Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: 1pN8vpOlP3O140gjoleWrCJo2GhovjRuDPayMEioh9c=
Subject key identifier: D1:BC:CB:D3:70:7D:94:1F:02:2B:FD:77:41:2E:0E:E3:65:CB:B5:BA
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 01A0C2C40E19F3D7BBD73566318F00459AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 07:00:23 +0000
Manifest this update: Mon 21 Sep 2026 07:00:23 +0000
Manifest next update: Tue 22 Sep 2026 07:00:23 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: eueGFCrFLKVcwNeNqAUpaSeutKhR2RBlgoHbgKdFp8g=)
2: XXKVsIY0HbIJymCv56HgZpurwFA.roa (hash: Sk/E2nAzU4UxwMsd952VhcruaPuVHKtKy3ii+1Myr2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:0e:19:f3:d7:bb:d7:35:66:31:8f:00:45:9a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Sep 21 07:00:23 2026 GMT
Not After : Sep 22 07:00:23 2026 GMT
Subject: CN=d1bccbd3707d941f022bfd77412e0ee365cbb5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:59:51:c8:92:10:95:e5:58:ac:fa:57:f6:
ba:45:51:8e:3d:5e:da:a8:ab:18:4c:db:f8:b8:64:
e9:eb:64:5a:df:4f:84:1f:8a:e2:18:65:3f:cb:19:
44:b3:af:11:a4:64:4f:9c:a1:20:5c:2d:af:da:35:
ac:5d:56:e1:b5:42:92:09:ee:76:b7:c0:fc:2a:15:
07:bf:7e:f9:7f:ad:e6:33:91:7a:65:72:ea:05:90:
f5:46:cc:fb:2e:54:f5:14:d6:77:8f:bd:8b:0f:06:
a0:67:22:55:03:29:26:10:96:7b:1c:55:d3:a5:53:
17:95:d1:dc:34:ec:c5:53:9a:26:2a:b5:33:6b:85:
95:cc:f5:03:07:5a:56:4c:ca:33:73:54:37:25:18:
98:dd:15:cd:45:f4:65:e1:b1:27:61:91:be:ad:1e:
32:2e:8b:40:90:72:9c:aa:11:73:74:d0:80:e1:c6:
f3:33:84:7d:f3:b0:e5:92:b0:b3:e0:7f:a4:0f:74:
06:a7:4d:8a:59:cb:e0:5a:ab:e9:dd:e0:44:3a:c1:
04:38:7c:e6:a7:84:95:2a:29:ae:10:7d:47:a6:5d:
8f:e4:3b:ff:c9:d7:98:a1:cb:bc:6c:ab:2e:35:5e:
48:f2:65:54:49:2b:4e:2c:54:e7:90:42:70:4a:c0:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:CB:D3:70:7D:94:1F:02:2B:FD:77:41:2E:0E:E3:65:CB:B5:BA
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6e:41:9c:cf:ae:91:13:8c:49:70:fb:ca:df:f4:eb:1b:79:
c6:55:da:d1:86:18:f6:9c:30:e1:37:d3:00:ab:62:cb:fb:32:
21:4d:23:df:da:b6:10:df:ed:0e:4d:be:cc:14:d0:7d:78:ab:
20:e7:c6:34:b2:c3:6e:3c:b8:36:66:44:91:62:56:ba:4c:62:
0c:ec:fe:87:f9:ab:05:82:b0:b0:26:56:78:ba:6a:6c:aa:4a:
9d:c9:4d:0e:19:c2:9f:ad:58:4d:b7:06:e1:03:e9:2e:da:d7:
47:22:35:3a:fa:e7:fb:f4:f2:14:98:01:7b:5a:8e:be:0f:57:
dc:36:91:75:a6:5d:4e:cd:8b:2c:9d:6e:d4:c9:e2:66:5c:6c:
8d:24:82:76:17:94:d7:52:ea:bf:6d:e9:55:c6:ea:fb:55:d2:
f5:18:9c:d5:9c:cd:ef:9a:43:5d:ea:9e:86:9e:4d:95:65:c4:
97:04:1e:53:40:df:a3:d4:7a:d6:6f:b5:82:4b:42:16:36:fa:
55:54:07:88:33:3b:a4:35:af:d6:0c:1a:3d:23:47:e5:1c:4d:
46:9c:d9:b9:16:ec:05:1a:cd:78:9d:65:2e:31:f2:b7:47:ff:
9f:d1:4a:1f:8a:b5:19:31:59:b9:01:1d:52:b4:d1:5d:09:90:
87:ba:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:55 2026 by rpki-client