Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: JIotjcX5Q6VRkgNqhB/TcvaKb/6RDi/mh3FLWIxqW6c=
Subject key identifier: 5A:0C:D2:9A:68:C7:51:34:5D:97:DA:F0:1C:7F:61:C7:FB:D5:90:9D
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 01A0D15BD034E1F07DE81B52D45B163CD651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 12FE
Signing time: Thu 24 Sep 2026 03:00:50 +0000
Manifest this update: Thu 24 Sep 2026 03:00:50 +0000
Manifest next update: Fri 25 Sep 2026 03:00:50 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: E+8L4QmQinNIFErXDaLWTB3WnBrQZxElC4fhjNyDFQ0=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:d0:34:e1:f0:7d:e8:1b:52:d4:5b:16:3c:d6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Sep 24 03:00:50 2026 GMT
Not After : Sep 25 03:00:50 2026 GMT
Subject: CN=5a0cd29a68c751345d97daf01c7f61c7fbd5909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:62:6b:f6:e0:9e:7a:bb:02:64:5e:1b:af:
43:9a:c1:7f:1a:d9:ad:61:ee:d9:43:c9:87:99:bb:
46:3b:f4:ae:f9:af:f0:d5:eb:a5:f4:29:54:48:4c:
fe:05:08:a0:c3:b4:20:e2:83:fa:13:8b:c1:ac:c0:
04:3a:3b:3d:b6:a1:4a:d1:51:55:fb:13:b8:61:5d:
86:89:7c:70:6b:ea:cc:72:60:48:19:e3:ed:f5:d7:
73:58:4e:36:77:8c:04:ce:cb:23:d1:e4:08:51:f2:
68:07:13:b4:7d:a8:b5:fc:00:26:86:58:fe:e8:f5:
53:41:9f:75:f3:21:63:9f:c7:a7:55:df:2b:e8:ae:
0b:3d:cb:0c:e0:61:b4:05:12:12:0d:45:64:fd:d1:
e8:28:54:80:68:55:29:1f:dc:b7:52:b3:d4:d2:a7:
a6:3c:5f:3b:8a:3c:3a:d6:8a:e1:ca:2b:61:19:27:
3a:25:c9:9d:e0:c3:3c:c5:3c:ca:a4:b4:99:10:26:
f1:b1:89:d1:0e:f1:02:8a:95:71:70:bc:ac:23:a6:
2b:1d:7f:36:e7:ac:f8:df:47:7b:f5:c5:21:77:fc:
85:99:ce:6d:8a:e5:1a:ab:0d:5c:e7:b3:35:7d:34:
cd:a6:0b:98:53:f9:15:a5:30:20:a9:10:d7:ca:c2:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0C:D2:9A:68:C7:51:34:5D:97:DA:F0:1C:7F:61:C7:FB:D5:90:9D
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:13:23:08:41:c6:50:df:45:9b:2e:5a:8b:89:9a:37:bb:c1:
cc:ef:03:4f:56:09:eb:58:24:4c:b8:49:c0:2e:f1:99:06:92:
56:89:b3:b3:a5:f4:00:09:54:fa:c4:77:78:11:f4:7b:e1:26:
7e:57:0e:f5:29:6f:0b:54:4f:d5:ee:7f:8c:34:ba:9a:e1:6a:
e6:e3:60:76:47:ef:ae:23:a6:0b:80:3d:71:d0:af:21:b8:43:
a9:9a:f6:2e:d3:cf:51:6c:4b:d5:7d:c3:0e:e0:ed:f1:34:df:
bc:90:4c:a0:c2:88:18:19:e1:8e:9f:19:a2:15:4c:d2:b0:89:
bb:9d:d0:a3:73:ef:c7:0f:ce:98:66:ba:6d:4a:0d:90:d3:a3:
52:da:a8:1d:aa:f4:e2:59:25:f9:44:41:03:28:7d:8e:b7:e1:
51:fa:05:c5:49:75:7c:ba:64:9c:0a:d7:66:f3:9c:fe:a4:b0:
ce:f4:d3:3d:d4:83:08:09:41:0a:00:b4:90:5d:bb:3f:6e:78:
27:9a:c2:09:2a:53:14:52:3c:c9:e3:fc:9c:9d:fc:62:b8:ee:
41:e9:a1:8d:59:2e:c1:d2:8c:43:1f:74:31:9f:06:09:17:85:
8d:72:77:ed:51:ac:e5:5b:6b:d5:62:a1:fb:70:33:75:13:73:
6a:9a:ba:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:41:36 2026 by rpki-client