Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: Aed/RQDXHkZjpRTe5RGJBpl4A16XelwGqCZp8FlfT6c=
Subject key identifier: 70:77:FB:89:15:BE:0A:08:CB:54:11:4B:EE:6E:DD:55:DB:59:37:CB
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 01A0D5395C56FF25037E166C3A26BBEAF596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 11DC
Signing time: Thu 24 Sep 2026 21:01:41 +0000
Manifest this update: Thu 24 Sep 2026 21:01:41 +0000
Manifest next update: Fri 25 Sep 2026 21:01:41 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: 4RGotr+fjD4W4k72laoghF0AViuO0sDIcb7ZkZOJ/zY=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:5c:56:ff:25:03:7e:16:6c:3a:26:bb:ea:f5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Sep 24 21:01:41 2026 GMT
Not After : Sep 25 21:01:41 2026 GMT
Subject: CN=7077fb8915be0a08cb54114bee6edd55db5937cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:eb:8c:63:84:6b:6d:5c:7c:73:38:9e:16:
7d:33:53:1a:36:93:7e:72:8b:2b:f6:cb:d0:fc:0e:
89:84:fc:2a:77:3f:0c:fc:cc:9a:21:f1:61:3f:08:
8d:44:a4:91:e1:ac:b8:c7:3d:bd:64:4d:a6:c8:d2:
7d:b9:ef:3f:9d:39:a2:91:50:4c:64:96:f4:9a:f6:
c7:e0:7a:7b:8c:79:6f:c7:f2:25:ce:52:70:86:f0:
20:64:e1:1d:ae:85:3c:85:71:0f:ee:20:49:2b:08:
6d:98:e4:6a:45:15:75:af:10:f3:25:81:eb:03:3d:
22:ca:48:76:ab:1e:5a:00:87:58:71:64:2a:57:ed:
0b:ab:3a:e1:fc:8b:4d:5c:bc:e0:e4:a5:cf:33:7b:
03:38:76:9e:0d:af:0a:22:6e:16:19:27:7c:f8:7f:
0c:8e:ba:19:af:44:a0:3d:c9:39:77:92:64:72:ed:
1c:8b:79:f0:7c:39:1f:67:21:29:17:95:27:6e:0c:
73:8b:92:68:9c:24:4f:98:1f:e9:52:b0:9c:67:fa:
dc:55:55:6f:5d:e6:f0:09:b0:a0:87:37:d4:6d:26:
b3:4b:1d:36:a0:bb:80:4d:65:64:f0:1b:5b:60:a9:
ef:1a:fb:d6:de:36:a6:91:fb:7c:b6:fc:5e:c0:fa:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:77:FB:89:15:BE:0A:08:CB:54:11:4B:EE:6E:DD:55:DB:59:37:CB
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:14:b1:6c:c4:f8:09:8d:40:48:a8:2c:2a:18:6d:5a:8e:77:
c7:19:8d:61:df:04:c6:a2:2a:02:56:93:38:39:3a:09:2a:92:
a9:a5:ae:91:6c:b0:09:7e:8c:7f:18:8e:4c:7e:ac:c7:9e:a7:
ef:6a:05:ba:e4:d6:60:02:e7:ae:1e:be:d7:64:a3:01:1e:91:
92:10:64:f2:3b:59:91:ca:15:47:fd:02:00:8b:4f:e6:bf:1d:
bf:35:c5:4e:f6:aa:2f:8e:d8:04:31:34:8e:b3:5f:54:c3:46:
4b:27:89:fe:25:22:7a:98:aa:68:71:cc:fe:8c:4a:89:54:bc:
a5:f3:bd:3a:79:cc:15:71:92:19:e1:c0:7e:81:ac:4d:17:4d:
ff:79:50:a4:90:cd:93:69:b4:04:40:e3:ab:12:41:81:e9:8b:
66:82:f0:f1:b8:e7:44:db:31:3e:6d:4b:df:93:02:21:24:6f:
4f:5b:33:ee:fa:93:f4:3a:25:fb:66:2e:da:28:0f:fe:6f:c5:
0c:d9:52:12:b6:40:5f:e6:19:38:1b:be:c0:d2:ee:64:54:7e:
86:e2:f1:0f:f1:8e:35:fa:37:97:7d:0f:8a:a4:cd:72:25:34:
95:ba:27:3b:39:25:3f:15:d9:0b:8d:6d:c9:ee:a9:0c:de:45:
99:16:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:22:49 2026 by rpki-client