Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File: 8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier: JwcgzaZ+X5c5zgHHXKdNP7SVWY2Y8D9WKaRGy5J3Fog=
Subject key identifier: 4F:41:73:7E:73:E5:2F:40:49:26:80:68:C2:1E:7F:B3:E8:AF:05:3C
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 01A0D50208905A549296EB8A0D37D9A72F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number: 0536
Signing time: Thu 24 Sep 2026 20:01:15 +0000
Manifest this update: Thu 24 Sep 2026 20:01:15 +0000
Manifest next update: Fri 25 Sep 2026 20:01:15 +0000
Files and hashes: 1: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: WKIvpYPl1kuySFoPbshWzwiwIrDcqYoKoHdjHPdX7b8=)
2: WYwz05XWytebFaVA_u49sTXq4vA.roa (hash: Ji40cgBzh5DAGJwSZnJu29tUWR5tPtn/hQZygjSqJ/g=)
3: k2qy4H1iATX3ljyTKxCT8RsgkE0.asa (hash: SHwlY+KbvB0ejHAvGpMfuyoAa/T8eGhpsnZ00cd3GgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:08:90:5a:54:92:96:eb:8a:0d:37:d9:a7:2f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Sep 24 20:01:15 2026 GMT
Not After : Sep 25 20:01:15 2026 GMT
Subject: CN=4f41737e73e52f4049268068c21e7fb3e8af053c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:52:19:54:3e:de:8a:ae:11:e4:94:fb:31:
6e:b5:31:ad:95:eb:88:7a:83:09:ea:c2:cd:52:5a:
5e:29:d9:3e:c0:3e:1b:55:b4:b8:e4:8d:10:db:2f:
d2:d5:db:89:e9:41:2b:2a:3d:46:d6:84:ee:10:c2:
11:bd:4f:e8:bf:9e:9e:6d:d6:78:70:da:4b:a8:52:
2e:4e:4a:88:b0:91:f4:61:b0:a7:4b:45:e6:48:ee:
03:4f:bc:4a:3e:6c:36:0c:d5:5a:82:64:55:f0:49:
aa:eb:0a:b9:9a:25:25:f4:88:5f:3a:18:71:9e:1d:
2b:4e:e5:20:83:c6:ab:fe:21:7b:81:cb:62:1b:da:
70:99:65:04:d0:59:da:dc:ca:27:bd:ed:87:69:50:
3e:37:eb:cc:59:63:b5:3e:57:d5:e9:cf:4b:6b:ae:
a7:6c:64:38:e1:db:77:2a:96:72:ef:13:8e:ac:49:
0b:1f:59:7d:aa:54:15:c2:da:ff:c3:02:3d:8f:a2:
16:76:92:db:98:96:6f:7f:2e:95:74:dc:6c:ed:98:
4a:af:2b:db:20:3e:85:41:bf:56:7a:fd:fc:64:3b:
8d:8f:18:28:d3:b8:bd:c2:f6:69:8a:d9:88:93:7b:
aa:65:42:d5:6f:25:be:1b:5b:74:3a:56:25:f8:21:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:41:73:7E:73:E5:2F:40:49:26:80:68:C2:1E:7F:B3:E8:AF:05:3C
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:26:8c:bb:02:ff:97:b6:16:23:1e:bd:7b:0c:d4:13:4b:b6:
36:09:6a:d5:0a:5f:8e:a5:93:9c:55:db:d0:d4:cf:1c:38:b5:
b6:43:f4:47:d1:3c:22:69:e5:f5:1b:28:47:bb:a5:20:df:2a:
3a:3b:30:c6:de:73:bd:9a:5c:c1:0e:0c:fe:1e:52:be:ea:61:
3d:be:5f:b2:76:b4:89:5d:68:f0:fa:17:b2:6d:5f:fb:e7:a9:
9e:45:eb:25:ed:35:bc:e9:ed:6e:c6:f7:3f:b0:ff:eb:65:fc:
6f:9d:b6:33:76:a2:6d:ae:00:0b:b9:da:60:d3:cd:2f:bf:da:
03:5a:8a:17:75:df:a7:28:be:5a:7d:4f:d7:6a:4a:c3:f3:00:
df:9c:10:a0:81:45:d5:90:d6:01:ad:ae:35:6f:34:24:c9:13:
08:a0:bf:9f:86:e3:6d:bd:06:b2:e1:74:de:77:bc:03:c5:bb:
e6:82:50:69:92:3d:f1:05:ca:2e:9a:75:01:9c:fa:f0:6f:a1:
6f:4a:33:8a:21:1e:f8:94:31:2b:d7:d3:23:71:9d:bb:69:c1:
a5:c4:fc:d6:7c:46:81:5e:ab:9e:c9:4b:e4:10:ac:4b:d7:9e:
fd:23:50:96:af:e9:00:85:3f:ca:c1:ee:18:c9:2f:5f:c2:a9:
3b:d8:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:31:47 2026 by rpki-client