Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: /ezDUhW+uVBvs6nPB3tic/FmyB5HreojGgzbGGXyTK8=
Subject key identifier: 85:65:19:39:80:B6:BA:9E:57:8A:F8:18:DE:FD:E4:82:C1:66:0A:10
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 01A0C6A15CD45A4B47F7F1F4F9F33EF015E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 01:00:58 +0000
Manifest this update: Tue 22 Sep 2026 01:00:58 +0000
Manifest next update: Wed 23 Sep 2026 01:00:58 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: 9+IerELhGwp55BSr4VLz8yZ6XFzBX+BNWd7m0o0MXYY=)
2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:5c:d4:5a:4b:47:f7:f1:f4:f9:f3:3e:f0:15:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Sep 22 01:00:58 2026 GMT
Not After : Sep 23 01:00:58 2026 GMT
Subject: CN=8565193980b6ba9e578af818defde482c1660a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:0b:8e:b3:4b:39:35:9b:0b:94:97:34:1a:
28:32:27:d0:ea:fb:23:03:51:06:67:8b:04:92:42:
cc:ba:5c:4f:a6:76:21:e8:94:36:d1:44:e2:34:18:
80:9d:52:aa:16:d6:21:48:f1:57:30:74:90:e2:05:
4c:04:ba:0b:fa:d1:8f:cc:ce:e4:54:6b:72:cc:34:
c2:4e:bf:23:37:10:97:af:3b:74:c8:b6:5b:1e:58:
91:77:3b:41:2b:2b:1d:5b:7b:80:9d:38:35:b9:22:
38:99:2c:9d:10:51:2c:a3:2c:b8:04:4a:29:8d:1d:
90:23:2f:9e:47:de:b9:ff:46:db:0c:88:0f:6f:d5:
fd:28:b6:96:66:cd:bf:e3:71:fa:14:78:bc:a9:28:
b7:84:b8:24:ff:87:b3:6b:42:c3:cb:8d:d4:a6:dd:
b8:38:4c:da:52:d7:8e:d1:68:e4:b9:62:6a:f9:44:
2f:2f:19:7c:18:52:f8:bc:bb:1d:77:02:2c:16:c6:
d2:84:17:10:96:5e:ca:d0:30:96:96:89:67:39:05:
83:56:e7:7a:6c:3d:59:e3:09:d3:16:a6:25:34:9e:
c8:44:49:0b:fe:bc:d8:e2:69:21:a7:65:71:71:48:
49:11:f8:8c:11:83:17:19:2a:12:e5:94:19:a1:6b:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:65:19:39:80:B6:BA:9E:57:8A:F8:18:DE:FD:E4:82:C1:66:0A:10
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:30:b9:0d:50:5e:a5:90:6e:13:fe:cc:05:e3:ca:c1:09:99:
f6:9b:45:c6:ae:e1:f8:1f:7d:c9:44:64:30:8f:ca:bb:c3:68:
f1:00:e0:cf:45:f2:34:70:b1:be:60:9f:8d:cf:d5:e9:48:42:
6d:a9:e3:e3:3c:10:c6:d1:8f:c6:f9:0a:b9:f3:fb:9b:94:43:
53:b2:6f:96:6b:38:64:ee:80:e3:0a:25:49:2b:38:c5:3d:a3:
ae:a8:7e:92:f4:05:66:9b:b1:82:3f:00:bd:68:fd:ab:6d:c3:
be:9b:70:26:ed:83:a3:6d:c1:51:88:bb:e1:1c:1a:b8:58:c4:
f9:90:55:e9:ce:75:8e:65:5a:66:85:83:fb:13:2f:4c:3a:43:
a3:3f:41:19:3e:7f:ce:66:61:6e:f9:b1:2f:99:45:cb:2b:f6:
91:33:fe:af:ac:f1:48:2c:6b:3f:d5:0b:03:49:1c:39:4e:44:
c4:61:f9:7a:18:23:6c:ca:2e:2e:77:c9:8f:0f:d0:43:d5:ea:
f9:e2:ca:64:8b:56:10:46:20:4a:fa:ae:b6:df:da:d7:52:06:
5b:50:ef:5c:84:16:3e:f4:6b:77:63:d5:b0:fa:8b:4e:bf:28:
aa:ee:8d:6e:2d:88:d5:4c:27:fd:86:be:e5:11:eb:31:12:f2:
ff:6d:55:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:48:40 2026 by rpki-client