Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: qbwoXw6hLI5ayykHPynKYYYepaYTSfg6asOoad/n08s=
Subject key identifier: 2B:5D:70:C9:9D:F3:2E:12:5A:59:F7:BE:5A:5B:B8:71:AA:E2:02:51
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 01A0D34AFE1E6A1F3583A6715BD1F6707A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 09EE
Signing time: Thu 24 Sep 2026 12:01:42 +0000
Manifest this update: Thu 24 Sep 2026 12:01:42 +0000
Manifest next update: Fri 25 Sep 2026 12:01:42 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: 7Mf1DtnX658EWOJx0R2c6+S1tfHFOznBlO1oyQwa+fg=)
2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:fe:1e:6a:1f:35:83:a6:71:5b:d1:f6:70:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Sep 24 12:01:42 2026 GMT
Not After : Sep 25 12:01:42 2026 GMT
Subject: CN=2b5d70c99df32e125a59f7be5a5bb871aae20251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:b1:af:ce:94:e0:70:d8:84:37:82:85:c3:
eb:57:ec:86:6f:9a:52:8f:bf:64:e8:85:a9:e5:69:
1a:d9:c8:26:d2:dc:a4:c4:16:91:31:35:30:ca:ef:
c9:e2:fd:20:df:d5:a5:05:85:f6:ec:59:ef:79:a7:
c6:28:88:52:56:83:97:7f:ce:ee:b1:31:51:3e:03:
b0:dc:57:50:b0:fd:97:34:87:98:dc:99:c5:95:14:
0c:91:7e:3a:93:55:71:70:9e:b5:86:d1:f1:b3:a6:
14:cb:a2:0f:6b:a2:31:46:f0:c5:f8:82:a9:03:7e:
65:47:28:63:e5:01:77:d7:9e:b2:e9:f8:48:8a:26:
d2:11:c9:84:8d:76:3e:4c:68:7f:bb:75:7d:44:d6:
61:cd:a6:14:81:80:66:5d:cb:f4:fe:13:dd:f7:18:
f9:89:6d:65:a5:a9:f4:a9:48:66:d0:ce:63:c4:fc:
01:c1:a0:90:bd:0e:ac:c5:f9:b9:b3:41:10:5b:c2:
4f:6a:23:23:c5:e5:18:e1:39:79:d2:60:48:52:57:
67:23:34:bc:1a:c8:e5:37:e7:d2:57:1a:8c:c1:cb:
fa:13:b8:71:80:2f:80:c8:7b:b0:f7:43:01:f4:e0:
b2:34:f7:9f:f3:b5:57:1c:8d:88:82:7a:8c:f5:86:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:70:C9:9D:F3:2E:12:5A:59:F7:BE:5A:5B:B8:71:AA:E2:02:51
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0c:02:a7:65:06:98:ab:38:13:9f:2f:fa:17:6b:ce:51:10:
88:e7:07:38:bb:e1:33:ab:69:3d:85:91:f1:99:0d:d3:45:f0:
22:db:65:c4:17:25:7e:ba:17:d4:bf:5e:74:83:eb:a9:42:a5:
3d:85:00:3c:ef:d3:a6:84:19:84:22:ba:9d:1c:96:9e:2c:4d:
98:80:7d:7f:9e:b3:b6:22:62:ac:37:3e:3e:2b:e4:a1:2c:44:
cf:82:ce:5c:af:31:97:09:50:71:1b:f8:a1:ae:6d:a0:22:e0:
63:b6:4f:c9:c3:8f:8d:36:e5:95:1a:fe:2a:5d:78:1b:04:78:
4e:76:22:56:0b:c5:5d:c7:eb:00:d5:72:9c:29:6f:e7:15:b9:
3e:5b:0d:d5:73:2c:31:6e:cd:5f:bc:68:78:99:1d:45:f3:7e:
d4:f4:fb:30:62:52:71:bb:64:27:d5:66:9f:17:e3:c5:af:f1:
49:27:39:85:dc:0a:81:3d:43:a5:92:1b:b1:56:f5:97:f0:83:
14:fb:d0:54:c5:f3:f8:af:db:ae:27:5e:2b:c2:00:0b:46:30:
6d:2f:f4:d2:b3:6b:b5:61:ec:2b:7a:3a:7d:50:86:da:23:f1:
bc:1f:60:79:a3:d3:f4:cd:98:9d:e7:1f:ae:a4:eb:54:d6:f8:
78:57:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:35:47 2026 by rpki-client