Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: 7C3WEqy/lX7aQoL+GxVuJy8skkins+Wyc/Y5kIujo2Q=
Subject key identifier: 0D:72:03:2A:F3:0F:76:66:51:2C:F9:69:BB:66:73:2F:3E:92:EC:5A
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 01A0D34A5B9A9B0BECF10572EDF96D8384D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 05D0
Signing time: Thu 24 Sep 2026 12:01:00 +0000
Manifest this update: Thu 24 Sep 2026 12:01:00 +0000
Manifest next update: Fri 25 Sep 2026 12:01:00 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: MpDaymqWXAoSeNUbTNlYuVK+uQr+99FIFb7AzqqdTcA=)
2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:5b:9a:9b:0b:ec:f1:05:72:ed:f9:6d:83:84:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Sep 24 12:01:00 2026 GMT
Not After : Sep 25 12:01:00 2026 GMT
Subject: CN=0d72032af30f7666512cf969bb66732f3e92ec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:f5:fc:01:5c:5b:5d:dc:6a:1b:e6:94:8a:
6a:a1:53:c5:c0:7f:30:2a:4f:c0:03:43:be:79:d5:
22:8a:ba:73:a2:42:af:ca:42:6c:6a:57:5b:ed:38:
b8:c2:04:f2:11:4f:80:74:ff:41:24:e3:4b:2f:4c:
0f:9b:71:6e:ff:a7:69:f3:fb:ac:09:98:4f:43:14:
71:c6:7f:59:50:3c:72:c8:41:70:fa:e7:4b:2d:e6:
95:88:08:fc:30:0a:d8:28:e2:0e:a7:f6:9e:a8:cc:
56:90:7e:92:ec:88:9d:4a:5e:47:9a:59:e8:0e:b7:
ab:79:51:56:1b:36:32:53:f9:72:7c:83:1b:c7:d3:
3d:00:39:94:0b:3b:3e:7f:cf:83:1e:4c:34:31:a1:
cb:c3:05:98:0f:2f:49:a1:d9:a1:05:c4:60:39:b5:
98:77:24:95:00:1d:81:c4:65:ed:25:20:ec:84:57:
16:dc:ef:45:aa:1b:48:f2:2d:f6:3d:fc:97:5f:58:
ea:3e:fb:3c:ab:ff:d5:d4:05:a0:59:64:54:ac:22:
f6:22:c3:20:7f:7b:63:ba:21:ad:76:99:27:55:e4:
66:eb:f1:1e:54:34:a4:42:92:13:ab:df:87:f3:f7:
0c:f0:83:02:55:67:8b:33:45:52:71:63:10:b4:f3:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:03:2A:F3:0F:76:66:51:2C:F9:69:BB:66:73:2F:3E:92:EC:5A
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e8:8f:45:34:18:1b:8b:5d:8f:fc:df:ad:df:1e:a9:7c:bd:
72:c9:2a:b1:71:82:61:00:66:af:c0:4b:89:97:61:68:77:3c:
c9:05:e4:d8:f4:aa:16:83:99:fc:b9:1a:63:c0:d6:9f:db:54:
45:f2:7a:0f:fc:6f:df:32:6f:32:48:15:c1:42:4a:84:22:77:
e8:f9:ad:83:e0:2e:10:5e:35:e8:dc:70:48:60:d1:a2:4d:54:
fc:85:c1:ca:e4:c7:11:82:68:d1:ab:1c:c6:3a:52:6e:50:33:
21:09:ea:04:a0:67:f8:c6:a7:47:4b:c4:6a:cd:2d:1f:5f:0d:
32:4a:eb:7a:c4:eb:dd:6c:a3:b9:ba:98:25:32:4b:e6:85:35:
7b:80:39:e3:05:ff:d4:af:aa:52:8b:8a:ce:34:66:93:c8:50:
3d:e3:68:f3:22:91:55:58:4c:53:b7:bf:05:1f:24:43:8e:2c:
9e:00:d6:68:c2:cd:4b:49:bd:d3:81:d5:81:55:5d:e7:54:1b:
21:25:39:bd:45:70:83:04:00:23:35:2d:a2:ef:59:96:b6:72:
2d:5a:ff:b0:39:50:f7:1b:4a:2b:50:87:76:a7:8f:7b:fc:a8:
f5:1d:44:c5:27:ee:64:38:99:35:6e:a7:b7:2f:10:be:10:02:
3f:7a:e9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:47:57 2026 by rpki-client