Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: sGK5LJfX5kD0tV6IDJdaERcU66L5q/8VaJo7kDF4Irg=
Subject key identifier: 44:BA:49:C3:FA:98:C9:5B:9B:C9:55:D6:EB:27:F6:9E:8A:6F:02:74
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 01A0DC4D65CACB9ECDA96D07AEF6FF805D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 1462
Signing time: Sat 26 Sep 2026 06:00:54 +0000
Manifest this update: Sat 26 Sep 2026 06:00:54 +0000
Manifest next update: Sun 27 Sep 2026 06:00:54 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: uzz59ipVEuqHRgyMPXk0qHmyTpYVUJrMNHJaQW1aRjQ=)
2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:65:ca:cb:9e:cd:a9:6d:07:ae:f6:ff:80:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Sep 26 06:00:54 2026 GMT
Not After : Sep 27 06:00:54 2026 GMT
Subject: CN=44ba49c3fa98c95b9bc955d6eb27f69e8a6f0274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:53:69:7d:b0:3c:01:84:b5:75:ce:bb:5f:e5:
8c:3e:93:2c:4d:86:fd:ba:f5:c6:40:ca:8f:a9:d6:
5b:b1:ea:9b:f5:a1:9e:da:9f:eb:b7:c9:a2:01:1d:
90:36:26:02:32:b9:c6:80:d4:ae:5b:ae:ee:43:db:
54:64:fa:9c:e9:96:94:59:73:ff:34:c2:79:66:00:
97:f8:ff:56:2d:6b:3a:d0:a3:ef:9d:c8:87:63:75:
51:56:4d:18:7f:a2:b8:df:44:2e:e7:f8:c2:07:5e:
2a:b0:de:07:f1:23:9a:1d:e3:be:04:b7:a8:28:95:
8f:2f:1c:cc:0f:d5:0a:a6:ea:1d:ec:d3:34:e7:c3:
2f:a6:ce:b1:10:a6:05:91:5c:ba:ed:97:19:c7:64:
84:5e:3b:a4:f4:11:f7:79:c4:12:9d:b2:45:f7:51:
3b:23:37:c9:43:98:6a:43:9f:96:1e:a3:00:67:d1:
3c:c9:d9:34:82:ba:04:6b:b2:92:9e:39:bd:93:42:
e4:b4:d9:d7:40:36:c4:67:13:e1:c0:30:6f:62:c7:
a7:84:9d:1a:5e:b6:8c:3a:b4:bc:b6:c1:25:2b:ba:
5e:ed:31:58:71:3f:a8:23:f5:6b:33:a8:7d:36:0e:
ad:f4:3f:66:d0:b5:b1:16:77:d2:4e:f4:70:e0:ef:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BA:49:C3:FA:98:C9:5B:9B:C9:55:D6:EB:27:F6:9E:8A:6F:02:74
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9d:c5:e3:26:2f:6f:46:4f:24:ed:d3:9b:84:97:e6:8e:fd:
86:09:88:a2:45:5c:0d:1d:93:c4:c5:c5:1d:81:4e:ae:01:c0:
9f:e7:64:21:31:84:11:71:00:27:fe:18:7f:33:58:d3:2a:e7:
52:2a:bb:4b:8a:12:79:c2:cf:cf:df:34:4e:85:de:77:95:14:
1c:7f:86:a3:18:16:c8:91:41:2d:98:68:da:1f:16:d8:0a:42:
02:88:69:a8:12:3a:e9:83:a9:96:83:23:3b:36:8b:1f:75:25:
7d:e8:ca:c2:8b:a7:de:92:9c:6a:b3:ee:f3:ee:37:43:e0:f7:
4d:17:9e:3a:b8:61:3b:0d:9e:18:4c:50:d4:a0:99:04:34:0e:
fc:ac:9b:78:f0:f1:c2:d1:10:8f:97:4d:85:71:87:a1:cd:37:
67:ad:74:e4:9d:83:08:92:bb:37:ee:fd:a2:bc:ff:cd:11:4a:
db:0a:59:eb:fc:f7:c5:c6:15:65:78:fc:e1:98:5a:7c:53:63:
7c:9d:da:5e:f2:1d:ca:c1:9e:63:f7:9d:00:e6:31:25:97:4d:
74:a4:f2:ee:63:cf:a1:de:a7:07:ed:45:dc:17:b5:37:13:2c:
04:78:54:a5:54:95:bb:19:0b:b7:4d:e3:39:27:0b:79:36:79:
d4:5f:14:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:35:34 2026 by rpki-client