Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: lB23fdGa3PYBMJz41I/SCWseVKTbX/xGyHFodjlf84Q=
Subject key identifier: DD:B0:F5:DE:46:80:BF:BA:95:CB:58:83:F5:06:2A:68:98:D4:17:EB
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 01A128E8ED7B98B35368A2184ABD3A23A8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 1A94
Signing time: Sun 11 Oct 2026 03:01:56 +0000
Manifest this update: Sun 11 Oct 2026 03:01:56 +0000
Manifest next update: Mon 12 Oct 2026 03:01:56 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: IFAvDlXtZGPyY7loEu2b4Qro7UEEVawTsM2U4u+0WYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:ed:7b:98:b3:53:68:a2:18:4a:bd:3a:23:a8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Oct 11 03:01:56 2026 GMT
Not After : Oct 12 03:01:56 2026 GMT
Subject: CN=ddb0f5de4680bfba95cb5883f5062a6898d417eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:f3:28:f3:6b:bc:2c:cd:c4:6f:30:77:6a:
af:1a:3b:84:67:8c:e7:1b:39:ec:b9:7b:07:4f:26:
58:6f:9a:97:aa:f9:b5:3a:a6:6e:ff:fe:17:b5:d6:
f2:a6:ab:ef:25:15:2f:d3:37:d5:1c:75:2f:16:04:
6f:a5:a6:41:24:f0:88:48:2c:c6:03:36:fe:58:be:
d0:e3:cf:20:50:ad:cf:bb:ae:8a:63:7a:60:f2:91:
98:e9:57:a3:f7:bd:72:15:e9:ed:93:c7:b7:f2:d1:
43:34:6a:26:6c:b7:8c:57:4e:00:65:f1:91:40:b8:
61:fc:35:fc:17:3d:78:72:8b:c3:2b:fe:d4:d3:ba:
e7:52:c4:39:98:39:ca:a3:89:a4:9c:0b:ab:7c:3f:
1c:cd:fc:a3:00:6a:49:22:87:98:a5:8e:eb:e6:21:
9f:e1:16:d4:16:7a:31:6b:7a:6f:14:71:11:aa:f4:
3d:15:5f:01:2c:31:bc:cb:47:45:e6:dd:5e:99:c7:
f0:87:9c:b9:0e:ae:a6:b4:de:19:15:a1:59:63:e3:
26:a7:c7:4a:3b:7d:03:fc:58:b4:62:e1:2d:30:1f:
1b:7f:9c:56:27:a9:a0:28:ea:69:ca:ca:01:07:0c:
6d:2e:58:41:5b:40:98:4c:16:0f:05:2d:0b:b4:53:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B0:F5:DE:46:80:BF:BA:95:CB:58:83:F5:06:2A:68:98:D4:17:EB
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dc:67:a4:2d:fa:f1:99:72:f5:55:f9:74:66:02:ab:9a:18:
cf:05:92:62:17:7d:4d:01:ec:49:24:fb:48:28:48:34:ee:38:
c5:1d:c7:16:f4:45:58:67:97:bb:9d:2d:e4:77:af:1a:cb:72:
8e:a5:94:da:d7:28:d9:a0:0a:e3:c9:8d:1f:16:0b:fa:4c:80:
a5:80:bb:f8:d4:60:2f:2b:3c:42:74:69:01:8d:c0:73:75:a8:
8b:8b:b5:25:0d:da:e8:26:6c:70:0b:8f:d8:1d:e1:5a:d7:c0:
1e:53:2a:32:90:5b:45:9e:0c:cd:68:00:b2:0c:f1:43:a5:73:
64:91:24:22:86:f4:90:ca:34:32:b7:68:93:f9:a2:70:71:35:
c5:c4:02:5e:e1:c6:96:0b:1f:96:21:95:62:36:33:ad:1f:e2:
67:c0:93:93:24:eb:fc:01:6e:04:c1:e9:19:a1:0c:42:84:f8:
3f:e0:cb:37:6a:05:af:3e:1e:d5:cd:62:4c:2a:99:fa:55:1c:
5b:32:13:48:24:00:34:55:0f:6d:40:c8:66:30:22:5a:55:d3:
39:6d:ac:ad:27:48:8a:bc:42:50:5b:15:90:0c:e1:50:bd:24:
4d:6e:4d:d4:33:b3:43:20:4a:ee:43:53:14:df:29:ca:db:2d:
50:76:10:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEo6O17mLNTaKIYSr06I6j/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2Y2Y2NmNTdmMWM0OGYxMWMxNGZkMDA1NDA1YWNjZTM2
ZDAzYjgwHhcNMjYxMDExMDMwMTU2WhcNMjYxMDEyMDMwMTU2WjAzMTEwLwYDVQQD
EyhkZGIwZjVkZTQ2ODBiZmJhOTVjYjU4ODNmNTA2MmE2ODk4ZDQxN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZvzKPNrvCzNxG8wd2qvGjuEZ4zn
GznsuXsHTyZYb5qXqvm1OqZu//4XtdbypqvvJRUv0zfVHHUvFgRvpaZBJPCISCzG
Azb+WL7Q488gUK3Pu66KY3pg8pGY6Vej971yFentk8e38tFDNGombLeMV04AZfGR
QLhh/DX8Fz14covDK/7U07rnUsQ5mDnKo4mknAurfD8czfyjAGpJIoeYpY7r5iGf
4RbUFnoxa3pvFHERqvQ9FV8BLDG8y0dF5t1emcfwh5y5Dq6mtN4ZFaFZY+Mmp8dK
O30D/Fi0YuEtMB8bf5xWJ6mgKOppysoBBwxtLlhBW0CYTBYPBS0LtFOYjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2w9d5GgL+6lctYg/UGKmiY1BfrMB8GA1UdIwQY
MBaAFPM/bM9X8cSPEcFP0AVAWszjbQO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEt
ZjVkNmI0OTIzOTRiLzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEtZjVkNmI0OTIzOTRi
LzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdxnpC36
8Zly9VX5dGYCq5oYzwWSYhd9TQHsSST7SChINO44xR3HFvRFWGeXu50t5HevGsty
jqWU2tco2aAK48mNHxYL+kyApYC7+NRgLys8QnRpAY3Ac3Woi4u1JQ3a6CZscAuP
2B3hWtfAHlMqMpBbRZ4MzWgAsgzxQ6VzZJEkIob0kMo0Mrdok/micHE1xcQCXuHG
lgsfliGVYjYzrR/iZ8CTkyTr/AFuBMHpGaEMQoT4P+DLN2oFrz4e1c1iTCqZ+lUc
WzITSCQANFUPbUDIZjAiWlXTOW2srSdIirxCUFsVkAzhUL0kTW5N1DOzQyBK7kNT
FN8pytstUHYQLg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:43:52 2026 by rpki-client