Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: e0W+k5PxS6bXsuhwdbcJV25XvcNuKZMWHRCnuDkzf4c=
Subject key identifier: FB:10:84:09:4F:85:8A:58:0E:3E:C8:87:C0:2A:B7:00:B2:85:94:EE
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 01A0D2DEE4681D349107E728BBC198336DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 1663
Signing time: Thu 24 Sep 2026 10:03:37 +0000
Manifest this update: Thu 24 Sep 2026 10:03:37 +0000
Manifest next update: Fri 25 Sep 2026 10:03:37 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: xNscgNBdcLRwOAp0GRgzE28M6srLcxUUUNCPwbe3VWc=)
2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
4: WHeuBr41SRHYb97wRA-9N6rZlYY.roa (hash: JKr5DtUCS/MHFFPv5d8SACsCIRv8QZPYpdOpKjP/pqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:e4:68:1d:34:91:07:e7:28:bb:c1:98:33:6d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Sep 24 10:03:37 2026 GMT
Not After : Sep 25 10:03:37 2026 GMT
Subject: CN=fb1084094f858a580e3ec887c02ab700b28594ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:20:94:d0:a8:1e:cf:74:4d:46:e1:87:6c:
bc:86:68:05:39:fa:d5:f0:93:f1:02:67:b1:a7:e6:
53:a9:a0:d7:86:88:bf:2e:68:77:7d:84:30:61:34:
7e:27:c1:53:88:0d:96:32:71:39:27:8c:c4:23:0e:
26:e5:f6:0c:7b:c2:62:bd:c0:73:fe:e8:80:6b:c8:
d3:37:b0:20:4d:93:24:d1:7a:b8:9e:92:8b:5d:0e:
2e:9c:fb:8a:1a:68:6a:29:ee:a2:ae:1d:ee:84:a2:
46:18:3f:3b:98:dd:76:2d:7e:4f:4e:89:44:bf:ad:
fb:f3:6a:aa:48:32:51:7b:40:56:5e:5a:3f:1d:5a:
5a:9b:87:d1:13:6e:c5:21:28:a0:7a:f8:a6:bd:6c:
5b:c7:e0:c0:98:cd:b2:d6:68:0a:ff:1f:da:63:ab:
05:37:82:86:ad:0d:c5:60:ec:43:f4:d3:26:f9:f7:
af:e2:8d:b6:18:61:77:7a:c5:33:3a:da:e6:61:54:
40:7f:b7:d9:bb:a7:42:2c:a9:0e:ac:df:b5:d7:7c:
21:ad:8e:c5:27:78:42:fe:35:c6:cb:a1:3b:79:84:
24:08:8f:ec:63:6f:2b:bd:2a:83:e4:7d:9c:88:71:
38:a9:69:c6:84:17:24:f4:9b:18:ba:25:1a:58:0c:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:84:09:4F:85:8A:58:0E:3E:C8:87:C0:2A:B7:00:B2:85:94:EE
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:60:75:43:95:18:c6:b1:85:a9:85:26:6f:be:ea:0f:04:10:
d8:cf:bb:b2:05:e4:4a:6d:55:52:fa:53:9f:92:68:a6:57:71:
cf:f9:0b:9c:72:00:83:60:aa:cf:b8:c5:ea:89:5f:1f:02:fa:
19:80:75:e2:73:43:1d:64:c6:52:51:64:fa:28:3d:af:a4:db:
fd:92:18:77:6c:47:fc:1f:66:05:3f:28:0d:7f:f3:92:16:1f:
cc:aa:cd:a2:fd:6f:0c:aa:12:60:09:59:78:6d:4d:d6:77:1d:
d7:5a:65:a0:f3:00:06:d5:12:a0:0e:2c:66:c9:fd:08:6a:9c:
cf:6a:26:0d:75:6e:c6:d1:f4:86:ff:cd:44:e5:2f:9a:8d:9f:
18:14:bd:9c:4f:ce:1a:01:cc:40:26:cb:dd:ee:66:0e:9b:62:
f0:18:18:fd:b0:40:0d:85:75:22:93:b6:ab:50:19:dc:ed:19:
b3:5b:af:14:0c:07:7a:83:2f:4c:aa:4c:63:9a:7c:29:fa:70:
fb:7f:49:65:a5:46:f9:65:4f:be:f9:54:f4:fd:bb:a5:4c:25:
4c:2f:c6:6b:b4:75:a7:fb:d8:c2:af:5c:a3:4e:61:db:34:b6:
dd:9b:fe:82:d4:33:de:6a:df:cf:53:8f:01:80:e7:c6:7d:de:
13:b9:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:48:32 2026 by rpki-client