Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: 0dMbw/KFgCEqzEBzmBVOX+oNz6PdnCuEujKBbGSrF94=
Subject key identifier: B8:5C:76:AB:58:DD:78:28:78:F5:AE:A7:A6:C8:A1:6D:4C:D5:A6:11
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 01A0C4450C475288967B6D7521F905A183F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 1950
Signing time: Mon 21 Sep 2026 14:00:54 +0000
Manifest this update: Mon 21 Sep 2026 14:00:54 +0000
Manifest next update: Tue 22 Sep 2026 14:00:54 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: dKUbKGPjU3ZlvYyiMirQnb4JpO8GYt0dJTSEsM9SDDA=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:45:0c:47:52:88:96:7b:6d:75:21:f9:05:a1:83:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Sep 21 14:00:54 2026 GMT
Not After : Sep 22 14:00:54 2026 GMT
Subject: CN=b85c76ab58dd782878f5aea7a6c8a16d4cd5a611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:16:89:8e:0a:09:ff:4c:79:b2:e4:72:9c:
a5:85:e6:c7:7a:56:19:6c:63:b1:cd:62:51:f0:ef:
d3:7b:57:81:36:64:9f:d9:6c:07:d8:0a:4b:c5:09:
4c:cf:94:af:c9:03:78:43:09:5f:23:f8:e7:23:cf:
c2:79:e6:4d:7e:3e:bc:63:03:9f:34:e2:02:fb:85:
cd:8e:69:78:90:68:48:d8:a3:cb:38:8f:d9:66:95:
46:46:ed:5c:f4:b4:37:17:dd:39:14:a4:41:96:a8:
ff:b8:c6:65:25:70:32:51:43:5c:36:c6:6d:4b:f4:
df:1c:ee:3a:a4:fa:04:1b:de:b4:58:a1:9e:8d:f4:
4a:3b:34:85:ae:4f:6d:4e:cc:94:fb:b5:fc:8c:05:
38:fe:48:7d:b4:67:27:4e:9b:ba:e3:25:a8:48:22:
aa:1d:4d:6d:fd:fc:b1:9a:ed:d2:58:d4:f0:0e:1e:
c4:0c:59:95:f7:b3:6a:c5:7f:2d:83:aa:80:ae:56:
17:aa:f3:25:73:4c:07:2a:47:10:aa:55:e9:d6:50:
51:20:c0:28:5c:30:3d:c7:62:da:88:6e:a7:93:b7:
7c:7b:49:ff:0e:65:2a:d6:4c:fb:97:6d:b5:96:c6:
b9:a1:67:73:74:29:08:5e:10:7c:a5:ce:f8:e1:a7:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5C:76:AB:58:DD:78:28:78:F5:AE:A7:A6:C8:A1:6D:4C:D5:A6:11
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:19:5b:d6:c9:34:d3:aa:da:d2:bb:60:f1:41:b7:61:77:80:
c4:ea:5a:86:6d:fb:8f:46:5a:13:ab:31:10:bf:07:46:5a:70:
92:b5:8f:c5:52:72:0e:fb:c5:ff:6b:af:6f:d1:f5:72:44:7d:
90:b8:3f:a8:e6:fe:9f:dd:ec:bc:6e:db:4f:d2:dc:be:05:09:
80:ee:ad:af:f8:6e:95:8e:ce:bc:ac:40:de:34:08:69:d0:5a:
bc:3b:d2:da:72:53:40:e1:b6:a9:b2:f9:38:96:89:d0:4d:a8:
90:1f:74:7b:1b:30:ee:0d:d2:aa:73:21:f6:9c:40:19:34:de:
db:3c:7d:40:b7:8c:dc:ae:38:34:ec:d6:b5:f5:ea:20:6e:20:
60:d7:0d:9b:29:cf:4d:61:20:f2:e4:14:fc:bc:2e:e8:79:0b:
40:c2:7a:c6:3b:a5:f9:79:e8:ce:1f:d1:e9:f6:3b:54:bf:bb:
90:72:f5:8b:d4:54:1f:7b:e8:59:78:17:70:b9:56:94:33:a5:
3e:eb:23:59:b1:92:42:54:35:c4:0a:cf:33:29:23:7a:13:ee:
51:00:1a:33:02:7a:57:02:79:88:98:ef:3a:c4:a1:ad:11:ae:
79:80:f9:a3:4a:d6:ba:46:2d:6c:67:74:c1:cb:8d:8e:53:58:
cb:e0:28:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:52 2026 by rpki-client