Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: l3gJQRJ2lBkJN3sBNwHFbwukSIg/ABZLcmeA78ExN4s=
Subject key identifier: F8:63:B8:13:D6:C3:69:E7:07:23:B5:98:99:AB:A6:51:8C:4B:F7:BA
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 01A0C6A12E04B27118318F84FF7C901B484E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 0950
Signing time: Tue 22 Sep 2026 01:00:46 +0000
Manifest this update: Tue 22 Sep 2026 01:00:46 +0000
Manifest next update: Wed 23 Sep 2026 01:00:46 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: CLYfPW2Pp4om8mzXBp2ZkPj8HKMPPL/jnmKIRXlOTm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:2e:04:b2:71:18:31:8f:84:ff:7c:90:1b:48:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Sep 22 01:00:46 2026 GMT
Not After : Sep 23 01:00:46 2026 GMT
Subject: CN=f863b813d6c369e70723b59899aba6518c4bf7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:88:ef:5d:44:a9:7f:0e:88:b7:03:22:72:
fd:cd:cd:84:1d:39:5c:6b:d1:06:f2:fc:07:b9:77:
8d:6d:46:27:79:f2:6a:4f:d5:0c:d0:9b:2b:22:f4:
06:ea:97:e4:63:ab:0b:70:18:6d:20:4c:34:0a:f0:
c3:15:d5:de:51:cf:55:30:d7:cb:76:da:33:56:76:
a3:89:25:83:be:ed:36:c9:93:5e:6a:dd:db:0e:98:
68:0f:47:4e:e2:da:ce:b3:80:17:fa:70:0a:d4:f2:
c8:68:13:9d:9e:ee:6d:02:73:60:3a:1d:e8:8f:d9:
1b:cf:82:b4:3f:77:8f:f9:13:db:21:45:f4:7d:da:
2b:56:d4:95:9e:27:5f:bf:69:71:20:4d:89:4e:d4:
54:d2:a3:f2:15:58:b4:1f:99:ed:1d:b5:02:a2:97:
34:e6:90:12:05:a9:67:2e:8a:59:cb:ad:4e:e0:47:
a6:37:e5:5b:52:79:55:0c:26:36:70:cf:85:46:e2:
22:92:ea:f9:32:ed:a4:97:32:3d:64:3f:db:f0:ee:
62:92:ab:8a:e4:c4:54:3b:36:cc:18:9a:95:f6:f2:
aa:a1:57:79:0d:2a:28:0a:ae:15:17:80:37:d8:84:
59:ab:2c:0b:2a:16:e7:b6:62:e8:65:5b:87:26:ef:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:63:B8:13:D6:C3:69:E7:07:23:B5:98:99:AB:A6:51:8C:4B:F7:BA
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:31:6a:4f:98:eb:35:fc:4e:4a:8f:e0:7a:c2:e9:c9:26:41:
bc:32:98:95:f9:b3:6c:88:e4:dd:d6:a2:b0:b7:96:a6:90:0b:
11:f8:d3:ef:f4:ca:14:89:72:3d:32:aa:c2:82:83:6a:00:d2:
78:ce:79:ef:a8:e8:78:16:54:2f:97:2d:cb:84:fb:bc:af:15:
9e:f8:5f:22:3f:de:df:f6:e2:e0:95:e5:83:48:07:cf:5f:46:
f9:0f:41:3a:ed:b6:db:36:36:7b:03:81:8a:59:53:3e:14:3f:
b3:7c:f0:5c:14:ef:34:9f:2c:ff:ad:f9:f6:4b:54:32:05:15:
1a:9a:aa:ad:82:27:ec:ad:d6:09:53:1f:73:12:7a:6c:fb:5c:
e8:4a:ae:50:12:9d:8e:b5:89:ab:0f:b0:01:51:48:f3:8b:91:
16:a3:84:5c:b0:df:3f:ad:05:ed:d0:04:c7:fd:ad:08:5d:78:
14:09:b5:b7:2d:10:79:cf:ba:f9:7f:95:c5:f7:45:db:9b:09:
52:fd:ac:7e:43:45:42:4b:0c:c5:de:95:67:a6:7f:e5:e3:75:
ed:41:5f:62:0f:31:bf:07:32:3d:53:cd:3f:47:a8:47:b3:c8:
06:6f:ff:d0:74:47:8c:a9:72:90:ef:fb:61:6b:3c:ee:10:b6:
88:4d:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:24:52 2026 by rpki-client