Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: ynzPykZJBnq0TvLVQKOIRA9kDbtLvp3d4V/FZQSW4Rk=
Subject key identifier: 75:3D:8E:3E:0B:15:F9:6C:6A:97:B1:14:D6:94:37:75:0F:69:1A:64
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 01A0EB89B73C21F4856ACDCAC3DBE0C4CD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 1171
Signing time: Tue 29 Sep 2026 05:01:05 +0000
Manifest this update: Tue 29 Sep 2026 05:01:05 +0000
Manifest next update: Wed 30 Sep 2026 05:01:05 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: Si61cblfAS6Z3WYuE3iK2uCThrRyXmqeMQkufbydMWI=)
2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:89:b7:3c:21:f4:85:6a:cd:ca:c3:db:e0:c4:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Sep 29 05:01:05 2026 GMT
Not After : Sep 30 05:01:05 2026 GMT
Subject: CN=753d8e3e0b15f96c6a97b114d69437750f691a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:2e:8e:9e:2d:50:64:eb:48:71:c8:f5:bf:
7a:5c:e2:63:0b:f7:b6:38:67:66:c1:47:c6:4c:6a:
59:b6:20:59:80:86:f8:1d:47:6b:95:00:42:8d:61:
65:83:a3:b2:91:c5:9f:26:10:92:98:9c:8e:5a:79:
c1:09:36:56:b1:43:bd:d7:00:ff:20:6a:c9:4a:1d:
80:26:3d:1d:1c:45:57:3b:87:37:ac:20:3e:60:16:
03:8f:52:9b:ce:c3:2d:47:dc:24:ed:de:74:9b:d4:
ad:9e:2c:b5:e6:27:78:ed:ef:31:35:35:f7:47:50:
a3:c3:56:4b:b9:06:42:0d:ff:84:df:cc:0e:74:6a:
a4:78:0d:cd:d7:25:57:05:40:6c:4e:9a:d3:37:aa:
76:e4:f7:34:c0:31:eb:46:aa:a0:d9:db:db:fd:37:
24:b5:85:16:5d:ed:60:ec:e1:76:85:41:04:4e:f6:
3b:17:68:92:ef:60:87:f3:c8:53:c5:08:94:09:16:
8b:64:10:c8:ef:65:f9:2c:85:b5:09:a1:6d:be:2d:
f5:b0:ed:e0:61:a3:d5:42:93:62:ac:f3:b8:00:bd:
c8:af:da:1a:65:79:54:ab:8f:fe:3c:01:b2:2c:95:
2e:58:19:46:b3:14:6f:f0:fb:91:8f:f6:fa:ac:76:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:8E:3E:0B:15:F9:6C:6A:97:B1:14:D6:94:37:75:0F:69:1A:64
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6b:9a:0e:9f:a2:a7:5c:d4:42:6c:ed:a1:98:1b:0d:39:3c:
57:70:9d:f8:fe:a8:8b:95:e8:d9:95:28:d4:7c:cd:9c:57:6c:
fb:a3:5b:a1:7c:25:9d:ce:b1:e6:1f:70:c6:c2:70:f9:fd:43:
73:47:95:c5:98:b9:64:b4:58:59:82:85:ea:a7:09:7b:d8:5f:
6b:82:f2:71:9a:bf:1e:7c:c5:66:eb:8c:dc:d6:13:d7:2f:8d:
71:9e:cf:06:9a:cb:53:00:bf:c5:06:a7:da:da:ba:99:8d:e1:
42:6c:e2:4b:91:72:f4:9e:c9:26:09:5a:4f:6d:5e:32:30:ed:
05:9c:f8:18:c6:94:75:e3:d1:56:dc:c5:02:6d:48:84:d3:26:
cb:7e:50:c5:19:da:db:38:1a:ae:75:a4:df:67:3c:24:fe:5c:
ec:0d:73:93:37:94:1e:d3:48:a2:37:3f:2d:91:25:f1:ec:6b:
e6:6a:8e:db:e2:27:97:a0:9f:c2:6a:67:d5:62:01:d1:f7:41:
3d:c5:f6:c1:08:9a:03:bc:93:2b:74:73:cd:9f:7f:91:23:14:
ea:e6:93:00:96:26:fc:11:76:6c:c0:04:57:d4:9c:cb:85:f3:
42:09:ff:6b:a1:20:4d:3a:02:25:b6:a1:ab:a4:69:c6:0c:90:
c5:2c:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:23:49 2026 by rpki-client