Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: +Hc5D2pDiBK9rJgCSFT8xBR5vgMs+jIP7C22lADVTjo=
Subject key identifier: CD:74:16:29:3B:33:83:92:24:3D:3E:BF:E7:60:4F:08:03:31:BE:B4
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 01A0DC4D7917E7096B221A0A0C582770EF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 1977
Signing time: Sat 26 Sep 2026 06:00:59 +0000
Manifest this update: Sat 26 Sep 2026 06:00:59 +0000
Manifest next update: Sun 27 Sep 2026 06:00:59 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: ufRaeE8MufeHIakGnMcMGdM47wtf9Iv4mJMzF9W/BoE=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:79:17:e7:09:6b:22:1a:0a:0c:58:27:70:ef:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Sep 26 06:00:59 2026 GMT
Not After : Sep 27 06:00:59 2026 GMT
Subject: CN=cd7416293b338392243d3ebfe7604f080331beb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c0:55:ac:bf:56:0e:17:75:24:4b:62:9f:7a:
0a:da:32:a6:c5:b3:de:63:96:93:15:88:6a:75:e5:
07:a7:23:bb:b1:01:f6:73:85:1f:b2:41:f8:82:28:
10:24:81:ba:03:a5:cd:ea:21:36:b9:40:b7:0d:47:
7c:d3:76:72:20:f0:31:de:4b:24:31:00:b8:9c:2b:
ac:30:6a:7c:b0:af:7c:d1:12:ef:fe:ac:86:d8:c5:
5c:99:7f:ab:e8:5d:57:f0:1a:43:7a:ba:71:c5:c2:
8d:fb:4a:8c:03:62:a5:71:4e:6f:55:c5:88:5c:b1:
41:a3:9f:17:54:26:90:45:71:98:bb:62:2d:58:49:
d7:17:24:d4:cb:c7:bb:22:65:a5:24:d9:c0:37:d1:
63:b1:77:70:ec:c1:7b:0b:62:5a:c0:ce:05:0d:36:
f1:26:fc:4e:fb:83:81:fe:a3:5d:da:c3:d4:33:d2:
86:80:18:48:d7:a1:3d:9b:95:5a:05:fb:35:3a:39:
5f:0b:c3:e3:e3:f7:13:87:59:1c:07:b0:33:c5:64:
ce:01:be:12:12:60:0c:30:a2:5f:76:d8:76:d0:cf:
7f:b5:4d:40:bb:d8:25:a7:cb:d2:02:b4:39:56:72:
ba:d2:7c:f3:87:a9:4d:5a:b8:9b:76:be:60:63:1c:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:74:16:29:3B:33:83:92:24:3D:3E:BF:E7:60:4F:08:03:31:BE:B4
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:80:84:10:82:24:70:de:32:9b:5d:b6:ce:ca:e9:50:d2:4b:
3d:37:1a:7c:2a:5a:02:c8:f3:58:e9:3c:2a:e3:59:d3:da:69:
f1:80:5f:e6:3c:12:22:59:7b:c5:5e:46:36:63:45:d5:be:c3:
55:1f:56:6c:53:d4:9f:7e:37:77:54:15:dd:88:3f:2b:b1:12:
8c:b4:4d:ac:9a:cd:ab:69:f5:35:d0:ad:49:57:03:c9:6a:24:
cc:c3:da:23:7c:78:29:cb:8d:e9:18:96:74:62:ae:95:05:2c:
ba:74:92:88:ed:3e:1e:dc:1f:98:f1:e6:5d:33:1c:f2:af:e2:
24:80:3d:d1:d2:24:a6:18:88:84:cb:75:e2:d0:f8:90:94:c4:
1c:d9:26:ce:8b:1c:6c:60:60:1e:39:75:6f:52:ed:9d:9c:85:
b9:cc:5b:06:e3:45:be:78:c9:b7:15:14:a7:9c:99:56:0e:6e:
95:80:07:90:2b:bc:ac:d1:a0:68:50:03:ed:37:5b:2c:68:6a:
b0:f6:cf:4d:33:86:8b:de:f3:d7:39:bc:6f:fe:a5:9f:4b:6f:
5a:df:43:7f:2d:b3:e9:18:d6:69:30:ac:07:c6:41:f9:52:2c:
ee:29:88:a9:e6:24:46:03:5c:70:31:37:0a:1b:90:20:4a:18:
a5:96:ae:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:32:01 2026 by rpki-client