82:d6:68:68:13:68:52:b2:71:
66:da:3b:2d:c2:ec:1a:45:5c:90:db:c1:84:b2:28:
bc:7d:52:3f:3c:6b:38:1f:90:18:a3:bb:18:b1:d0:
fd:33:72:97:9d:f2:d7:43:cb:a5:b5:da:8c:90:41:
f8:31:7b:a7:7e:a4:a7:ce:bf:e8:53:15:bd:d7:e5:
36:31:3e:bf:4c:56:00:25:ec:2b:e5:d7:f0:56:4b:
d4:c3:10:44:2a:14:7e:d8:f1:ac:05:93:e8:e9:aa:
6f:c5:61:fc:72:dd:91:09:62:83:62:ca:d6:16:81:
c0:03:b8:98:16:5a:15:c3:d1:4e:98:73:e4:ba:61:
39:da:2f:83:a6:54:da:ea:e2:83:ed:d0:b4:17:5f:
0c:93:b8:18:b9:08:84:77:0c:8c:71:6b:53:5e:39:
05:a9:c4:be:65:2f:6c:d3:86:52:be:1b:59:03:75:
ae:bd:3d:a9:3d:c5:a9:64:ee:1b:53:83:e6:2d:90:
69:b8:94:ba:9b:05:40:2c:02:1c:f7:1f:c8:2d:73:
75:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CE:A8:A7:BD:E5:A8:72:85:70:54:A9:8F:87:E8:96:12:08:75:77
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6f:bf:32:b5:fe:28:f1:32:7e:9a:2b:74:21:a5:b1:08:f1:
8f:39:6e:96:9d:6d:1c:dc:77:98:70:76:84:5b:6a:22:a4:1e:
cd:30:63:33:ac:d6:36:c2:64:44:53:d1:b9:df:eb:58:67:14:
92:4e:42:76:0f:29:97:6a:6d:22:f0:e0:be:c6:e2:47:76:49:
e5:91:73:dc:11:b4:e5:1b:67:72:e2:64:15:0b:d3:63:56:86:
23:fc:d8:37:6b:82:86:d3:c6:b9:61:4c:0e:03:48:c9:8c:c4:
98:83:3b:70:54:d8:18:49:c9:26:ab:7d:96:72:d2:4d:0b:82:
66:81:d5:06:66:63:41:28:00:0f:0c:a4:77:ad:e8:2e:64:33:
97:4e:08:6e:70:2d:14:93:ee:38:d0:6f:c3:26:1a:a2:33:29:
bf:d8:01:d2:4e:8b:8d:31:ba:44:b9:40:6d:74:9c:3d:dd:88:
66:41:61:d0:3d:bb:15:ff:a1:03:4c:8b:2e:9a:bf:74:06:83:
66:75:7d:30:0b:c2:f8:72:ea:af:53:e4:2a:6e:dc:e0:cf:75:
2f:35:b7:98:5e:13:dc:9b:ee:f8:9f:5b:38:d1:fd:55:ad:63:
91:3b:31:26:ab:17:ea:c3:3d:c1:3d:b7:1a:6f:e8:9b:ee:a2:
d3:25:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:37:09 2026 by rpki-client