Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/bf8155-eff7-4e81-8959-65baad255b26/1/8gWiOU6PYnV91ooJe3Q2mGM5wcs.mft
File: 8gWiOU6PYnV91ooJe3Q2mGM5wcs.mft (raw, json)
Hash identifier: VFbfF/WoLObyrO38JIqqM3SQyQdA/gunYJsk51ctzIE=
Subject key identifier: DC:95:FA:2C:8A:52:97:70:F3:43:A0:43:50:0E:E3:D5:8F:C7:13:D0
Authority key identifier: F2:05:A2:39:4E:8F:62:75:7D:D6:8A:09:7B:74:36:98:63:39:C1:CB
Certificate issuer: /CN=f205a2394e8f62757dd68a097b7436986339c1cb
Certificate serial: 01A0CF6D88CD293B80660C4F84EF30390E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gWiOU6PYnV91ooJe3Q2mGM5wcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/bf8155-eff7-4e81-8959-65baad255b26/1/8gWiOU6PYnV91ooJe3Q2mGM5wcs.mft
Manifest number: 4F
Signing time: Wed 23 Sep 2026 18:00:57 +0000
Manifest this update: Wed 23 Sep 2026 18:00:57 +0000
Manifest next update: Thu 24 Sep 2026 18:00:57 +0000
Files and hashes: 1: 8gWiOU6PYnV91ooJe3Q2mGM5wcs.crl (hash: ld1E2Hyug4iV8o630FQL5cvr+mlz2bSn2XMzgdE8bqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/bf8155-eff7-4e81-8959-65baad255b26/1/8gWiOU6PYnV91ooJe3Q2mGM5wcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/bf8155-eff7-4e81-8959-65baad255b26/1/8gWiOU6PYnV91ooJe3Q2mGM5wcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gWiOU6PYnV91ooJe3Q2mGM5wcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:88:cd:29:3b:80:66:0c:4f:84:ef:30:39:0e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f205a2394e8f62757dd68a097b7436986339c1cb
Validity
Not Before: Sep 23 18:00:57 2026 GMT
Not After : Sep 24 18:00:57 2026 GMT
Subject: CN=dc95fa2c8a529770f343a043500ee3d58fc713d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:e3:89:07:85:a5:76:09:9b:ba:53:ce:44:
5e:7b:c4:ae:71:86:64:15:0d:8e:41:65:8b:a2:1d:
35:f4:61:73:59:2c:21:d2:89:39:26:c0:74:d7:67:
a2:97:99:ac:47:57:52:91:c3:71:86:6f:f3:80:d6:
22:27:61:66:67:0d:bc:25:ba:0b:8e:e3:49:4b:b0:
3d:b5:c2:8e:75:23:55:86:10:9a:56:51:a4:2a:90:
f4:54:25:09:19:30:5f:a2:40:72:39:27:43:bf:19:
91:a7:c2:9d:b2:f7:46:5f:aa:99:45:1f:5d:5b:e2:
06:11:d7:19:65:06:ee:27:19:10:7f:1d:6f:a6:d4:
33:cf:2a:7b:2c:03:6c:88:99:1d:5a:c6:8e:5d:72:
43:3a:36:56:33:cd:2f:4c:3e:b4:d5:e5:de:03:84:
c5:ed:da:00:b6:d0:ff:77:13:b6:6b:c4:b4:0a:43:
fa:e7:fa:1f:07:b2:ea:d2:ec:21:56:e9:5c:49:2d:
ae:6f:4c:9a:6e:4e:e3:98:56:e6:2d:5c:42:82:7e:
d1:a9:93:12:a6:73:67:9a:2d:56:97:b8:ea:16:55:
f0:09:77:a9:24:b7:f0:a9:09:30:01:27:2e:67:ca:
d3:01:ce:85:c8:28:d5:bc:bb:81:64:5d:cc:e4:ec:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:FA:2C:8A:52:97:70:F3:43:A0:43:50:0E:E3:D5:8F:C7:13:D0
X509v3 Authority Key Identifier:
keyid:F2:05:A2:39:4E:8F:62:75:7D:D6:8A:09:7B:74:36:98:63:39:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gWiOU6PYnV91ooJe3Q2mGM5wcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bf8155-eff7-4e81-8959-65baad255b26/1/8gWiOU6PYnV91ooJe3Q2mGM5wcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/bf8155-eff7-4e81-8959-65baad255b26/1/8gWiOU6PYnV91ooJe3Q2mGM5wcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d8:72:79:22:40:aa:15:0d:57:bf:9f:a2:10:38:29:26:23:
0e:ec:5b:aa:de:9e:4b:52:ad:dc:6d:ab:82:7c:90:e0:66:40:
88:cd:1a:ec:fa:12:85:03:97:3f:32:58:82:6d:ab:76:c4:9e:
a0:55:c5:17:c7:b1:ca:d8:e8:a3:58:e4:53:7d:43:ee:72:86:
b3:f4:8f:bf:18:56:5a:99:3f:a9:a3:a4:4d:e7:4d:99:9e:ef:
1e:d7:64:f2:f9:fe:e6:c2:65:8f:7c:14:e3:b6:16:f8:90:c6:
b6:84:30:84:e3:c2:50:92:28:d0:27:34:3e:61:3b:aa:99:86:
80:cd:73:46:d0:18:03:89:2b:00:f5:85:47:12:4f:78:f0:b3:
12:f2:89:21:99:72:c2:ed:99:1c:2e:17:8f:b9:be:b1:06:74:
60:db:99:36:c8:c6:64:ec:ca:4c:6e:45:20:33:93:5a:94:f2:
fb:56:84:90:42:53:5b:22:04:68:cf:49:ae:9f:6a:50:9d:e8:
3e:e5:f0:f1:f3:21:6e:78:a6:0c:e0:97:83:36:28:72:5a:12:
fc:da:dc:3a:27:d7:1a:4e:8d:06:d4:d5:71:5c:a6:db:44:4c:
8b:89:63:88:7f:e2:e2:11:69:55:f1:8d:dc:a5:c8:84:24:fc:
c2:27:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:49:27 2026 by rpki-client