Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: pwu1McpOj2LsJjO0NTENO5mSK2tnku3wWJGBHwIxsqo=
Subject key identifier: AB:B7:6C:05:9D:8B:89:C2:7B:51:E6:B2:0F:6F:19:BC:5C:2C:BA:A9
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 01A0D200577B2906F8DBA39A59EC52CEFA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 1765
Signing time: Thu 24 Sep 2026 06:00:32 +0000
Manifest this update: Thu 24 Sep 2026 06:00:32 +0000
Manifest next update: Fri 25 Sep 2026 06:00:32 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: d0VVxJSzWUa6AtK7cPAX1hPvL9dUf72uxmw2I7oRk+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:57:7b:29:06:f8:db:a3:9a:59:ec:52:ce:fa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Sep 24 06:00:32 2026 GMT
Not After : Sep 25 06:00:32 2026 GMT
Subject: CN=abb76c059d8b89c27b51e6b20f6f19bc5c2cbaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:cb:e3:d8:57:be:10:36:5e:53:bc:fd:fa:
06:7f:6c:8e:15:a9:86:ed:29:71:09:09:0c:55:22:
93:85:84:03:cc:8b:cb:ef:25:88:06:f8:00:36:a2:
4a:dd:37:15:fb:c5:30:4f:d8:3b:ec:02:7d:9a:93:
42:b7:de:39:dc:ae:f0:3f:8f:03:0f:8d:2a:79:25:
a3:7d:d0:7f:fa:81:54:31:ed:4c:0c:d7:10:93:38:
f1:84:b6:60:bf:d9:69:68:13:ac:af:5e:d5:9a:92:
d9:99:78:0e:e1:a4:dd:72:4e:fd:a5:09:6e:da:d6:
ae:ed:b3:5e:a2:25:51:c5:0b:fa:f5:16:eb:d6:74:
aa:e8:7f:68:e2:7c:4c:0d:88:72:39:4b:0e:43:98:
2c:de:5a:35:5b:2e:40:8e:37:2a:2a:d6:f9:67:6e:
52:58:72:6d:10:d0:ae:02:34:0b:01:28:e9:61:ce:
0f:e3:49:dd:c0:e6:e3:0d:c1:37:3a:7d:04:52:64:
d7:66:71:20:49:e3:d8:dc:f3:f0:b9:7a:2b:32:4f:
22:9e:0e:f7:cd:22:32:c0:3f:39:3e:52:f8:04:8d:
35:b7:c3:4d:94:1e:1c:54:5c:50:31:d7:f6:ee:71:
21:d4:b8:01:49:dc:75:9b:6d:02:71:69:23:a9:6b:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B7:6C:05:9D:8B:89:C2:7B:51:E6:B2:0F:6F:19:BC:5C:2C:BA:A9
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e1:66:cb:94:66:71:50:de:43:44:a8:75:9b:c5:3b:58:1a:
65:2a:2a:2d:13:58:fb:6c:15:26:9a:1b:ae:b4:90:06:e0:fb:
0d:7f:7f:cf:e6:26:84:3b:47:62:9d:d7:3e:2e:02:0b:ba:d7:
67:c6:f6:ce:d9:97:20:1a:e6:49:84:b2:63:c9:8e:67:ea:ee:
36:24:e3:4f:8b:98:0b:e9:b2:b7:9c:61:77:1e:3f:ce:e7:a5:
77:e0:16:1b:60:db:0a:0e:db:e4:4a:75:38:6c:f2:a3:0c:21:
d8:65:07:74:c6:63:93:a9:05:2b:77:70:8f:68:bf:d1:38:7d:
24:dd:71:94:0a:d5:3a:db:b1:3f:a4:39:2f:e2:4e:b1:32:9a:
73:21:2d:e4:0c:b8:ff:62:b5:50:9a:c0:67:55:7c:96:65:a5:
1e:4f:e8:17:f5:be:78:7a:20:31:f3:3d:fd:1c:18:18:4b:1a:
d4:9d:7c:03:f9:24:0f:92:b7:4f:9c:05:9a:f4:a2:e7:dd:00:
24:d1:7b:2f:78:37:ed:6d:85:10:4f:8c:3d:b3:95:86:6f:ca:
43:f9:e7:bc:7e:af:dc:ec:75:96:80:56:e7:b8:e1:a1:6a:41:
e3:fb:55:6c:ea:95:5f:59:00:26:1d:3e:e2:05:69:f2:2d:0b:
cd:56:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:53:39 2026 by rpki-client