Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File: 8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier: TfyEVtt4/KSMHIHf/bhEDsTuz8FuGq6PhHDEoNFhtRI=
Subject key identifier: 40:51:7E:22:5F:F7:4D:69:A2:85:79:3A:15:AB:EC:44:08:4D:AC:6D
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer: /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial: 01A0C3D6AB7DEF97AD568A0389477CF1465A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 12:00:20 +0000
Manifest this update: Mon 21 Sep 2026 12:00:20 +0000
Manifest next update: Tue 22 Sep 2026 12:00:20 +0000
Files and hashes: 1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: TmpboeuUkSlUulmixw4XGAhHS0eY98VcEiPnaxKPDAs=)
2: wwgOSiyDJCbc4Dd25-hiHFFVydI.roa (hash: 5sAIyPhih2yo/oCUdeqXVJ32SO2GS5hm7rjgamDiLJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:ab:7d:ef:97:ad:56:8a:03:89:47:7c:f1:46:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Validity
Not Before: Sep 21 12:00:20 2026 GMT
Not After : Sep 22 12:00:20 2026 GMT
Subject: CN=40517e225ff74d69a285793a15abec44084dac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:fd:ee:3e:1c:f6:f9:be:b9:f7:8b:35:51:
46:5e:f5:bb:3c:a1:9e:c3:bb:33:3f:0e:e2:c0:4b:
af:ec:a5:00:1b:49:1c:7b:24:85:37:84:a0:be:33:
7c:d1:2f:b8:9c:bf:3a:87:98:c5:b9:d0:06:09:a0:
eb:96:29:76:4a:1b:4c:79:46:f1:72:57:2c:07:66:
19:4f:9e:b4:cd:dc:27:7d:6c:5c:27:7b:20:63:60:
1b:22:2b:99:c2:76:7a:54:13:c9:dd:64:cb:65:8b:
88:8f:ec:59:10:18:47:bd:c6:35:ca:f0:f4:37:bf:
79:98:d3:26:a2:46:db:c1:9d:cb:1b:48:ae:d1:cf:
5f:a9:80:6d:d3:cf:6f:01:d9:c3:c8:63:cc:20:1a:
cb:86:43:ff:e1:71:09:da:c0:ad:d2:bc:cb:ad:89:
84:66:d1:94:77:01:b4:78:af:fc:d9:8a:bd:61:64:
c8:b4:ff:cd:3a:bb:56:64:ac:01:d0:3b:16:a0:56:
5d:24:7e:56:3f:c2:83:51:53:88:b5:29:24:b3:ec:
c6:4c:20:eb:f2:38:9e:a5:cb:ab:f6:8f:1a:6c:44:
ae:f3:94:4e:a1:5f:53:21:82:80:15:b9:ae:6e:cf:
3a:7b:b7:0f:81:d5:fb:f5:33:7e:e7:b3:b1:f1:5a:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:7E:22:5F:F7:4D:69:A2:85:79:3A:15:AB:EC:44:08:4D:AC:6D
X509v3 Authority Key Identifier:
keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fa:07:44:e7:67:cf:bf:bf:90:1f:db:54:9b:b7:3d:30:57:
56:39:91:1d:df:ac:a4:16:23:55:cd:b0:bd:03:2b:74:fc:63:
5c:17:fc:c5:3b:1d:03:de:70:12:48:b9:a2:1d:e8:2b:23:98:
5f:54:31:d6:9a:b8:26:cb:ca:5e:e8:6b:0f:b2:65:c9:1a:de:
ea:ff:10:49:00:39:18:61:21:7c:08:da:f5:b6:9b:b5:e5:bb:
b2:fb:6b:a3:5c:6e:a5:9d:ea:d3:59:d1:28:b8:ee:95:3d:5a:
0e:b8:14:4a:c4:d0:1a:3b:9d:cb:4f:a5:1b:1e:ef:f5:a7:bd:
8b:a4:57:14:c2:68:6c:31:b6:b1:58:4b:f3:6e:85:c2:be:17:
6d:46:89:7e:8f:25:e1:d6:47:3b:fe:2f:8f:f0:66:b3:f7:a6:
0d:cd:31:59:97:99:ad:11:28:a2:d3:18:f9:e9:a3:41:89:8e:
25:17:c6:3f:8c:7d:64:8a:1e:04:c7:b0:c2:ed:46:e7:f4:bd:
00:39:46:bb:ec:8a:4a:35:a7:a2:b5:d4:c8:4c:fc:a1:76:c8:
43:b7:e7:bd:0e:14:cf:d4:19:31:f7:e8:bc:11:47:5b:08:99:
23:65:69:e3:12:16:ae:6d:5d:ec:f7:a4:49:26:9c:2d:66:0b:
35:71:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:43:21 2026 by rpki-client