Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: /sfm1WBhfmvSpnRfTNh0k92CwRYjP/rErtsdNO79vzE=
Subject key identifier: DF:EB:84:22:9C:FE:F7:D5:AD:74:60:E1:A5:82:8B:90:F3:82:85:94
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 01A0C369678A96086A1EBC0A900E42494592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 0E65
Signing time: Mon 21 Sep 2026 10:00:59 +0000
Manifest this update: Mon 21 Sep 2026 10:00:59 +0000
Manifest next update: Tue 22 Sep 2026 10:00:59 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: pLdwuqyM13ww7bzQk4onJtN9Q7u1jHE/w/ffcML78F4=)
2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:67:8a:96:08:6a:1e:bc:0a:90:0e:42:49:45:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Sep 21 10:00:59 2026 GMT
Not After : Sep 22 10:00:59 2026 GMT
Subject: CN=dfeb84229cfef7d5ad7460e1a5828b90f3828594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:00:ef:dd:21:36:a1:68:01:b5:e5:5b:10:1c:
12:57:ff:1e:e2:da:c5:bf:f2:e9:57:5a:19:2f:e0:
cf:dd:41:a5:95:bc:b9:8a:e3:1c:a2:fb:ed:2d:1a:
32:af:94:77:74:e0:a9:e3:6b:89:e4:45:d6:60:9d:
f8:b7:1c:dd:9e:45:b7:96:09:4e:94:3c:eb:64:b7:
77:e5:6a:c2:7a:b0:4d:65:81:b6:61:af:34:8e:ce:
a0:72:bc:4e:e3:6a:fb:37:8d:e2:37:ed:81:8b:25:
11:ff:90:d2:ca:0a:da:2b:3e:23:3b:f3:1e:4a:10:
a6:46:fc:f7:cd:bf:67:07:9a:25:be:8e:84:84:f6:
75:99:a1:50:fa:54:fd:ba:7b:a5:26:37:cc:0e:0e:
df:fb:6b:59:e1:53:70:17:4b:50:78:e2:d1:42:5c:
8c:74:72:28:44:9e:bd:46:b2:8d:4c:d3:c8:f5:06:
33:01:01:b1:5d:63:fe:94:3d:b7:90:c7:de:3e:0f:
a7:41:cb:14:af:36:e1:1b:a0:4d:e3:9e:48:6f:93:
b2:a4:4a:39:cb:c0:59:3b:f7:6d:7d:6a:8e:4f:db:
c1:c9:3e:8d:85:8b:a2:65:ba:9f:b7:55:00:50:25:
45:21:e2:23:ba:d6:b7:86:d1:31:5d:21:5f:ba:6e:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EB:84:22:9C:FE:F7:D5:AD:74:60:E1:A5:82:8B:90:F3:82:85:94
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2c:65:68:4a:98:e4:79:a0:47:53:41:09:73:d8:3e:c0:89:
d1:44:32:f0:6f:49:d4:42:c7:d5:a6:77:4b:f1:9a:66:df:89:
e5:94:a2:76:49:74:bf:f4:fe:41:b2:65:9b:64:9b:e0:d3:96:
b2:6c:73:68:0c:59:4f:98:0c:e0:19:e7:75:89:1f:a5:88:80:
56:15:ec:08:35:2d:48:66:d1:a7:21:97:c7:ff:1b:ac:30:0a:
34:22:d7:df:25:87:ec:b6:cc:59:dc:6b:29:1b:95:48:c1:4d:
53:56:f5:2f:1e:bc:bd:ae:00:99:aa:f8:62:d0:7f:21:09:48:
0f:01:94:33:2c:16:d0:46:e0:1d:e0:f1:2a:0f:f0:bd:c2:be:
4e:d8:1f:1e:f7:4a:d0:5a:69:69:a0:73:cf:a8:1d:22:b6:1d:
04:2f:4f:d0:fd:f9:97:19:b8:52:07:d0:51:e7:32:5e:3b:05:
89:fc:95:ac:48:48:7a:a3:6e:d3:66:a6:10:ba:f1:a4:fc:fc:
39:a9:0c:74:74:c0:62:08:4e:bd:e9:23:7a:16:e3:d2:3e:33:
13:bf:c2:cb:cc:9c:b8:a2:7b:b6:01:d5:87:28:85:e2:b2:09:
11:b6:97:3d:2a:a1:59:cc:d5:c5:99:e0:6c:8f:60:7a:dd:48:
b1:10:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:20:55 2026 by rpki-client