Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier: Q5mK3Be0kwFM5zJWdCUy3dpEqEH7I58Rzor7I8ZIdDo=
Subject key identifier: 0B:A0:7E:D2:F8:EB:E7:D0:AD:EE:27:2B:59:F8:B5:5E:B6:3C:BA:99
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial: 01A0C1B165C04CD03381FC73F7A803729240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number: 0CA0
Signing time: Mon 21 Sep 2026 02:00:23 +0000
Manifest this update: Mon 21 Sep 2026 02:00:23 +0000
Manifest next update: Tue 22 Sep 2026 02:00:23 +0000
Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: eHKeP3Pbw/dovtlgiAk3yHD7h7uTz0vrZ0fNdrWf9x4=)
2: Y3IZ9qCwUd5F2pR3sNX6lIyY6Pw.roa (hash: LV0AUIrFJfTCffSGhCZkNnJY82iWH8kCbOJwGo9wRiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:65:c0:4c:d0:33:81:fc:73:f7:a8:03:72:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
Validity
Not Before: Sep 21 02:00:23 2026 GMT
Not After : Sep 22 02:00:23 2026 GMT
Subject: CN=0ba07ed2f8ebe7d0adee272b59f8b55eb63cba99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:e2:e0:02:80:c6:bc:7f:99:6a:7e:ad:d3:
c0:d7:b2:1f:dd:db:0b:53:67:c4:99:74:e2:34:54:
3d:82:d8:24:84:52:5e:26:19:6d:fe:74:55:2e:c1:
2b:4c:c6:fa:4d:eb:5d:04:14:4b:4c:39:9a:c0:3a:
b3:c0:45:5e:f4:e6:04:7b:33:0f:4e:e6:cc:b2:e9:
9a:0e:fc:4c:8c:2e:c3:ff:c4:2c:d8:24:96:99:04:
1b:1e:9a:cd:d5:38:70:02:34:97:2f:bf:8d:0f:25:
da:47:d2:4a:ae:de:9d:c3:be:b1:aa:c3:9b:38:f2:
89:05:40:f3:fc:4d:fd:56:79:be:02:c7:e7:b1:19:
0c:04:5a:08:6f:43:50:76:b9:1d:7e:26:71:e9:10:
8a:86:83:ea:68:d9:f7:ab:2f:ef:ce:26:7e:10:f3:
0b:6e:0e:0a:4a:34:18:28:3f:12:43:4f:01:fb:17:
00:20:a9:1a:cc:97:c4:45:2d:b8:6e:95:23:45:84:
85:b6:4a:d1:30:a3:3a:a3:d8:62:63:8a:16:2a:3b:
7b:2d:31:f1:bf:37:bd:f8:9d:14:db:4d:d7:2a:73:
10:a3:a9:15:82:9e:57:5c:1b:15:6a:67:8c:92:e0:
76:65:ba:07:4e:03:7f:47:74:b9:15:1c:ec:c7:a6:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:7E:D2:F8:EB:E7:D0:AD:EE:27:2B:59:F8:B5:5E:B6:3C:BA:99
X509v3 Authority Key Identifier:
keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e0:27:6c:3d:d8:15:ee:ef:93:a8:48:de:22:cb:63:43:8d:
c1:37:9d:36:65:00:0b:d4:e0:5d:ac:26:2f:4e:a5:fc:a0:2d:
ad:b2:89:6f:8c:a8:17:fd:06:18:5c:f4:3d:eb:90:46:83:e8:
22:fb:87:7a:9f:03:3a:3e:25:68:9e:6c:4e:d9:ef:af:1e:2f:
7e:fb:be:a1:30:e8:26:8c:bd:aa:ee:5e:23:31:95:bb:2a:cc:
52:55:1c:49:89:fb:02:dc:ba:67:10:fa:17:08:f0:a1:db:08:
d4:82:de:79:b0:4e:a2:e7:63:3b:d7:5e:de:7e:ab:13:31:a9:
62:1f:9e:5b:cd:59:ef:6b:44:d1:ee:18:f4:d0:a5:e1:e0:8c:
50:98:6b:02:ff:b6:b6:d8:e0:e0:5c:5f:e8:e4:39:3e:23:f5:
f4:44:c9:37:d1:32:ce:80:35:1d:32:80:7f:88:a2:f3:02:ef:
10:21:95:db:5a:25:99:33:43:f5:cd:e1:e6:7c:20:90:a4:62:
87:26:66:84:84:5d:61:31:04:61:c1:56:fb:fe:8f:19:6c:f9:
a1:36:dd:db:e1:e7:99:85:11:a7:20:cc:4b:aa:41:45:ca:61:
63:ce:fe:c8:6d:c4:8f:bb:87:13:af:bc:3e:af:86:a8:25:61:
ac:4b:93:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:04:59 2026 by rpki-client