Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
File: 8MRc9qe7S199ocIiINBI2mFos-o.mft (raw, json)
Hash identifier: DefX7qBGJ1Le0rk1jVeRN95aGjo3wlWDEehhNF8w/AA=
Subject key identifier: EA:9E:9E:C2:5C:11:E8:E9:B2:38:6E:3D:AA:1D:43:9B:E7:F3:97:56
Authority key identifier: F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
Certificate issuer: /CN=f0c45cf6a7bb4b5f7da1c22220d048da6168b3ea
Certificate serial: 01A0C55703B8F519DCFE0ECB703527B2A351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
Manifest number: 26
Signing time: Mon 21 Sep 2026 19:00:09 +0000
Manifest this update: Mon 21 Sep 2026 19:00:09 +0000
Manifest next update: Tue 22 Sep 2026 19:00:09 +0000
Files and hashes: 1: 8MRc9qe7S199ocIiINBI2mFos-o.crl (hash: uW3fCGg8F4842Y/cQBMDMZpv7udsVxkwqmz8Dk3y++Y=)
2: cDpQ-lup4UOfykLQM1uw9xBJXn0.roa (hash: YzUc6EeuXnL915saMdUCemojfhzBDlS0lYhMfgci5II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:03:b8:f5:19:dc:fe:0e:cb:70:35:27:b2:a3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c45cf6a7bb4b5f7da1c22220d048da6168b3ea
Validity
Not Before: Sep 21 19:00:09 2026 GMT
Not After : Sep 22 19:00:09 2026 GMT
Subject: CN=ea9e9ec25c11e8e9b2386e3daa1d439be7f39756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0f:0d:80:1f:bf:13:02:7e:3d:8b:0c:10:64:
71:e4:89:02:ec:1f:b2:80:60:45:6e:af:41:b4:a2:
14:7e:3b:9c:e3:59:87:aa:89:7f:74:99:6f:b1:10:
2f:6b:2c:21:f4:68:8b:11:5a:36:3c:8f:0e:d9:7c:
d5:72:f3:b6:a1:32:14:90:25:18:50:ab:5f:33:22:
50:33:c6:05:6b:43:56:74:b3:7e:6f:87:77:b5:63:
98:1f:c0:6f:a4:0f:5f:6b:fe:00:7d:c3:ac:58:32:
10:97:8c:0c:f8:8c:6b:d7:d3:11:29:b2:37:f9:92:
27:07:46:8d:dc:57:e4:e7:2d:c0:36:aa:04:ce:da:
6f:9c:a1:35:32:af:5e:51:0c:a6:45:33:3d:48:60:
fa:d9:15:a1:a5:57:57:df:b7:19:da:27:07:2c:f4:
38:9b:1c:a5:32:91:ec:f0:f1:44:24:ed:15:ad:47:
7f:97:e7:9e:bf:39:5a:87:06:96:73:ed:a4:3c:02:
68:af:c9:60:48:a4:c6:29:ad:d7:27:36:bc:15:74:
59:14:f3:c1:e6:1b:22:0a:df:57:b9:f0:2a:59:65:
02:ff:5d:46:0a:71:d3:0d:7b:c6:b2:2c:fc:d9:5d:
49:c5:5b:f5:3c:95:8b:bf:59:f1:50:19:92:72:1f:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9E:9E:C2:5C:11:E8:E9:B2:38:6E:3D:AA:1D:43:9B:E7:F3:97:56
X509v3 Authority Key Identifier:
keyid:F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:d6:b0:c3:38:cc:e4:2a:56:6a:f8:fc:7d:35:61:f9:f4:97:
8e:e4:98:93:7a:cf:17:dc:8d:bd:13:23:cf:ba:79:61:1a:22:
d7:02:f9:13:c7:08:d1:4f:5a:25:3f:6e:f7:9b:04:b5:be:11:
93:47:f2:3c:ba:55:cf:b0:a2:2f:18:c2:7f:cf:d9:2e:f6:e8:
cb:8f:f9:2f:18:19:a8:45:29:42:1b:45:c5:d0:88:a5:99:8a:
a2:34:2f:c2:6b:e2:0b:47:61:52:af:9b:5a:b5:cd:b7:47:72:
3a:4e:5b:78:5c:c6:82:e7:92:14:55:47:c5:02:ef:bf:aa:04:
f7:c1:fe:96:12:f3:fe:c3:97:9c:f3:dd:f0:64:7a:46:90:a3:
b1:e0:38:f6:64:d1:62:cb:ba:dd:a9:92:6b:8f:13:10:af:01:
35:54:68:cb:fc:2d:30:7c:31:ea:98:d7:a1:f2:a6:b4:5e:c1:
55:a1:8a:67:c3:85:d5:11:2a:05:e0:e9:7e:13:0b:7e:25:6d:
31:5d:75:32:90:e7:04:44:2d:6d:f3:5d:e4:73:3d:0e:5d:7f:
0a:4e:a6:36:98:a6:70:b5:56:61:e2:80:66:14:f9:f3:d5:48:
81:7f:f5:1d:aa:49:81:a3:f9:1a:b8:8d:fc:f3:a5:ba:f4:fb:
c0:41:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:56 2026 by rpki-client