Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
File: 8XUAF9wNk26aoWaTGTffeJKv6fE.mft (raw, json)
Hash identifier: Y815B4O5Kr17N0zQ23iEOQG2HH8qrpBoRzNk1FNtl1U=
Subject key identifier: D5:EB:7F:FF:A1:59:33:5E:25:06:FD:CC:C3:85:48:3C:DE:B8:BE:77
Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
Certificate issuer: /CN=f1750017dc0d936e9aa166931937df7892afe9f1
Certificate serial: 01A0CB594978955769B8A7DF716F49A3DB73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
Manifest number: 0437
Signing time: Tue 22 Sep 2026 23:00:21 +0000
Manifest this update: Tue 22 Sep 2026 23:00:21 +0000
Manifest next update: Wed 23 Sep 2026 23:00:21 +0000
Files and hashes: 1: 8XUAF9wNk26aoWaTGTffeJKv6fE.crl (hash: VF7kHERrpmu6ZmJfaoRSJoV6e7ydskOFeAeUE4gzr3c=)
2: RJmo5W4f9aoT7fFDQ3yD2RKwAac.roa (hash: IZ2vUVo1okHZdVGuQKYV71GbDyxma+mzCV0u8e3RDcE=)
3: zkLVUigEz4LNZ2zhuWJBHwJfHuo.asa (hash: PXcCM5Lh6x9uec+divpobIpUSKP+kseMCox7ZsGLoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:49:78:95:57:69:b8:a7:df:71:6f:49:a3:db:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1
Validity
Not Before: Sep 22 23:00:21 2026 GMT
Not After : Sep 23 23:00:21 2026 GMT
Subject: CN=d5eb7fffa159335e2506fdccc385483cdeb8be77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:49:c1:48:bb:64:cf:0d:c6:1c:af:77:87:
03:e2:26:30:5a:3e:bf:35:8a:34:b1:49:b6:00:0f:
de:0e:a7:84:43:3c:b9:1c:4c:01:08:db:05:71:ab:
e1:fa:f3:a3:71:e6:f0:12:1b:ab:53:34:15:1a:ea:
20:c0:11:ab:7f:c5:c7:94:78:24:ca:6a:61:9c:ed:
c0:69:3d:80:a9:e7:cd:7c:9a:7e:69:15:24:a3:64:
fa:71:fd:28:5c:40:27:09:c9:f4:71:fd:00:cc:f9:
c2:a7:f7:16:7a:0a:3c:e9:63:8c:1b:bb:f9:df:05:
cf:f9:f5:0c:0c:a3:c3:f5:0f:c7:30:c2:1d:1f:08:
44:06:fd:13:26:29:1a:20:e2:d6:d5:18:b5:10:9f:
a4:a7:d7:70:b7:13:96:1c:93:bc:8e:e5:7e:e7:8d:
9a:02:45:d9:c2:cf:64:b0:69:bf:5d:79:e8:12:4e:
b9:40:9d:fe:f2:b0:75:a4:8b:8c:59:8f:93:3d:61:
ff:6b:c0:77:e3:9b:89:07:25:56:58:6d:b2:07:ff:
4f:c3:d1:48:3b:4d:f8:8e:43:40:b3:de:2c:c2:76:
95:c8:64:d6:46:c8:1a:e4:4c:6e:c7:bc:10:dd:bb:
64:92:28:4e:fb:8a:61:03:05:c3:1b:ae:76:af:fe:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:7F:FF:A1:59:33:5E:25:06:FD:CC:C3:85:48:3C:DE:B8:BE:77
X509v3 Authority Key Identifier:
keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:df:8a:00:04:db:fd:68:b6:c8:f2:84:a3:b9:c8:73:0b:83:
5f:80:93:ea:15:db:c1:4b:ba:b2:d2:56:6b:ca:97:8f:e6:d3:
38:6e:77:81:8a:86:34:b6:d5:fe:ce:aa:ea:0c:0b:71:50:db:
cb:54:10:b9:ab:84:a5:a8:75:e0:51:c0:47:30:87:2f:b5:b6:
76:08:d1:7d:31:1c:7a:bc:6e:34:06:f7:9e:72:97:da:c9:09:
aa:df:0f:4f:e2:80:0a:8a:4e:bf:ce:39:a2:6d:df:14:0b:1f:
9f:24:0c:a4:3d:2b:68:84:cf:32:c2:42:dd:b1:36:c3:97:98:
ec:5d:ce:c8:f3:00:67:f7:46:fc:1c:44:ce:78:2b:f1:b6:af:
42:5a:5e:7f:e3:a4:fc:fd:47:87:0f:08:ba:d1:01:6b:f8:d5:
e7:4e:82:5d:90:b9:51:d5:b4:53:1d:03:73:77:3b:f1:70:9e:
e1:2b:f6:17:1a:7c:2d:40:d1:93:4b:48:9e:a3:4f:c9:af:a1:
9d:c4:b2:aa:27:e5:ad:c0:2f:02:7b:53:35:0f:d7:03:b8:c6:
ae:f0:16:a4:4f:a7:e3:5b:f6:a9:7f:43:30:f4:08:4a:fa:ae:
43:0f:4d:38:28:29:07:06:36:e8:6f:70:79:a1:e1:bd:84:39:
99:50:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:07:31 2026 by rpki-client