Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: uga0s4eg0+pjkKvBt+WohuBLMT9fgfvboYOW+So8Jyg=
Subject key identifier: 93:51:49:33:07:BC:58:3B:99:EA:22:E9:01:7E:2E:C9:D6:13:5B:03
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 01A0D61542CF7EC4D7AC940ACC6A91961C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0EEE
Signing time: Fri 25 Sep 2026 01:01:52 +0000
Manifest this update: Fri 25 Sep 2026 01:01:52 +0000
Manifest next update: Sat 26 Sep 2026 01:01:52 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: EcFlOLJEI7hvHbdOVP+PuNClKmwpWZebDWWBb0jequY=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:42:cf:7e:c4:d7:ac:94:0a:cc:6a:91:96:1c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Sep 25 01:01:52 2026 GMT
Not After : Sep 26 01:01:52 2026 GMT
Subject: CN=9351493307bc583b99ea22e9017e2ec9d6135b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:9d:0d:51:b7:45:8b:f6:19:e3:8d:e3:04:
12:6d:e2:65:62:68:a6:a4:cd:8d:bb:f2:c3:fd:d7:
49:d9:cb:c4:b8:3d:2e:68:6f:41:40:c4:4b:77:fa:
49:bd:4d:2e:45:ca:7f:83:5f:fd:7d:97:78:04:ba:
4c:be:14:00:79:75:56:b3:91:dd:b5:39:8d:31:65:
79:c8:84:6b:df:48:71:ec:d7:27:9c:40:d7:35:7b:
b6:1f:72:cc:bb:b5:b0:64:bb:34:ba:f9:5b:92:59:
9a:d6:44:2e:8c:68:9a:86:90:9f:9a:ef:56:bb:d4:
8f:d9:2c:b0:74:ad:be:e9:b0:95:11:16:12:de:ae:
f9:37:f1:ce:b4:60:69:40:6b:d7:66:a2:fd:70:95:
56:da:b1:08:bf:b4:7e:ea:3d:35:2c:1a:70:a6:04:
7b:ee:40:d2:75:af:bb:65:44:ef:14:84:22:26:27:
49:dc:32:99:d6:72:79:27:86:da:41:29:5a:eb:96:
32:0d:43:f1:98:d1:50:0e:87:1c:ee:46:2a:e2:41:
1d:0c:d1:31:85:da:40:3b:6e:1c:9d:9d:2d:02:08:
f1:9f:30:e0:a0:59:dd:1f:d0:6f:41:18:9a:80:31:
7a:a3:98:a6:f0:4f:73:22:92:09:c0:46:6f:86:54:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:49:33:07:BC:58:3B:99:EA:22:E9:01:7E:2E:C9:D6:13:5B:03
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:81:dc:85:e5:c5:21:1d:0a:74:5b:f1:5a:17:db:37:d6:
8e:fb:fa:b3:b4:1d:18:1b:92:35:63:69:ec:3f:ba:5b:c3:84:
28:b3:a5:51:86:04:9b:06:52:b1:dd:80:19:c7:dc:26:e0:30:
72:5e:d4:f2:d9:7d:14:04:44:8a:70:61:b5:cf:9d:f9:0f:65:
1d:56:64:3e:0b:ed:d4:5a:09:11:f2:5f:d6:a3:13:f8:5f:06:
86:09:b2:d5:81:5a:03:61:9a:2b:3a:78:55:67:f6:0c:bb:83:
b5:01:6c:7f:ae:e3:67:79:89:97:48:f5:c0:04:bc:d0:c5:da:
e5:0d:f6:e1:bc:57:67:0f:34:5c:97:3e:bd:6b:55:7f:4c:05:
72:d6:af:4f:01:ed:d8:9a:d6:6e:72:71:33:eb:be:d7:68:74:
c6:a2:6c:d1:c9:f2:1f:66:d8:71:17:7e:d5:fd:5c:f4:f7:b4:
99:2a:98:83:09:9e:22:5a:21:2b:63:c6:b3:79:0b:20:a2:60:
05:da:05:79:a2:d1:13:c5:2e:c3:a8:d3:89:a7:91:72:7c:e5:
3a:63:85:89:c0:e5:e6:e0:2e:32:ee:85:52:70:15:48:a0:a4:
32:b8:c7:9c:0e:1e:5b:f3:0a:c8:a3:34:d1:be:19:e5:54:f9:
0c:77:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:38:30 2026 by rpki-client