Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: rteyF3v9sk329nU3OZP9n/AGcjJ5253qEfdSA7ElGOE=
Subject key identifier: 74:7C:FF:8F:E0:B8:F9:35:86:80:E9:01:34:DF:B8:62:F9:16:AD:FA
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 01A0C1B18302627493A4B54BDCE08E2DAD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 10C0
Signing time: Mon 21 Sep 2026 02:00:30 +0000
Manifest this update: Mon 21 Sep 2026 02:00:30 +0000
Manifest next update: Tue 22 Sep 2026 02:00:30 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: aochaiHHphvFJC7lJnIILrUHaIId5ashJG702YkP/yE=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:83:02:62:74:93:a4:b5:4b:dc:e0:8e:2d:ad:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Sep 21 02:00:30 2026 GMT
Not After : Sep 22 02:00:30 2026 GMT
Subject: CN=747cff8fe0b8f9358680e90134dfb862f916adfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:91:ac:0c:f2:88:f8:8e:0a:b4:80:13:1e:
1e:ee:16:e7:e6:8a:b9:51:de:35:41:7d:41:1e:7a:
a9:4f:60:55:ee:11:e0:71:7a:e1:8e:ae:84:3c:75:
f8:08:03:a5:ac:3b:4e:fe:1d:d9:ff:d8:18:2f:5f:
b7:d5:57:19:98:57:2f:b8:5b:ce:b5:85:f6:6c:4b:
4d:5e:2b:ab:f3:68:40:3e:d8:f5:1a:fc:42:73:3b:
63:d1:fd:6e:f2:6d:4a:f8:ad:bb:f6:5d:da:52:94:
f2:52:87:ae:18:34:2f:c5:5e:40:5a:04:9f:9f:2d:
5e:1b:7f:17:e1:8d:11:63:3e:04:8e:43:b7:27:d1:
a5:20:43:5e:cd:2d:a9:d6:de:6a:d5:ba:7a:2d:e1:
0e:5f:2d:a0:8f:3b:7d:44:a2:75:a3:42:54:c4:d2:
f8:a1:79:3c:c4:ec:0c:7f:06:52:65:6c:bb:6c:45:
61:8a:ea:3c:4d:6c:68:e3:05:cd:8d:37:dd:95:e6:
35:6f:7e:7b:76:04:df:bc:21:38:47:3c:d2:65:2c:
b9:ae:c8:72:ab:04:3d:22:45:f7:36:57:87:79:9f:
2b:63:a6:58:3e:be:d2:17:7c:99:55:4d:49:81:18:
c6:5f:e2:e8:34:fb:86:69:af:73:55:a7:c6:9d:e3:
e6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:FF:8F:E0:B8:F9:35:86:80:E9:01:34:DF:B8:62:F9:16:AD:FA
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7b:2f:a3:bf:dd:30:45:6b:da:1f:2a:9e:5c:67:4c:67:59:
33:3a:0d:a7:fe:73:a0:ab:6f:1b:7c:80:dc:72:f5:f5:ba:e8:
ac:80:38:2a:c6:27:3c:99:c7:c3:cd:dd:3f:a5:e5:db:ce:01:
95:6d:dd:ae:b9:4e:59:90:21:49:06:ac:a4:b5:8f:85:b8:f7:
c4:9c:74:bf:f2:21:09:0d:3e:39:77:34:c0:d4:ca:d3:fd:b0:
e0:a2:53:41:92:d5:62:16:95:9f:90:b1:fa:ed:9e:e5:ea:45:
e2:bc:09:71:b1:f0:46:d9:8a:52:a0:61:fc:86:eb:a1:04:3f:
81:8a:20:51:39:1b:31:c8:36:02:c9:27:df:6d:41:8e:b1:9a:
cd:8f:d3:aa:9b:da:95:98:5c:df:bf:aa:86:d4:07:a9:92:70:
db:71:a4:d3:c7:79:40:43:a3:a7:2a:5f:51:19:b7:6d:bc:97:
36:88:f1:c1:71:b0:c1:d3:bb:eb:e0:0e:4d:5e:ec:2b:8a:d8:
da:13:60:c7:c0:7c:c5:62:e0:20:eb:b4:f1:0a:9f:ff:16:20:
09:4a:9a:80:0c:8e:e9:dd:2a:ed:3d:14:19:d0:5a:c7:18:a2:
42:2e:ba:a1:82:58:9b:d2:10:c1:cb:30:cd:5e:23:4e:c2:b8:
0b:75:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:11:20 2026 by rpki-client