Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: 3TKYsilMSKhkBYlcoLr+7Nke5mwslSNPjFfzgI2enlM=
Subject key identifier: 09:72:99:72:92:BD:62:38:45:D2:90:C0:34:CA:FB:DE:27:00:3F:C3
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 01A13334FA1C82C666AA4546CB2DF7132835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 1A30
Signing time: Tue 13 Oct 2026 03:01:12 +0000
Manifest this update: Tue 13 Oct 2026 03:01:12 +0000
Manifest next update: Wed 14 Oct 2026 03:01:12 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: 0WFlzTrCHTr45Ocbtkm5Yxm4cWpeeEPEW2o9Mmr97SY=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:34:fa:1c:82:c6:66:aa:45:46:cb:2d:f7:13:28:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Oct 13 03:01:12 2026 GMT
Not After : Oct 14 03:01:12 2026 GMT
Subject: CN=0972997292bd623845d290c034cafbde27003fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:75:c5:51:26:82:df:15:62:bb:e4:b9:cb:
44:5d:38:41:de:3b:8f:52:fc:95:2c:88:31:1b:9f:
fd:6a:c3:03:0f:3e:64:ab:e5:c7:fe:6f:50:8b:e0:
6f:bf:b3:1c:b8:02:79:6d:d7:a2:1a:d2:7f:b4:11:
ce:22:8c:bb:3d:aa:38:20:20:e9:41:50:7a:72:80:
1d:34:20:bc:4a:88:35:aa:2e:a2:ce:df:61:82:c8:
2d:e7:5f:51:52:91:5c:c3:8b:17:ce:8c:70:84:d5:
a1:80:c1:aa:16:ac:00:0a:c2:b9:e6:0a:be:61:d0:
eb:ca:f5:08:76:94:4e:2b:8d:3d:67:26:4e:d1:a5:
56:53:b2:51:f9:b6:4c:be:03:3d:3c:3a:4c:77:52:
61:d9:ee:27:bd:d6:05:b2:dd:3b:1d:ed:2a:92:a6:
fe:61:14:56:aa:d4:bf:d9:43:13:2e:06:78:0e:ef:
eb:8d:df:14:62:99:38:86:6d:b9:c5:4d:a8:28:ff:
26:7d:e2:1b:5f:ef:60:04:09:f5:dc:2a:b0:44:48:
b4:c5:cd:21:f9:b4:72:8f:07:6b:5e:fa:5b:6b:c2:
ea:2d:8e:bb:87:b8:09:ba:87:c3:96:9c:b5:02:3d:
fa:63:fc:7c:44:c8:17:dd:fe:01:32:db:a2:44:05:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:72:99:72:92:BD:62:38:45:D2:90:C0:34:CA:FB:DE:27:00:3F:C3
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:70:c3:8b:11:92:49:ea:e3:ac:ba:7d:4f:38:5a:af:01:e6:
a2:99:9d:44:61:ef:90:7e:82:33:4a:02:40:52:33:3a:a0:e2:
53:85:39:31:36:a3:eb:9c:82:29:5c:55:fb:ad:b6:94:4d:9a:
a0:16:69:56:45:f4:ab:7e:f9:f1:a6:dc:b8:b2:85:ec:c2:38:
45:4e:ec:c7:c5:af:18:46:1a:ad:d0:7b:4c:04:26:1a:83:32:
5f:c9:dd:fe:3f:4a:46:7b:4e:5b:2f:4c:a2:0e:b5:ae:17:0d:
59:fb:8f:24:30:10:9a:a1:97:6f:26:b6:6e:b6:26:76:11:0b:
50:44:67:50:4f:a9:48:e8:b4:7c:94:28:52:5e:69:cc:74:d0:
3e:03:f3:a2:e6:6c:6c:ca:70:17:e5:3d:5a:8b:94:67:2e:01:
80:d1:7b:fe:bc:dc:6e:d6:e0:db:99:04:be:4a:a9:dc:1f:27:
2c:c5:19:a0:e2:4f:9b:fa:2a:b6:29:99:26:01:e1:ed:01:55:
f0:bc:4f:f9:fa:60:bd:39:84:71:80:cb:14:a6:67:c2:1c:b9:
43:50:8d:b3:2a:4f:d8:34:5a:1f:47:f6:b5:21:c9:8b:13:02:
6b:f9:74:25:4b:37:da:05:46:80:98:51:17:1a:0b:21:95:db:
24:18:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:28:43 2026 by rpki-client