
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: QPfRFSCKQgNGMmSuco48nLXeLiCr1kEx1yNW3lXg35o=
Subject key identifier: D4:06:39:D6:99:13:6D:DB:C6:FB:71:D6:96:CC:AF:6E:5F:39:CC:59
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 01A0EAAE666F75FBCBDAB86C2000AA9DD7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 1719
Signing time: Tue 29 Sep 2026 01:01:32 +0000
Manifest this update: Tue 29 Sep 2026 01:01:32 +0000
Manifest next update: Wed 30 Sep 2026 01:01:32 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: jAXB7H4dfmbCy8eXwEH6vq8i95zel/twTEkgLX1Y29w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:66:6f:75:fb:cb:da:b8:6c:20:00:aa:9d:d7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Sep 29 01:01:32 2026 GMT
Not After : Sep 30 01:01:32 2026 GMT
Subject: CN=d40639d699136ddbc6fb71d696ccaf6e5f39cc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:1c:74:c7:19:46:dd:5b:50:93:da:7c:96:
e9:70:ef:6a:4f:bf:5d:09:2e:6e:cc:60:11:9d:18:
56:af:52:7e:23:9a:13:f5:c3:df:56:7a:74:7a:e6:
20:64:f6:f7:1a:fe:0d:5c:7f:3f:c7:7b:26:d6:4d:
70:2e:9a:45:99:81:35:fe:44:87:5d:96:cb:51:1c:
ad:f3:be:4a:7f:fa:42:2a:f9:82:b5:16:2a:2e:5c:
68:8a:57:13:b0:40:09:7d:c8:d0:b9:43:09:06:0f:
8c:5e:34:4e:ec:03:70:5b:6b:60:a7:aa:cf:7f:5e:
75:8f:47:e8:5a:49:ed:09:e7:47:24:a8:98:5e:da:
32:7d:da:f3:ce:bc:f5:0d:3f:f0:f5:71:e7:bf:d3:
2b:9e:50:a7:4d:5e:26:fe:e3:4a:d7:a4:a8:5c:81:
b6:5a:51:fd:33:b4:4e:c1:2a:73:4e:11:de:b1:f8:
fd:bb:9d:b2:89:d7:46:31:2e:dc:f8:1b:94:4e:12:
33:f0:2a:17:3b:7f:95:f1:66:fb:15:c3:de:61:2b:
72:e7:d8:d3:13:f5:b6:22:ca:66:c4:3f:16:0c:5a:
e8:4c:5b:92:19:d7:81:7c:ce:6c:70:32:b2:30:90:
22:f5:86:67:ff:6f:64:14:9e:8f:15:bb:86:34:d8:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:06:39:D6:99:13:6D:DB:C6:FB:71:D6:96:CC:AF:6E:5F:39:CC:59
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4a:0e:f9:6c:9b:f8:ac:da:29:7e:cc:47:45:6f:a6:c6:66:
c3:ac:e3:0d:3f:bd:d0:4a:c3:97:9d:8f:bf:e4:22:5f:ff:e3:
95:23:fb:0f:b4:8d:5a:4f:b6:6a:1f:0f:f0:9e:12:6b:a1:2e:
ff:e3:30:c2:15:fc:f7:2a:0c:e1:43:10:26:17:3c:3e:a5:a6:
a7:29:ff:5e:2e:2e:41:49:bf:ac:ed:d4:f0:43:16:6f:7b:19:
ed:d2:df:78:ac:f3:dd:60:63:50:24:7e:69:ab:50:ca:4c:2e:
65:98:3c:c8:74:ea:0b:d7:2d:99:10:e4:8e:59:e3:d3:94:65:
f2:ab:82:76:55:69:93:03:a5:73:2c:fa:72:b0:a6:f5:89:4a:
62:ed:76:b8:ed:67:5a:a9:17:38:44:86:2c:fb:bc:a5:d0:c5:
1b:0d:95:32:1e:b4:bf:c2:fe:41:8a:87:35:6d:56:62:ed:81:
19:3a:49:7c:fd:5e:25:87:7c:1b:e5:c9:8c:ca:59:91:a6:af:
7c:9e:04:29:bf:b3:a0:da:f2:6d:19:c7:6a:0b:c7:8c:3e:29:
ab:15:c9:c5:fc:98:53:d5:3f:eb:94:ba:e0:8e:80:4b:4c:e6:
2b:4a:95:7d:8b:c8:21:c5:ca:4e:a2:d8:a0:5d:27:85:d4:47:
f1:05:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 07:32:39 2026 by rpki-client