Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File: 8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier: MPfW4BfEtK2zMdrfm5tepQSO7+pRzZyjQqqgi30+sjw=
Subject key identifier: 04:C8:42:47:A2:C0:F3:DB:DC:A6:C6:B7:CD:AE:B7:C8:0F:4B:7B:4D
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer: /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial: 01A0C368BACDA09AA45E9D5D90FEF619B94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number: 0654
Signing time: Mon 21 Sep 2026 10:00:15 +0000
Manifest this update: Mon 21 Sep 2026 10:00:15 +0000
Manifest next update: Tue 22 Sep 2026 10:00:15 +0000
Files and hashes: 1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: WtuzOzDheea5A/AqA2UFYqL9C4DY1z+dWej4ol3V/Oc=)
2: B9dQBunPgCxrLiUL8opifDj2bOM.roa (hash: fWD90xCndzZ4WlkSeFBibUlZH38mskA/RfgbZjV3SFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:ba:cd:a0:9a:a4:5e:9d:5d:90:fe:f6:19:b9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Validity
Not Before: Sep 21 10:00:15 2026 GMT
Not After : Sep 22 10:00:15 2026 GMT
Subject: CN=04c84247a2c0f3dbdca6c6b7cdaeb7c80f4b7b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:87:2a:45:01:65:0a:42:62:8b:4c:80:fd:
ef:c8:25:1d:8c:1b:23:c0:ad:af:99:05:9e:c8:a1:
77:62:b8:7c:14:6c:5a:57:91:17:41:dc:9a:22:e6:
1e:43:41:2a:35:0f:bf:48:fa:8f:8b:c9:75:94:9c:
2c:d8:55:4f:cb:cb:ca:4d:49:38:24:39:5d:a4:e8:
68:b7:bc:27:59:9c:85:55:24:b3:15:da:3a:69:8c:
83:e5:a1:e8:31:46:6f:6f:e6:cf:9d:c0:ab:35:88:
68:e7:68:64:d1:c4:41:c6:96:95:b9:3c:35:57:05:
43:f7:cc:ec:68:d5:76:9c:13:b7:52:f8:83:5e:39:
4d:cd:8d:30:08:6a:34:91:af:56:e8:73:18:70:7a:
4b:ca:7b:b7:f4:a3:81:6e:4e:43:68:fa:3e:8a:d8:
0f:55:e6:23:0b:6a:4e:5f:86:4d:43:9e:0e:72:8f:
f1:f7:99:90:84:a4:cb:78:2c:15:90:19:52:cc:6a:
ab:1d:36:ff:cf:9d:0b:e6:a6:51:48:f3:f9:71:6d:
82:5f:70:79:22:de:96:d5:42:f7:da:30:5b:a5:96:
af:a4:12:4c:e0:47:01:11:14:12:cc:bb:81:4a:84:
05:3d:d4:5e:69:7e:01:2f:78:61:5b:91:78:5c:4c:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:42:47:A2:C0:F3:DB:DC:A6:C6:B7:CD:AE:B7:C8:0F:4B:7B:4D
X509v3 Authority Key Identifier:
keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:69:e7:36:ab:62:28:7e:55:71:ec:da:c7:52:ec:c2:b8:62:
08:10:75:46:a2:15:00:53:f9:ca:d1:6e:9e:3a:0e:39:2d:56:
39:ed:cf:f1:7a:23:52:92:9a:a1:1a:c0:43:ae:12:d4:c9:6e:
41:41:4f:03:8f:8d:6e:66:e7:6b:7e:1e:81:b5:f3:17:98:34:
5f:cc:f4:74:47:8f:71:a9:d3:1d:00:91:b7:d5:b5:2b:94:86:
a5:cd:7a:29:7b:de:17:de:27:b0:26:24:aa:8b:dc:fa:d2:91:
42:a0:e3:69:bf:0a:fa:db:a1:c6:75:6e:6f:bb:f8:f3:3d:59:
ff:d5:96:5d:77:27:0b:17:39:62:e0:64:00:87:ed:a6:27:15:
26:ae:d1:c2:b3:2f:bb:19:cd:a4:b4:6d:c1:bd:82:24:83:ea:
e8:1f:0f:24:c1:90:56:ba:f6:d8:df:e7:8d:2e:53:28:38:41:
7c:ed:d3:ba:8b:71:67:ce:60:74:eb:fa:50:00:5a:87:a3:e3:
33:ea:62:bc:46:21:43:29:63:ea:93:70:5a:95:71:89:6c:17:
88:39:8a:a6:63:ee:b5:f7:fd:1d:8f:53:d4:af:98:99:f3:9a:
1c:89:8f:67:07:9d:33:8a:c5:50:80:72:65:7f:05:57:fa:b5:
84:c4:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:04:54 2026 by rpki-client