Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier: ECnGPUUxKD8FmqMnseSO4YpSzCrQsxAoxZoPAS6Q7qo=
Subject key identifier: 54:CD:E2:D7:F0:C9:27:96:47:6E:FF:51:8B:90:9B:FF:27:74:CA:BA
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 01A0C6A0DE238A21FBB07F89C8DAD8197CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number: 13CD
Signing time: Tue 22 Sep 2026 01:00:26 +0000
Manifest this update: Tue 22 Sep 2026 01:00:26 +0000
Manifest next update: Wed 23 Sep 2026 01:00:26 +0000
Files and hashes: 1: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: 4pVsKJibrujXxCh1p1FRdaTDnTCtNLUF2KWV17JMjS0=)
2: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (hash: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:de:23:8a:21:fb:b0:7f:89:c8:da:d8:19:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Sep 22 01:00:26 2026 GMT
Not After : Sep 23 01:00:26 2026 GMT
Subject: CN=54cde2d7f0c92796476eff518b909bff2774caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:e3:fd:15:bb:00:a9:05:8e:65:97:38:9d:
7e:6d:a3:7c:9a:87:02:14:d0:0f:f0:b4:e1:6f:38:
5f:a4:68:01:05:28:ba:d4:2f:8f:28:1f:61:fd:cf:
e3:92:8a:a3:d7:bd:ad:00:a2:83:0e:94:4c:3b:ce:
2f:ff:fe:bf:2e:b1:a6:50:f0:23:56:ef:11:e5:bb:
52:f0:1e:89:04:a5:91:23:a2:61:9d:30:1d:df:bd:
da:7b:cc:1c:82:32:35:19:46:38:d5:72:73:f7:98:
30:47:71:83:4c:57:f6:54:84:43:e5:fb:99:f1:08:
a4:fc:73:00:1e:aa:c9:76:d2:c0:16:d4:51:7f:0f:
9b:0b:35:58:d0:75:28:33:1a:13:39:f1:be:9b:52:
4a:bc:6b:d2:c8:d1:74:ef:4a:f9:f1:68:70:1f:9f:
21:77:d9:27:d4:a0:0c:7d:63:d1:94:80:c0:22:f8:
a6:99:9b:32:49:b6:14:f7:17:54:0d:f3:4d:71:6f:
28:26:21:a1:fb:57:36:c0:86:30:05:d5:f4:e6:6f:
0f:77:75:ea:4c:22:ce:74:9b:00:2f:80:d2:87:a1:
51:de:7d:0d:7c:c5:e9:98:c2:82:ad:52:d2:82:36:
cf:2c:85:40:93:dd:ba:67:66:cc:e4:b4:6c:ec:ba:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CD:E2:D7:F0:C9:27:96:47:6E:FF:51:8B:90:9B:FF:27:74:CA:BA
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:51:93:9f:f9:e3:01:3b:f7:4c:d4:bd:00:e2:1e:c5:f5:e9:
7f:6c:e3:fe:36:79:1e:83:51:b1:92:e6:38:b2:11:20:c6:5d:
15:67:a6:56:9b:5b:71:81:4e:b9:4f:0b:e6:dd:7e:77:1b:ca:
92:be:19:33:f7:36:59:9b:05:58:24:c5:62:99:a6:67:eb:62:
48:a0:d2:e7:c4:b3:de:a8:70:ee:4f:9d:88:93:38:4e:6d:ec:
d2:27:43:e1:78:d3:e1:cc:22:5a:87:61:dc:b7:61:97:01:45:
b9:89:fc:9c:72:de:40:c5:0d:75:ce:29:cf:b6:51:10:5a:5b:
c3:0f:68:ab:73:31:dc:87:d4:6b:80:90:60:ce:ca:7e:0a:6c:
79:1d:50:80:7a:0f:b6:18:c1:1a:f7:2e:74:2f:c1:1e:05:47:
d5:54:57:7b:7a:f6:6f:6b:c8:f4:9d:39:e0:07:00:7a:29:c1:
1a:ed:1b:67:7d:2d:d7:cd:06:69:e0:af:3e:fb:ff:6e:3c:72:
ea:38:34:8d:1a:ca:ad:7f:ff:d5:a1:99:38:ac:ad:6f:c9:49:
b8:23:71:d8:f6:8e:f2:69:89:ce:61:fb:3a:8f:bf:7a:b1:28:
ac:c6:63:6f:8c:12:91:96:de:40:a2:e7:2a:de:a4:86:f5:89:
da:0d:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:41:14 2026 by rpki-client