Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: lvKagC5zISgW8I90/ZwFxDl9kOA2xEES9AECQBPOEjg=
Subject key identifier: E8:56:05:F8:60:85:C7:89:AA:B5:AE:47:89:23:02:DD:31:4E:F7:F4
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 01A0C9341C547475F721CE79AC77C8C75442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 0A69
Signing time: Tue 22 Sep 2026 13:00:30 +0000
Manifest this update: Tue 22 Sep 2026 13:00:30 +0000
Manifest next update: Wed 23 Sep 2026 13:00:30 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: DZEb0CrZadXcyhO4ObEyQuVDOdWe9mQH/UNz6p9s9xU=)
2: CJhFdSugh2xrtXcQtigps8wHu28.roa (hash: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:1c:54:74:75:f7:21:ce:79:ac:77:c8:c7:54:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Sep 22 13:00:30 2026 GMT
Not After : Sep 23 13:00:30 2026 GMT
Subject: CN=e85605f86085c789aab5ae47892302dd314ef7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:d8:d9:2c:60:58:a3:10:eb:02:f7:0a:01:
c4:e7:a0:12:51:03:17:3b:3e:e6:7b:91:ed:d1:4d:
48:fb:63:ac:d7:1d:1a:fd:46:73:bf:68:41:46:3a:
d4:42:57:b1:bd:b2:a9:9f:a8:f3:8e:0d:37:cc:e4:
87:07:2a:b2:3a:6c:c7:6a:c8:57:c5:c5:9a:2e:db:
03:dd:d1:23:7e:97:82:02:ed:82:0b:49:71:ee:c3:
60:99:e9:62:08:58:54:44:73:e3:42:4a:3b:06:a2:
29:06:92:70:74:c3:3f:b4:db:c4:07:f7:b4:3c:6b:
27:f4:e1:a9:3a:56:fd:55:a5:ac:a5:85:ab:5e:16:
88:f3:c6:99:93:08:9f:dc:51:1d:45:fe:de:db:30:
74:32:7d:a5:0d:16:8b:4e:f5:ce:8a:af:ce:55:04:
b1:b7:aa:23:d6:5e:ca:ad:01:9c:60:6e:26:87:8f:
5e:d2:6d:cf:fb:10:f1:66:ce:d4:f0:da:76:59:a3:
08:94:8b:39:7b:a1:98:6a:8a:b3:8b:ad:40:63:30:
ef:e7:ab:53:21:40:11:f8:04:65:b6:5f:32:53:66:
5f:6a:9a:82:99:d1:4e:a1:24:c3:09:41:15:c1:04:
37:d1:44:94:3d:9c:f2:cc:78:90:eb:77:6e:ef:46:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:56:05:F8:60:85:C7:89:AA:B5:AE:47:89:23:02:DD:31:4E:F7:F4
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ea:9d:90:81:8f:69:61:07:88:16:45:aa:0b:47:a9:0b:49:
7a:ca:a2:55:5c:b4:26:e8:75:e7:06:e1:94:25:06:44:f0:d2:
03:d9:66:bd:50:28:e4:1f:fc:56:e0:b0:9b:26:da:d6:72:b4:
4f:d1:d8:70:b8:8b:8a:b6:bf:cf:0f:08:c0:31:46:b4:62:a0:
f4:54:45:22:95:72:3c:44:67:fb:55:71:06:f3:bb:1b:21:21:
87:60:53:72:b0:31:77:47:08:ca:fc:8d:04:fc:5d:40:99:79:
f2:2a:89:d7:ac:94:ce:7d:3b:a1:95:74:be:df:3e:74:61:fb:
8e:97:1f:cd:74:43:e8:f6:66:e4:75:8d:89:46:77:08:0d:e4:
80:d7:89:37:0f:5f:a6:65:09:37:c2:37:d4:2f:f1:f0:4a:ab:
dc:82:b2:0c:83:e4:9f:f7:e1:4f:5a:b8:ac:c8:36:71:08:3e:
b2:33:4a:6b:b0:f6:b9:f7:b7:e9:c4:da:df:57:2d:b7:b1:1a:
d8:9e:06:fb:03:07:dc:49:8a:1c:27:cd:e0:f4:3a:42:05:72:
ed:0b:a9:92:cf:d2:fc:10:72:6a:9a:1e:40:b4:14:a2:33:6f:
d9:01:98:02:eb:e3:13:e2:48:2e:18:52:78:91:b9:a8:0d:c2:
bb:90:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:47:03 2026 by rpki-client