Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: 7wx3oZ5oAoQWxo7J2brCvAU/G4Epw3IVLTmYr/TMNQQ=
Subject key identifier: 47:0F:D6:E1:4E:2C:FD:D3:84:B9:64:99:97:7A:9C:62:B1:23:4E:75
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 01A0C10C8808411B19740F6F1399A39D8100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 1208
Signing time: Sun 20 Sep 2026 23:00:18 +0000
Manifest this update: Sun 20 Sep 2026 23:00:18 +0000
Manifest next update: Mon 21 Sep 2026 23:00:18 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: qPxKo3eLjNDKC0yf2Blq7wt0rGO+Ba5XYwKbQLMnwc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:88:08:41:1b:19:74:0f:6f:13:99:a3:9d:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: Sep 20 23:00:18 2026 GMT
Not After : Sep 21 23:00:18 2026 GMT
Subject: CN=470fd6e14e2cfdd384b96499977a9c62b1234e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:93:e9:84:fc:11:a6:38:09:31:9e:03:5e:
91:e7:8f:dc:c2:8d:68:52:5c:8c:b6:bb:6c:4b:e8:
4e:ec:e3:da:5e:eb:8a:18:a0:15:5e:fc:3a:2c:57:
58:fe:4b:32:1f:b1:9b:cc:21:5a:dd:8e:5a:b9:0f:
33:f1:49:d0:38:62:3a:2c:ef:4c:82:85:21:71:b3:
a1:a6:c6:04:e0:27:29:6e:be:48:49:ea:03:c4:c3:
e5:3f:8d:88:b2:93:64:00:d7:e4:40:fc:e8:8d:e4:
1a:6e:c9:b2:a3:89:7b:ac:d3:7d:eb:c0:19:75:ac:
85:45:6c:0d:a0:f1:90:6c:41:63:1a:a3:43:89:31:
bf:37:a4:f7:32:33:95:c6:b6:91:fe:90:03:12:45:
fe:bc:a1:22:18:ee:3a:90:ef:a1:7a:a5:47:2d:50:
3f:1b:f3:3a:a5:e0:67:f3:cb:ca:2e:27:03:91:80:
38:78:3c:d0:36:c6:01:4b:f1:c3:f7:f9:46:7b:16:
f4:53:f8:bb:5d:32:5b:5a:97:da:fa:c3:1e:12:a7:
57:33:73:24:e4:5a:86:26:bd:d6:33:12:40:bb:b8:
91:21:6d:fb:c6:e5:7c:3b:07:9e:89:08:8e:0d:29:
3d:e1:53:09:17:5f:2c:a6:49:16:7f:a9:09:22:29:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0F:D6:E1:4E:2C:FD:D3:84:B9:64:99:97:7A:9C:62:B1:23:4E:75
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0c:9c:ff:49:fb:13:4a:cf:fa:4d:1a:70:b9:d6:08:7f:d3:
c4:7e:36:2d:25:a5:82:77:03:0f:58:d2:67:d4:a9:8f:c1:93:
5d:a4:f9:49:e8:96:ae:04:55:1e:ae:62:ab:ad:51:06:4d:0d:
8d:18:a5:fb:c3:dd:c4:a0:42:fa:c8:a2:25:b7:c8:15:2c:d1:
6c:e1:42:91:a2:34:c7:25:84:c8:f0:df:1f:8e:74:7d:4a:06:
cf:ee:bc:59:66:8c:7f:02:14:6f:88:c5:ce:82:70:68:2e:70:
41:c7:74:75:fd:c1:39:84:af:74:62:69:e1:d0:6d:0f:7a:f6:
62:ef:ef:15:99:39:d0:45:c2:d5:0c:25:ec:46:aa:c8:a5:13:
fe:ae:12:90:79:a3:5d:26:cf:02:8e:6d:8b:75:66:0d:5c:cd:
e6:ac:bb:e6:26:8f:9f:42:c4:25:30:0b:73:9c:6f:da:67:64:
19:4a:2e:c0:48:33:78:9d:d5:19:f6:ae:35:5f:e6:96:9c:16:
d7:60:cb:40:9b:d8:0b:99:6a:0a:9c:72:9b:b0:3a:50:4b:3d:
5a:2f:d1:55:f0:fe:37:a3:7c:06:fe:44:37:7a:c7:ff:e1:37:
87:32:6e:a4:b6:5f:60:c1:3d:1c:a3:4a:3f:d7:0e:5f:d9:86:
d2:1e:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:53:30 2026 by rpki-client