Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier: +LaXtNOq+/MZXNVjpXsWYbpEeiw9nIBcTqG0weJN6EQ=
Subject key identifier: F6:D3:9D:4C:66:AF:F6:72:0F:3F:1D:7D:9E:5E:EB:75:35:E1:15:5E
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 01A0C9D9973EE996CFC5D8A97A384573B91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 16:01:15 +0000
Manifest this update: Tue 22 Sep 2026 16:01:15 +0000
Manifest next update: Wed 23 Sep 2026 16:01:15 +0000
Files and hashes: 1: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: +Y0aPcvyDQo0vaRpdTqpFpJZyVbv8atrU7Y3sin2Fxw=)
2: 8hVawCDbKfLGVmy8uR3L6HSyhjY.roa (hash: YVD0bBTAjI7+lAMuKAykSFrhVddz0zyQETcTt1yWfGY=)
3: bo4jTmLbavInVB1_Xe56jT6duFc.roa (hash: DrLAswJfulupBgy+nF1dC9JnLY+ojBgEGF1LnkBTmLQ=)
4: l9mq3dtlYUJYwqPz2hM7UKcrn8U.roa (hash: HVy6JnYfA7DiKZs/nj6ujUr8Qm/xOl9atbOQ23YdxGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:97:3e:e9:96:cf:c5:d8:a9:7a:38:45:73:b9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Sep 22 16:01:15 2026 GMT
Not After : Sep 23 16:01:15 2026 GMT
Subject: CN=f6d39d4c66aff6720f3f1d7d9e5eeb7535e1155e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:1e:b6:78:5e:02:f7:e8:48:ea:99:d8:25:
a8:0c:1b:09:a4:7c:85:a4:5b:0a:86:d8:75:0c:8c:
10:a4:77:43:c4:ae:44:41:b6:f7:39:fd:44:c7:fc:
17:9d:4a:6d:fd:ac:f7:31:18:31:6e:1c:02:ae:d3:
59:6c:18:a7:54:bb:88:64:4e:62:b4:2a:0b:d8:e4:
0c:52:4f:92:40:f9:dc:bc:86:aa:80:b1:77:96:c4:
86:ac:3e:86:c7:6b:7f:1e:d0:25:0a:4c:5a:13:99:
f2:26:94:e7:72:dd:a4:4d:60:08:46:42:0f:3d:5c:
78:cf:b6:ac:03:d9:b7:4f:3b:30:c8:90:59:38:8d:
26:50:3b:d5:da:e4:bc:56:13:d3:2e:32:71:12:77:
6c:e4:90:6e:b3:58:e1:1d:53:ac:8b:6d:f6:0c:17:
0a:5b:83:91:f2:ac:c3:01:a8:0c:5a:6c:a7:20:f8:
8b:f6:5d:2a:f2:55:89:c4:bc:6d:2a:58:ca:59:46:
5c:af:19:c7:85:be:f0:a4:db:03:31:54:d8:d8:db:
d4:20:5f:82:11:4f:28:69:5b:56:c5:69:6f:60:98:
a5:8c:0b:22:74:68:ab:c6:61:c0:8d:24:3d:24:91:
ed:06:80:15:47:78:8d:27:38:57:72:b8:64:92:ad:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D3:9D:4C:66:AF:F6:72:0F:3F:1D:7D:9E:5E:EB:75:35:E1:15:5E
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c7:b5:eb:24:2e:0a:f9:ac:f3:f3:48:84:1c:54:99:62:1c:
c2:80:5b:90:a8:ba:ef:8f:d9:7f:b3:99:ea:e5:f2:17:5c:99:
2e:c7:a8:1e:32:25:ba:54:e6:5f:f0:c4:19:5d:83:23:af:ce:
f1:9a:15:eb:7a:4a:50:f2:fb:71:0a:84:f9:ab:73:19:43:41:
84:e9:b4:b0:41:db:c3:23:fc:f3:79:84:57:66:b5:f7:23:15:
5a:8b:70:84:80:6b:18:e6:18:f6:be:b9:1b:ad:01:ea:a8:79:
1c:82:49:6e:ec:12:f3:7b:7f:63:fd:c9:03:f0:17:a3:3a:ea:
7a:2e:e7:d4:f9:8d:97:5b:15:59:dc:4c:cd:38:85:3a:1e:74:
26:4a:ef:38:06:3e:8b:8c:ad:51:ef:ff:4a:cc:5e:72:27:65:
3a:84:e3:01:0a:4f:09:6a:96:60:a0:43:90:1e:34:b2:00:2a:
ab:c6:f2:04:5b:3f:18:77:d4:78:42:d5:d9:64:3f:ea:5f:4e:
c8:da:5e:4b:90:c4:1f:64:c2:1c:8e:d1:e0:eb:60:a8:e2:1b:
12:cb:06:b1:bb:9f:b2:19:82:11:5b:83:81:bf:af:ac:ae:9e:
ce:80:6d:23:5d:cd:93:e4:80:d0:4a:0c:d3:3e:6e:b6:e7:6d:
ae:8a:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:37:31 2026 by rpki-client